Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 939418 - Last Review: December 18, 2007 - Revision: 2.1
Antigen deletes some .zip files, and the Kaspersky engine returns the virus name as "PASSWORD-PROTECTED-EXE"
Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756Â
(http://kbalertz.com/Feedback.aspx?kbNumber=322756/
)
How to back up and restore the registry in Windows
SYMPTOMS
On a computer that has Microsoft Antigen 9.0 or Forefront Server Security installed, Antigen or Forefront deletes some compressed (.zip) files. Additionally, the Kaspersky engine returns the virus name as "PASSWORD-PROTECTED-EXE."
This behavior occurs if the following
conditions are true:
- The .zip file is protected with a password.
- The .zip file contains executable files.
CAUSE
This behavior is a feature that is offered by the Kaspersky engine
in Antigen products and in Microsoft Forefront Security products.
WORKAROUND
To work around this behavior, disable the feature that
is offered by the Kaspersky engine. To do
this, follow these steps.
Warning Serious problems might occur if you modify the registry
incorrectly by using Registry Editor or by using another method. These problems
might require that you reinstall the operating system. Microsoft cannot
guarantee that these problems can be solved. Modify the registry at your own
risk.
- Click Start, click Run,
type regedit, and then click OK.
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\100
- Create a new DWORD registry value that is called
AntigenEncryptedReturnNotInfected, and
then type 1 in the
Value data box.
You do not have to restart Antigen/Forefront or Microsoft Exchange Server services to enable the registry value.
Note The AntigenEncryptedReturnNotInfected
registry value will take effect only if you are using update version
0704110011 or a later version of the Kaspersky engine. We recommend that you update the
Kaspersky engine to make sure that you are using an appropriate engine version.
The third-party products that this
article discusses are manufactured by companies that are independent of
Microsoft. Microsoft makes no warranty, implied or otherwise, about the
performance or reliability of these products.
APPLIES TO
- Microsoft Antigen for Exchange
- Microsoft Antigen for SMTP Gateways
- Microsoft Antigen Spam Manager
| kbtshoot kbexpertiseinter kbprb KB939418 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please