Delayed Attachment Notification and Release

This article presents an overview of how to release messages that are delayed because they contain Potentially Malicious Attachments (PMA). For a more information about this, including a list of impacted attachment types, please see Delaying Potentially Malicious E-mail Attachments.

When the system identifies a message addressed to you with a PMA:
  1. You will receive a notification email from DU Message Scanner (see an Example Notification Email below).
  2. You may choose to release the message at that time or you may allow the system to automatically release and rescan the message approximately 4 hours after it first arrived. In either case, please leave the notification email in your Inbox.
  3. Shortly after releasing the message you’ll receive the original email which will include the attachment that had been sidelined for scanning.
  4. Once the message has arrived, you may delete the notification message.
  5. If you do not receive the original e-mail with the attachment. Please see the FAQ below.

Example Notification Email

When a notification arrives in your Inbox it will look like this :

From Subject
DU Message Scanner University of Denver Quarantined Message Notification

When it is open, it will appear similar to this:

Subject: University of Denver Quarantined Message Notification
From: DU Message Scanner <pmx@du.edu>

The following messages have been quarantined because they contain attachments that have been demonstrated to be potentially malicious. For more information please see:

Delaying Potentially Malicious E-mail Attachments

Such messages are currently held for a period of approximately four hours, after which they are rescanned. If they are still found to be clean they will be released for delivery.

To request the early release of a message from the quarantine, click on the message's ID and send the request. For an early release of all messages in the list, you can simply reply to this message.


Important Notice:

If you choose to release a message early it is important for you to realize that you are subjecting your data and your computer to an additional level of risk. If the released message results in loss of, or inadvertent disclosure of information on your computer, the responsibility for the subsequent clean-up, repair, and/or recovery of your damaged system rests with you.

In any case, to protect yourself and others, please take extra precautions with all files downloaded via the network or received via e-mail.


ID Time Size From Subject
[#geu9Eg-1] 03:12 23.7K grumpy@example.com Final results << Here is the data

University of Denver
University Technology Services
Network Security Email: info-security@du.edu
Phone: (303)871-4940

Back to top

FAQ

I got a message with an attachment, but never received a notification. What happened?

There are a couple of possibilities.

One is that the attachment is not one of the ones that is delayed for rescanning. Check the list of delayed attachment types here:

Delaying Potentially Malicious E-mail Attachments

Another possibility is that the notification email landed in another folder than your Inbox. Check your Junk folder. If you use an e-mail client such as Outlook or Thunderbird, and you have enabled filtering, your message may have been directed to a folder other than your Inbox. If so, please check your other folders as well.

If, after checking, you still believe there is an issue please retain the message with the attachment, we will need information from that message to diagnose any problems. To notify us of the problem please contact Support.
Top of FAQ

I got a notification and released the message but never received it in my Inbox. What happened to my message?

Be sure to recheck your Inbox. Some e-mail cleint programs sort the Inbox by date received by the system. Since these messages can be delayed, they may appear before messages that have arrived in your Inbox during the delay.

Check your Junk folder. If you use an e-mail client such as Outlook or Thunderbird, and you have enabled filtering your message may have been directed to a folder other than your Inbox. If so, please check your other folders as well.

If, after checking, you still believe there is an issue please retain the notification, we will need information from that message to diagnose any problems. To notify us of the problem please contact Support.

Top of FAQ

I got a notification and released the message, but received an error message. What happened to my message?

Most often, when you receive an error message when attempting to release a message, it is because the message has already been released by you or the system. Please examine the notification message and check to see if you have not already received a message from the sender and subject described.

If, after checking, you still believe there is an issue please retain the notification and the error message, we will need information from these messages to diagnose any problems. To notify us of the problem please contact Support.

Top of FAQ

When I received the notification, I did not request a release of the message and allowed the message to be rescanned by the system. I never received the message with the attachment. What happened?

In this case the delay did its job. During the delay, the system updated Anti-Virus, Anti-Spam and/or Anti-Fraud signatures. When the message was rescanned the system deleted the message rather than delivering it to your InBox.

Top of FAQ

Support


If you have questions that are not answered in this article, the FAQ or Delaying Potentially Malicious E-mail Attachments please contact the Help Desk at 1-303-871-4700 or by filling in this form.

Back to top