Viewing Query Results and Taking Action

The Quarantine Query Results screen displays the following information about the messages:

Scan time
Sender
Recipient
Subject
Reason: The reason the email message is quarantined.
File name: Name of the blocked file in the email message.
Quarantine path: The quarantined location of the email message. Administrators can decrypt the file using VSEncoder.exe (See Restoring Encrypted Files) and then rename it to .eml to view it.

Warning:
Viewing infected files could spread the infection.
Resend status

If you feel that a message is unsafe, delete the message.
Warning:
The quarantine folder contains email messages that have a high-risk of being infected. Be cautious when handling email messages from the quarantine folder so that you do not accidentally infect the client.
If you feel that a message is safe, select the message and click the resend icon ().
Note:
If you resend a quarantined message that was originally sent using Microsoft Outlook, the recipient may receive multiple copies of the same message. This may occur because the Virus Scan engine strips each message that it scans into several sections.
If you are unable to resend the message, it is possible that the system administrator’s account on the Microsoft Exchange server does not exist.
1. Using the Windows Registry Editor, open the following registry entry on the server: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion
2. Edit the entry as follows:
  Warning:
  Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on your computer.
  - ResendMailbox {Administrator Mailbox}
    
    Example: admin@example.com
  - ResendMailboxDomain {Administrator’s Domain}
    
    Example: example.com
  - ResendMailSender {Administrator’s Email Account}
    
    Example: admin
3. Close the Registry Editor.