Hi Andy,
To reprocess files through Declude place the matching pairs of Q*.smd and D*.smd into the \proc folder. You can move them together however if it is a lot of files you may want to move the D files first then the Q files. The best way to do it for IMail is to use Invariant Systems free application http://www.invariantsystems.com/download/movefiles20.zip The \Review folder holds messages that were busy being processed when Decludeproc was stopped. Move old files from the \work to the \review then move all the matching pairs to \proc. There is no circumstance to move messages to the \work. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax <mailto:dbar...@declude.com> dbar...@declude.com -declude -dnsstuff From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: Wednesday, September 15, 2010 11:22 AM To: declude.virus@declude.com Subject: [Declude.Virus] Need Help - How to Rescan Messages Importance: High Hi, I had an issue overnight that caused many hundreds of messages to be moved to the /Spool/Virus folder (Q* and D* pairs) and to the /Spool/Proc/Review folder (Q* files only). Question - how to I cause these files to be rescanned (as some may be REAL Trojans). Where do I move Q/D pairs from the /Spool/Virus folder? Do I move the "D" file to the /Spool folder and the "Q" file to the /Spool/Proc folder? Or do I move BOTH the Q & D file to the /Spool/Proc folder? What about the Q files in the /Spool/Proc/Review folder - do I just move them to /Spool/Proc, or to /Spool/Proc/Work? I checked one file and it seems the matching D file was in the /Spool/Proc/Work folder! Best Regards, Andy --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
image001.png
Description: Binary data
image002.png
Description: Binary data
