Did user try opening the attachment?

[mtellefson 0]

I received a handful of "Event occurred during an attempt to access the email" errors with the MSIL/GenKryptik.EXUD from the email application filter for one of our users.  Does this mean he actually tried to open the attachment or that he opened the email?

[Marcos 5,458]

I assume the event occurred upon selecting an email when a scan on-read was performed.