Exchange 2010 ScanMail Fail

I have a user who sent an internal email using outlook 2007 which was processed by our exchange 2010 server.   She did not receive an error message when sending but when opening the sent item she gets the following message. " A policy violated content was detected and removed from the original mail header, subject, boty or attachment. You can safely save or delete this replacement attachment. "

I've traced the message using powershell and found the following information but I'm not sure where to go from here as I didn't find the message listed in the Agent Logs for  that time period .....  
++++++++++++++++++++++++++
PSComputerName          : exchange1.desertortho.local
RunspaceId              : 61def46d-dfa4-479d-81ee-299869729dc3
Timestamp               : 6/7/2013 11:16:54 AM
ClientIp                :
ClientHostname          : EXCHANGE1
ServerIp                :
ServerHostname          :
SourceContext           : ScanMail Routing Agent
ConnectorId             :
Source                  : AGENT
EventId                 : FAIL
InternalMessageId       : 366903
MessageId               : <EF54B011491F8341A6201379C871891606AE7FE4@EXCHANGE1.DesertOrtho.local>
Recipients              : {debi@dbjortho.com}
RecipientStatus         : {}
TotalBytes              : 16033
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : W/C charges...
Sender                  : jodic@dbjortho.com
ReturnPath              : jodic@dbjortho.com
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               :

+++++++++++++++++++++++++++++++++++++++++

We We have anti-spam turned on in exchange as well as our Trendmicro is filtering messages .......

Thanks so much for any help you can provide. ...

Joel Brown
jtbrown1111Asked:
Who is Participating?
 
vSolutionsITCommented:
Confirm the contents of the emails and attachments from the user and verify if any of the custom words or attachments are configured in the scanmail to quarantine emails.
if the attachment was excel sheet then verify if it has any macro's in that case you will have to configure scanmail to allow excel sheets with macros.
0
 
jtbrown1111Author Commented:
@vSolutionsIT,   will do .... are you saying that scanmail belongs to exchange or trendmicro ?   thougths ..?
0
 
vSolutionsITCommented:
Scanmail belongs to Trendmicro.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.