G DATA Mail Protection
Why do emails already marked as spam appear again in the event log?
When G DATA Mail Protection moves an incoming spam email to the recipient’s Junk Email folder, it is located in a subfolder of the recipient’s inbox. If we learn several hours later that the spam email also contains a virus, the post-delivery rescan finds the email in the Junk Email folder as well and moves it to quarantine. If we excluded this folder from rescans, an undetected threat would remain in the recipient’s inbox.