When Declude Hijack permanently holds email, the messages will be held in the HOLD2 directory which is located at Spool\Spam\HOLD2.

There are 2 different ways to handle email that Declude Hijack has held permanently.

First you need to determine whether or not the messages are spam or if they are a legitimate mass mailing that one of your customers has tried to send out. You can do this by going to the HOLD2 directory and opening one of the messages with a text editor such as Notepad. You will be able to clearly see from the contents of the message whether it is spam or a good message.

If the messages are spam:

Open the header file to see who the spammer is authenticating as. Once you find the address, go to your email server and change the password on that account to something very strong. Next, notify the customer who owns the email address and have them scan their computer for viruses and malware. Lastly, delete the messages in the HOLD2 directory.

If the messages are legitimate email:

If you wish to allow the messages to be delivered, you can release them using the Hijackrelease.exe program located in the Declude\Tools directory. First, restart the decludeproc service from the Windows Services area then simply run the Hijackrelease.exe program and follow the prompts.