Procedure

1. After you perform a query for quarantined messages, click the timestamp for an item in the query result table. The Quarantine Query screen appears showing the following information:
   • Timestamp
   • Sender
   • Reason
   • Recipient
   • Rules
   • Subject
   • Scanner
   • Original Size
   • Message ID
   • Internal ID
   • Attachments
   If ATSE or Social Engineering Attack Protection is enabled, IMSVA also displays the following information:

   • Reason: Probable advanced threat

   If both ATSE and Virtual Analyzer or both Social Engineering Attack Protection and Virtual Analyzer are enabled, IMSVA also displays the following information:

   • Reason: Probable advanced threat or Analyzed advanced threat
   • Virtual Analyzer Status: Status of Virtual Analyzer analysis
2. Next to Message view, click either Header or Message.
3. Click any of the following buttons:
   • Back to List: Return to the query screen.
   • Deliver : Resend the message to its original recipients.
   • Reprocess: IMSVA scans the message again and acts accordingly.
   • Delete: Delete the message.
   • Download : Save the message to your computer.

   Tip Trend Micro recommends not saving messages or attachments that violated an antivirus rule.