AM is currently trying to archive a virus. The virus is being caught by my AV and cleaned each time. However, the original is still somewhere in the AM system and this process is repeating every few minutes. How can I identify where AM is picking it up from and then remove it?
20170101 005519 File "C:\Users\ArchiveMgr_ESM\AppData\Local\Temp\Archive Exchange Store Manager Service\cachedstream-DC0-2.tmp" belongs to virus/spyware 'Troj/DocDl-GHT'.
20170101 005519 On-access scanner has denied access to location "C:\Users\ArchiveMgr_ESM\AppData\Local\Temp\Archive Exchange Store Manager Service\cachedstream-DC0-2.tmp" for user CHBDC\ArchiveMgr_ESM
