Microsoft KB Archive/905971

= How to change the time-out value for a container file scan in Antigen =

Article ID: 905971

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Sybari Antigen 8.0 for Microsoft Exchange
 * Sybari Antigen 8.0 for SMTP Gateways
 * Sybari Antigen 7.5 for Microsoft Exchange
 * Sybari Antigen 7.5 for SMTP Gateways

-



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry





INTRODUCTION
This article describes how to change the time-out value for a container file scan in Sybari Antigen.



MORE INFORMATION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

If a container file scan takes longer than expected, Antigen stops the scan. Additionally, you may receive the following message:

AntigenInternet scan aborted and recovered.

When you receive this message, you should examine the container file attachment that caused the scan to be stopped. A container file scan may take longer than expected if the container file is corrupted or is very large.

Antigen stops a container file scan that takes longer than expected to prevent bottlenecks. By default, Antigen 7.5 stops a container file scan if the scan takes longer than eleven minutes. Antigen 8.0 stops a container file scan if the scan longer takes 2 minutes (120,000 milliseconds).

To change the time-out value for a container file scan in Antigen, follow these steps:  Click Start, click Run, type regedit, and then click OK. Locate and then click the following registry subkey:

 Double-click the MaxScanTime registry entry, and then type the time-out value that you want to use in the Value box.

Because Antigen can stop a scan, you do not have to restart the SMTP service every time that a container file scan takes longer than expected.

You can configure the action that Antigen takes if a container file scan takes longer than expected. To do this, follow these steps:
 * 1) Start the Sybari Client (SybariClient.exe).
 * 2) In Shuttle Navigator, click Settings, and then click General Options.
 * 3) Under Scanning, click one of the following settings under Engine Error Action:
 * 4) * Ignore: When you click this setting, Antigen does not log any information about the scan.
 * 5) * Skip Detect Only: When you click this setting, Antigen logs information about the scan. However, Antigen does not do anything to the message or to the container file attachment.
 * 6) * Delete: When you click this setting, Antigen logs information about the scan. Additionally, Antigen deletes the container file attachment.

Additional query words: zip of death .zip of death

Keywords: kbtshoot KB905971

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.