You'll never know. The file based virus scanner either deleted/quarantined the file, cleaned it (outside chance), or wasn't able to do anything at all to it because the Exchange store consumed it before the AV scanner could act.
This is why you use an Exchange integrated AV scanner - it actually knows what an email message is and how to tell you things about it. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Hackney Posted At: Friday, April 02, 2004 10:28 AM Posted To: Microsoft Exchange Conversation: tracking messages Subject: RE: tracking messages Unfortunately not possible in this instance as I A) don't know who the sender is B) don't know who the recipient is. This comes from an AV program notifying me that a virus found in located in mailroot\....\queue I know I know I know - v BAD. I've since upgraded the AV to be exch aware so and prevented scanning of that directory but was interested in finding the email before the user did. There is a possibility that the file was deleted I guess. I'll probably never know now. -----Original Message----- From: Ed Crowley [MVP] [mailto:[EMAIL PROTECTED] Sent: 02 April 2004 17:23 To: Exchange Discussions Subject: RE: tracking messages I usually just track by sender or recipient and locate the message I'm looking for in the list. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Hackney Sent: Friday, April 02, 2004 12:28 AM To: Exchange Discussions Subject: tracking messages I'd like to be able to search for certain messages within Exch2k. I have enabled message tracking and know it is working. What is the relationship between the file name eg NTFS_79E17CA401C412AD0000F922.EML and the message id? I've tried cutting off the extension and the NTFS_ but still cannot find the message. I've also looked thru the logs and it does not seem to correspond. Any pointers? thanks Rob This email is confidential and intended solely for the use of the individual(s) to whom it is addressed. It should not be deemed to constitute a binding contract between TKC Group and the recipient(s) unless a purchase order number is quoted. Any views or opinions presented are solely those of the author and do not necessarily represent those of TKC Group Ltd. If you are not the intended recipient(s), please do not copy or disclose its contents. Please return it to: [EMAIL PROTECTED] then delete the email. intY has scanned this email for all known viruses (www.inty.com) _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. intY has scanned this email for all known viruses (www.inty.com) This email is confidential and intended solely for the use of the individual(s) to whom it is addressed. It should not be deemed to constitute a binding contract between TKC Group and the recipient(s) unless a purchase order number is quoted. Any views or opinions presented are solely those of the author and do not necessarily represent those of TKC Group Ltd. If you are not the intended recipient(s), please do not copy or disclose its contents. Please return it to: [EMAIL PROTECTED] then delete the email. intY has scanned this email for all known viruses (www.inty.com) _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
