Microsoft Knowledge Base Email Alertz

(837370) - Describes a situation where the Small Business Server 2003 Secure Attachments Tool fails with Event ID 5120 when a third-party antivirus package has been installed on the SBS 2003 computer.

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 837370 - Last Review: December 3, 2007 - Revision: 4.2

Event ID 5120 is logged when e-mail messages are processed by Small Business Server 2003

SYMPTOMS

When the Exchange Server 2003 component of Microsoft Windows Small Business Server 2003 processes incoming and outgoing e-mail messages that have attachments, the following event may be logged in the application log on the Small Business 2003 computer:


Event Type: Error
Event Source: SmallBusinessServer
Event Category: None
Event ID: 5120
Date: 1/12/2004
Time: 6:36:37 PM
User: N/A
Computer: ComputerName
Description: An error occurred in the function DeleteUnsafeAttachments while running the Secure Attachments Tool (Secatts.dll) to remove SMTP e-mail attachments. The error code is: -2146644475. To fix the problem, run the Configure E-mail and Internet Connection Wizard, and clear the option to remove e-mail attachments; then run the wizard again and select the option. For more information, see Help and Support Center at http://support.microsoft.com.

CAUSE

This behavior is caused by e-mail messages that contain MIME fields whose content type is multipart/alternative. The expected content type is multipart/mixed. Typically, e-mail messages that contain multipart/alternative content type MIME fields are the result of e-mail worms.

Less frequently, this behavior can be caused by a non-Microsoft antivirus program that is running a file-level scan of the Exchange folders. The file-level scan may remove infected attachments before Small Business Server 2003 can remove the attachment.

RESOLUTION

You can ignore these events, and you do not have to run the Configure E-mail and Internet Connection Wizard. However, if you have an antivirus program that runs a file-level scan, Microsoft recommends that you configure the file-level scan to exclude the Exchange Server folders.

For additional information about file-level antivirus scanners and Exchange Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:
823166  (http://kbalertz.com/Feedback.aspx?kbNumber=823166/ ) Overview of Exchange Server 2003 and antivirus software

STATUS

Microsoft is researching this problem and will post more information in this article when the information becomes available.

APPLIES TO
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows Small Business Server 2003 Premium Edition
Keywords: 
kbprb KB837370
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate