Worms are removed but not purged in Forefront Security for Exchange Server when you create a custom worm purge list and set the MaxCompressedFileInfections option to zero

Consider the following scenario:

• In Microsoft Forefront Security for Exchange Server, you create a custom worm purge list as described in the following Microsoft Web site:
  http://technet.microsoft.com/en-us/library/bb795079.aspx (http://technet.microsoft.com/en-us/library/bb795079.aspx)
• In General Options, the Max Container File Infections option is set to zero (0). This means the value of the following registry entry is set to 0:
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Server Security\Exchange Server\MaxCompressedFileInfections

In this scenario, you notice that worms are removed, but the messages are not purged as expected.

To resolve the problem, set the Max Container File Infections value to a number instead of 0. Or, install Forefront Security for Exchange Server with Service Pack 2 (SP2)

For more information, click the following article number to view the article in the Microsoft Knowledge Base: