Microsoft Knowledge Base Email Alertz

KBAlertz.com: Folders to exclude when you perform a file-level antivirus scan on a server operating system

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]

Search KbAlertz

Advanced Search

Webmasters
Put kbAlertz on your website.
[ Click Here for more! ]





ASP.NET 3.5 Web Hosting with Windows 2008 and SQL 2008: Click Here!
Discount ASP.NET Hosting
ASP.NET 2.0 and 3.5
Windows2008 and SQL2008
US and UK Hosting
KBAlertz referrals get
** SIX MONTHS FREE **


Community Site



We Send hundreds of thousands of emails using ASP.NET Email


ASP.NET 3.5 Web Hosting with Windows 2008 and SQL 2008: Click Here!
Discount ASP.NET Hosting
ASP.NET 2.0 and 3.5
Windows2008 and SQL2008
US and UK Hosting
KBAlertz referrals get
** SIX MONTHS FREE **




Mentioned In








Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks




Article ID: 943620 - Last Review: November 6, 2009 - Revision: 4.0

Folders to exclude when you perform a file-level antivirus scan on a server operating system

On This Page

INTRODUCTION

This article describes which folders to exclude when you perform a file-level antivirus scan on a server operating system. You must exclude these folders if you use one of the following antivirus programs:
  • Microsoft Forefront Protection 2010 for Exchange Server
  • Microsoft Forefront Security for Office Communications Server
  • Microsoft Forefront Security for Exchange Server
  • Microsoft Forefront Security for SharePoint
  • Microsoft Antigen 9.0 for Exchange
  • Microsoft Antigen 9.0 for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
  • Sybari Antigen 8.0 for IM

MORE INFORMATION

Exclude the following folders before you perform a file-level antivirus scan on a server operating system:
  • The installation folder of the antivirus software

    Notes
    • The following path is the default location of the installation folder for Forefront Protection 2010 for Exchange Server:
      Drive:\program files (x86)\Microsoft Forefront Protection for Exchange Server
      The Drive placeholder specifies the letter of the drive on which Windows is installed. By default, this is drive C.
    • The following path is the default location of the installation folder for Antigen Enterprise Manager:
      Drive:\Program Files\Microsoft Antigen Enterprise Manager
      The Drive placeholder specifies the letter of the drive on which Windows is installed. By default, this is drive C.
    • The following path is the default location of the installation folder for Forefront Security for Exchange Server:
      Drive:\Program Files\Microsoft Forefront Security\Exchange Server
      The Drive placeholder specifies the letter of the drive on which Windows is installed. By default, this is drive C.
    • The following path is the default location of the installation folder for Forefront Security for SharePoint:
      Drive:\Program Files\Microsoft Forefront Security\SharePoint
    • The following path is the default location of the installation folder for Antigen for Exchange:
      Drive:\Program Files\Microsoft Antigen for Exchange
    • The following path is the default location of the installation folder for Antigen for SMTP Gateways:
      Drive:\Program Files\Microsoft Antigen for SMTP
    • The following path is the default location of the installation folder for Antigen for Exchange:
      Drive:\Program Files\Sybari Software\Antigen for Exchange
    • The following path is the default location of the installation folder for Antigen for SMTP Gateways:
      Drive:\Program Files\Sybari Software\Antigen for SMTP
    • The following path is the default location of the installation folder for Antigen for SharePoint Portal Server:
      Drive:\Program Files\Sybari Software\Antigen for SharePoint
    • The following path is the default location of the installation folder for Antigen for IM:
      Drive:\Program Files\Sybari Software\Antigen for IM
  • The Drive:\Program Files\Exchsrvr folder

    Note The file-level antivirus scan can cause a conflict when Antigen tries to scan e-mail messages.
  • The following path is the default location of the installation folder for Forefront Security for Office Communications Server:
    <drive>:\Program Files\Microsoft Forefront Security\Office Communications Server
    In order to prevent corruption, you must also make sure that the folder in which you installed Microsoft Office Communications Server is not scanned. The following paths are the default locations of the installation folders for Microsoft Office Communications Server, depending on the version that you have installed:
    <drive>:\Program Files\Microsoft Office Communications Server 2007
    <drive>:\Program Files\Microsoft Office Communications Server 2007 R2
    Note The <drive> placeholder specifies the letter of the drive on which Windows is installed. By default, this is drive C.
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

More information about Microsoft Forefront Security for Office Communications Server and third-party file-level antivirus scans

In addition to the problem in which a third-party file-level antivirus scans files before FSOCS does and causes a scanning conflict, other problems may occur if a third-party file-level antivirus scans the FSOCS folder or the OCS installation folder. These problems may include the following:
  • Errors logged to the ProgramLog.txt file:
    "EXCEPTION: FSOCAgent.dll.Scanner.ScanData(""):0 - The system returned the following exception: " The system returned the following exception: Error HRESULT E_FAIL has been returned from a call to a COM component.

    "ERROR: FSOCAgent.dll.ScanManager.ScanAction("<FSOCAgent.Action action><FSOCAgent.DataList scanData>"):0 - An exception was thrown from FSOCScanner during scanning." The system returned the following exception: Exception of type 'Microsoft.FSO.Common.FsoCommonException' was thrown.

    "EXCEPTION: ForefrontRTCProxy64.exe.RtcProcessingWorkFlows.InterceptAndScanThread("<System.Object fsoTransactionObj>"):0 - An exception occurred while trying to intercept and scan a file transfer." The system returned the following exception: Exception of type 'Microsoft.FSO.Common.FsoCommonException' was thrown.
  • Errors logged to the HRLog.txt file:
    "INFORMATION: S 0x80004005, 7082-(workthread::ScanFileOrMessage) (Unspecified error)"

    "INFORMATION: F 0x80004005, 7603-(workthread::OnScanFile) (Unspecified error)"
Additionally, viruses that are sent to users via OCS may be detected by the third party file-level antivirus software, not by FSOCS.

APPLIES TO
  • Microsoft Forefront Protection 2010 for Exchange Server
  • Microsoft Forefront Security for Exchange Server
  • Microsoft Forefront Security for SharePoint
  • Microsoft Antigen 9.0 for Exchange
  • Microsoft Antigen for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
  • Sybari Antigen 8.0 for IM
Keywords: 
kbexpertiseinter kbhowto kbinfo KB943620
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate

Be the first to leave feedback, to help others about this knowledge base article.

(Optional) Name

(Optional) Public URL Or Email

Comments
No HTML -- Text Only Please