Contents

Overview

Example Notification Email

FAQ

Support

The messages listed in this notification contain attachments of a type that have historically been used to exploit computer operating system and application vulnerabilities for which software vendors have been slow to release patches.

As an added layer of protection for your computer and its data, the mail system has deferred the delivery of these messages. After approximately four hours the system will rescan the messages and, if they do not contain a recognized threat, deliver them. Messages that do contain a threat will be automatically deleted.

After reviewing the messages below, you can request an early release of one or more messages:

• By clicking on the bracketed information, the Message ID, in the list of deferred messages. The click will generate an email to send to release the message. Send it.
• Or by replying to this notification, leaving the text below this line in your reply (the information is needed by the automated system that releases the selected messages). If there is more than one message in the list and you do not wish to release all of them at this time, please edit your reply and delete the Message ID for the emails you do not wish to release.

Message ID Received Size From Subject << Snippet [#1cYM-1] 8/31 02:54 28.3K grumpy@dept.du.edu Final version << I've attached the final version. [#1dYI-1] 8/31 02:39 28.2K sleepy@email.com Trial results << Here is the spread sheet of the

---

Important Notice:

Early release messages are not rescanned by the mail system. Please be sure your anti virus program is running and up-to-date.

If you choose to release a message early it is important for you to realize that you are subjecting your data and your computer to an additional level of risk. If the released message results in loss of, or inadvertent disclosure of information on your computer, the responsibility for the subsequent clean-up, repair, and/or recovery of your damaged system rests with you.

In any case, to protect yourself and others, please take extra precautions with all files downloaded via the network or received via e-mail.

---

For additional information, including a current list of impacted attachment types, please see:

Delaying Potentially Malicious E-mail Attachments

University of Denver
University Technology Services
Information Security Email: info-security@du.edu
Phone: (303)871-4940

There are a couple of possibilities.

One is that the attachment is not one of the ones that is delayed for rescanning. Check the list of delayed attachment types here:

Delayed Attachment Notification and Release

Another possibility is that the notification email landed in another folder than your Inbox. Check your Junk folder. If you use an e-mail client such as Outlook or Thunderbird, and you have enabled filtering, your message may have been directed to a folder other than your Inbox. If so, please check your other folders as well.

If, after checking, you still believe there is an issue please retain the message with the attachment, we will need information from that message to diagnose any problems. To notify us of the problem please contact Support.

Be sure to recheck your Inbox. Some e-mail client programs sort the Inbox by date received by the system. Since these messages can be delayed, they may appear before messages that have arrived in your Inbox during the delay.

Check your Junk folder. If you use an e-mail client such as Outlook or Thunderbird, and you have enabled filtering your message may have been directed to a folder other than your Inbox. If so, please check your other folders as well.

If, after checking, you still believe there is an issue please retain the notification, we will need information from that message to diagnose any problems. To notify us of the problem please contact Support.

You can receive an error message if your request arrives after the message is already released or there is a problem in the content or format of your release request.

1. 1. If the above error is similar to one of these:
      
      "Cannot approve message '1406914-1': quarantine error"
      Or
      "Could not find record of digest '763ad60672073c025966ea'"
      
      This type of error indicates that a message has already been released, either automatically or by request.
      
      Please check your Inbox to see if you have already received the
      message in question; you may also wish to check your Junk mail
      folder in case the message was categorized as spam.
   2. Or, if the above error is similar to one of these:

If, after trying the above suggestions, you still believe there is an issue please retain the notification and the error message, we will need information from these messages to diagnose any problems. To notify us of the problem please contact Support.

In this case the delay did its job. During the delay, the system updated Anti-Virus, Anti-Spam and/or Anti-Fraud signatures. When the message was rescanned the system deleted the message rather than delivering it to your InBox.