Article ID: 943608
Article Last Modified on 11/9/2007
APPLIES TO
- Microsoft Forefront Security for SharePoint
SYMPTOMS
You have a computer that is running Windows SharePoint Services 3.0 or Microsoft Office SharePoint Server 2007. Additionally, the computer is running Microsoft Forefront Security for SharePoint. When you try to upload a Shockwave Flash Extensions (.swf) file to the SharePoint site, the Forefront Security for SharePoint keyword filter identifies the file as a virus. Additionally, the file is not uploaded to the SharePoint site.
If diagnostic logging is enabled, entries that resemble the following may be logged in the Programlog.txt file:
DIAGNOSTIC: workthread.cpp::ScanFileEx(): DIAGNOSTIC: The Realtime scanner detected a FileType of 0 (FOBTYPE_UNKNOWN) DIAGNOSTIC: The Realtime scanner is performing the Keyword Scanning on the file named "quiz_new.swf" from the message named "<n/a>" located in the "**During Cleaning**" folder using the Filtering Engine" DIAGNOSTIC: The Realtime scanner has finished the Keyword Scanning with hResult(0x210C0101)" "DIAGNOSTIC: The Realtime scanner is scanning the file named "quiz_new.swf" located in the "**During Cleaning**" folder" NFORMATION: Realtime scan found virus: Folder: **During Cleaning** File: quiz_new.swf Incident: KEYWORD= keyword: cum Scanner: KEYWORD_FILTER_SCANNER State: Blocked"
RESOLUTION
To resolve this problem, install Microsoft Forefront Security for SharePoint with Service Pack 1 (SP1). For more information about Forefront Security for SharePoint with SP1, visit the following Microsoft Web site:
Keywords: kbtshoot kbprb kbexpertiseadvanced KB943608
