I had a customer that had a “virus detected” warning pop-up on the server every morning. She tried to do LiveUpdate (as the warning suggested), but it would fail (the AV is way out-of-date). She was sure there was a problem with the definitions. I checked the server, and all the definitions on the server and clients were current. I got to looking, and it appears the alerts were coming from viruses in the server’s quarantine. Apparently a virus had been detected and cleaned, but when the backup job would try to access the quarantine, it would see the virus and pop-up the warning message. I cleared the quarantine and the pop-ups stopped.