Microsoft KB Archive/940880

= Error message when you try to upload files to or download files from a Microsoft Windows SharePoint Services 3.0 Web site or a Microsoft Office SharePoint Server 2007 Web site: &quot;Virus Found&quot; =

Article ID: 940880

Article Last Modified on 9/12/2007

-

APPLIES TO


 * Microsoft Forefront Security for SharePoint
 * Microsoft Windows SharePoint Services 3.0
 * Microsoft Office SharePoint Server 2007

-



SYMPTOMS
You receive an error message when you try to upload a file to one of the following sites, or you try to download a file from one of the following sites:
 * A Microsoft Windows SharePoint Services 3.0 Web site
 * A Microsoft Office SharePoint Server 2007 Web site

The error message that you receive resembles the following:

Virus Found

contains the following virus:&quot;&quot;.

In this error message,  represents the name of the file that you tried to upload or download.

Additionally, on the computer that is running Windows SharePoint Services or Office SharePoint Server, the following event is logged in the Application log: Event Type: Error

Event Source: Windows SharePoint Services 3

Event ID: 26424



CAUSE
This problem occurs when Microsoft Forefront Security for SharePoint is installed on the computer that is running Windows SharePoint Services 3.0 or Microsoft Office SharePoint Server 2007. By default, the groups that Forefront Security for SharePoint allows to access the Forefront registry are groups that include the SharePoint application pool account. However, the SharePoint worker process may impersonate a regular SharePoint user instead of impersonating the application pool account.



RESOLUTION
To resolve this problem, install Forefront Security for SharePoint Service Pack 1 (SP1).

The Windows SharePoint Services 3.0 hotfix package that is dated May 8, 2007 also resolves this problem. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

936867 Description of the Windows SharePoint Services 3.0 hotfix package: May 8, 2007

Note You may install this hotfix package after you install Forefront Security for SharePoint SP1. If you do this, the fix that is included in the service pack becomes redundant, and it is not used.

Keywords: kbtshoot kbprb kbexpertiseinter KB940880

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.