Procedure

1. After you perform a query for archived messages, click the timestamp for an item in the query result table. The Archive Query screen appears showing the following information:
   • Timestamp
   • Sender
   • Reason
   • Recipient
   • Rules
   • Subject
   • Scanner
   • Original Size
   • Message ID
   • Internal ID
   • Attachments
   If ATSE is enabled, IMSVA also displays the following information:

   • Reason: Probable advanced threat

   If both ATSE and Virtual Analyzer are enabled, IMSVA also displays the following information:

   • Reason: Probable advanced threat or Analyzed advanced threat
   • Virtual Analyzer Status: Status of Virtual Analyzer analysis
2. Next to Message view, click either Header or Message.
3. Click any of the following buttons:
   • Back to List: Return to the query screen.
   • Delete: Delete the message.
   • Download : Save the message to your computer.

   Tip Trend Micro does not recommend saving messages or attachments that violated an antivirus rule.