Microsoft Knowledge Base Email Alertz

Forefront Security for SharePoint cleans infected documents even though the Attempt to clean infected documents option in SharePoint is not selected

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 969043 - Last Review: July 1, 2009 - Revision: 1.0

Forefront Security for SharePoint cleans infected documents even though the "Attempt to clean infected documents" option in SharePoint is not selected

SYMPTOMS

Consider the following scenario:
  • You are running Microsoft Forefront Security for SharePoint on a SharePoint server.
  • In Forefront Administrator, you select Clean: repair document in the Antivirus settings.
  • In SharePoint Central Administrator, you clear the Attempt to clean infected documents check box in the Antivirus settings.
  • You try to upload an infected document to the SharePoint Web site.
In this scenario, Forefront Security for SharePoint unexpectedly cleans the document. This means the SharePoint Antivirus setting is not honored.

CAUSE

This problem occurs because the SharePoint Attempt to clean infected documents option does not take precedence over the Forefront Security for SharePoint Action setting for each scan job. This problem occurs in versions of Forefront Security for SharePoint that are earlier than Service Pack 3.

RESOLUTION

To resolve this issue, install Forefront Security for SharePoint with Service Pack 3 (SP3). For more information, click the following article number to view the article in the Microsoft Knowledge Base:
967995  (http://kbalertz.com/Feedback.aspx?kbNumber=967995/ ) Description of Forefront Security for SharePoint with Service Pack 3

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

Steps to reproduce the problem

  1. In Forefront Administrator, click Settings, and then click Antivirus. Click to highlight any of the scan jobs, and then set the Action to Clean: repair document.
  2. In SharePoint Central Administrator, follow these steps:
    1. Click Operations.
    2. In the Operation pane, under Security Configuration, click Antivirus.
    3. In the Antivirus pane, click to clear the option to Attempt to clean infected documents, and then click Save.
  3. Upload an infected document to the SharePoint Web site.

APPLIES TO
  • Microsoft Forefront Security for SharePoint
  • Microsoft Forefront Security for SharePoint Service Pack 1
  • Microsoft Forefront Security for SharePoint Service Pack 2
Keywords: 
kbexpertiseinter kbbug kbqfe kbsurveynew kbprb KB969043
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate