XADM: An Incorrect URL Is Passed to the Event Sink After a Message Is Modified By a Virus Scanner

If you use Exchange 2000 event sinks, and the Uniform Resource Locator (URL) of an incoming message is passed to the OnSaveSync event, that URL may be incorrect. This problem occurs if:

• The message subject is the same as the subject of an existing message in the same folder.
• The message was modified by a virus scanning application programming interface (API) version 2.0 virus scanner after the message was committed to the store.

The first time that the event sink starts, the URL is correct. However, the second time that the event sink starts (after the virus scanning API modifies the message), the URL is not correct. For example, if the correct URL is http://.../inbox/message-4.html, the incorrect URL http://.../inbox/message.html is passed.

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: The English version of this fix has the following file attributes or later:

Component: Information Store


NOTE: Because of file dependencies, this update requires Microsoft Exchange 2000 Server Service Pack 2.

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 3.

If you use a URL from OnSyncSave, you must check the lFlags value to determine whether or not you are in the commit phase (EVT_SYNC_COMMITTED flag) to make sure that you have an accurate URL.