Microsoft KB Archive/943625

= Antigen or Microsoft Forefront server security products may detect a file as being infected with the UnwritableCompressedFile virus =

Article ID: 943625

Article Last Modified on 11/2/2007

-

APPLIES TO


 * Microsoft Antigen for Exchange
 * Sybari Antigen 8.0 for Microsoft Exchange
 * Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
 * Microsoft Forefront Security for Exchange Server
 * Microsoft Forefront Security for SharePoint

-



SYMPTOMS
When you use one of the following programs, the program may detect a file as being infected with the UnwritableCompressedFile virus:
 * Microsoft Antigen 9.0 for Exchange
 * Sybari Antigen 8.0 for Microsoft Exchange
 * Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
 * Microsoft Forefront Security for Exchange Server
 * Microsoft Forefront Security for SharePoint



CAUSE
This issue occurs if the following conditions are true:
 * Antigen or Microsoft Forefront server security products can parse the file successfully to read the contents of the file.
 * Antigen or Microsoft Forefront server security products cannot perform a write operation to the compressed file or to one or more of the files that are contained in the archive package.

For example, this issue occurs if the following conditions are true:
 * A file filter is configured to delete a particular file type or to remove a particular file type.
 * A compressed file contains one or more files that match the file filter that is configured.
 * Antigen or Microsoft Forefront server security products cannot delete the file or the files from inside the compressed file.

Keywords: kbtshoot kbprb kbspam KB943625

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.