Forefront Security for Exchange Server may detect Office 2007 files as containing an UnwritableCompressedFile virus

Microsoft Forefront Security for Exchange Server may detect Microsoft Office 2007 files as containing an UnwritableCompressedFile virus. This issue occurs if you have a file filter enabled that matches one or more of the sub-files within the Office 2007 file.

The following detection information is logged in the ProgramLog.txt file:The following is an example of detection information that is logged in the ProgramLog.txt file:

This problem occurs because Office 2007 files contain sub-files that may match a file filter in Forefront Security for Exchange Server. When this occurs, Forefront Security for Exchange Server removes the sub-file and replaces it with the standard deletion text. This causes Office 2007 files to be detected as an UnwritableCompressedFile virus.

Note An Office 2007 file contains several sub-files. These sub-files are considered to be part of the structure of the Office 2007 file.

To resolve this issue, install Forefront Security for Exchange Server Service Pack 2 (SP2).

For more information, click the following article number to view the article in the Microsoft Knowledge Base: