How to cleanup ScanMail email messages that were temporarily quarantined for advanced threat analysis?

Views:

If ScanMail installation/uninstallation is initiated while there are lots of email messages quarantined for advanced threat analysis, these messages will not be removed. To handle these email messages, ScanMail automatically launches a separate tool: "toolDDAnQuarantinedMailsCleaner.exe". Usually this tool runs successful and without any issue. However, if there is any exception occurs during installation/uninstallation, you may need to run this tool manually.

Procedure

Run CMD.exe with local administrators rights.
Switch to ScanMail home directory.

Do one of the following:

If the tool execution is unsuccessful during installation, use the following command to execute the tool:

toolDDAnQuarantinedMailsCleaner.exe install [SMEX_TEMP_QUARANTINE_PATH]
Note

Replace:

[SMEX_TEMP_QUARANTINE_PATH] with suspicious files quarantine path
For example:

toolDDAnQuarantinedMailsCleaner.exe install "C:\Program Files\Trend Micro\Smex\storage\quarantine\Advanced threats\temp"

If the tool execution is unsuccessful during uninstallation, use the following command to execute the tool:

toolDDAnQuarantinedMailsCleaner.exe uninstall
                                 [SMEX_TEMP_QUARANTINE_PATH]
                                 [SMEX_WTP_TEMP_QUARANTINE_PATH]

Note

Replace:

[SMEX_TEMP_QUARANTINE_PATH] with suspicious files quarantine path
[SMEX_WTP_TEMP_QUARANTINE_PATH] with suspicious URLs quarantine path

For example:

toolDDAnQuarantinedMailsCleaner.exe uninstall "C:\Program
                                 Files\Trend Micro\Smex\storage\quarantine\Advanced threats\temp"
                                 "C:\Program Files\Trend Micro\Smex\storage\quarantine\Advanced
                                 threats\SuspiciousURLs"

Keywords: removing quarantined email messages