On a computer that has Microsoft Antigen 9.0 or Forefront Server Security installed, Antigen or Forefront deletes some compressed (.zip) files. Additionally, the Kaspersky engine returns the virus name as "PASSWORD-PROTECTED-EXE."

This behavior occurs if the following conditions are true:

• The .zip file is protected with a password.
• The .zip file contains executable files.

This behavior is a feature that is offered by the Kaspersky engine in Antigen products and in Microsoft Forefront Security products.

To work around this behavior, disable the feature that is offered by the Kaspersky engine. To do this, follow these steps.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:
   HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\100
   
   Note If the 3 subkeys KasperskyLab\Components\100 do not exist, create them first and leave them empty.
   For example:
   
   HKEY_LOCAL_MACHINE\SOFTWARE \KasperskyLab
   
   HKEY_LOCAL_MACHINE\SOFTWARE \KasperskyLab\Components
   
   HKEY_LOCAL_MACHINE\SOFTWARE \KasperskyLab\Components\100
   
   
   Note If the server is a 64bit server, the path is: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node. Therefore, the final subkey will be:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node \KasperskyLab\Components\100
   
3. Create a new DWORD registry value under the 100 key named AntigenEncryptedReturnNotInfected, and then enter 1 in the Value data box.

You do not have to restart Antigen/Forefront or Microsoft Exchange Server services to enable the registry value.

Note The AntigenEncryptedReturnNotInfected registry value will take effect only if you are using update version 0704110011 or a later version of the Kaspersky engine. We recommend that you update the Kaspersky engine to make sure that you are using an appropriate engine version.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.