Microsoft Knowledge Base Email Alertz

(905952) - Describes an issue in which messaging performance degrades when you are running Antigen with the Kaspersky scan engine, and when DEP is enabled on the Windows Server 2003 SP1 server. To resolve this issue, add Antigen files to the DEP exception list.

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 905952 - Last Review: March 10, 2011 - Revision: 3.0

Messaging performance is slower than expected in Antigen, and the Antigen client stops responding

SYMPTOMS

You may experience the following symptoms when you are using Antigen on a server that is running Microsoft Windows Server 2003 Service Pack 1 (SP1):
  • Messaging performance is slower than expected. Additionally, scanning performance may be decreased.
  • The Antigen client computer stops responding.
  • The Antigen services do not stop in a timely manner.

CAUSE

This issue occurs if the following conditions are true:
  • You are using the Kaspersky scan engine together with Antigen.
  • Data Execution Prevention (DEP) is enabled on the Windows Server 2003 SP1-based server.

    Note By default, DEP is enabled on computers that are running Microsoft Windows Server 2003 Service Pack 1 (SP1) or Microsoft Windows XP Service Pack 2 (SP2).

    For more information about DEP, click the following article number to view the article in the Microsoft Knowledge Base:
    875352  (http://kbalertz.com/Feedback.aspx?kbNumber=875352/ ) A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003

RESOLUTION

To resolve this issue, follow these steps:
  1. Click Start, click Control Panel, and then double-click System.
  2. Click the Advanced tab, and then click Settings under Performance.
  3. Click the Data Execution Prevention tab, and then click Turn on DEP for all programs and services except those I select.
  4. Click Add, and then add the following executable files as appropriate.
    • Antigen for Microsoft Exchange:
      • Antigeninternet.exe
      • Antigenrealtime.exe
      • Antigenmanual.exe
      • Antengup.exe
      • Getenginefiles.exe
      • Antigenservice.exe
      • ScanEngineTest.exe (This file applies only to the 9.0 versions of Antigen.)
    • Sybari Antigen for Microsoft SharePoint Portal Server:
      • Antigenrealtime.exe
      • Antigenmanual.exe
      • Antengup.exe
      • Getenginefiles.exe
      • Antigenservice.exe
    • Sybari Antigen for IM:
      • Antengup.exe
      • Getenginefiles.exe
      • Antigenservice.exe
      • Antigenim.exe
    • Antigen for SMTP Gateways:
      • Antigeninternet.exe
      • Antengup.exe (This file applies only to the 7.5 and 8.0 versions of Antigen.)
      • Getenginefiles.exe
      • Antigenservice.exe
      • ScanEngineTest.exe (This file applies only to the 9.0 versions of Antigen.)
    • Sybari Antigen for Lotus Domino:
      • NNWalljp.exe
      • NScan.exe
      • NnEngUpd.exe
      Note If Nshield is enabled, add the following executable files:
      • Nserver.exe
      • Nreplica.exe
      • Nhttp.exe

MORE INFORMATION

Please note that this issue only existed in version 8 of Antigen for Exchange. Antigen 8 reached its "End of Life" date December 31, 2009. If you are running Antigen 9 for Exchange or higher, you will not experience messaging performance issues as a result of implementing the Kaspersky scan engine and DEP (Data Execution Prevention).

Customer's running Exchange 2003 may receive the following notification via the Exchange Best Practice Analyzer:

Microsoft Antigen is running on Exchange server XXXXXX, and it appears that the Kaspersky scan engine is installed. This configuration may cause compatibility issues with Data Execution Protection(DEP), refer to the Microsoft Knowledge Base Article 905952 for more details


This error can be safely ignored if running Antigen 9 for Exchange or higher.





APPLIES TO
  • Microsoft Antigen 9.0 for Exchange
  • Microsoft Antigen for SMTP Gateways
  • Sybari Antigen 8.0 for IM
  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for Microsoft SharePoint Portal Server
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 7.5 for IM
  • Sybari Antigen 7.5 for Lotus Domino
  • Sybari Antigen 7.5 for Microsoft Exchange
  • Sybari Antigen 7.5 for Microsoft SharePoint Portal Server
  • Sybari Antigen 7.5 for SMTP Gateways
  • Sybari Antigen 7.0 for Lotus Domino
Keywords: 
kbtshoot KB905952
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate