Select the product you need help with

Forefront Security for SharePoint cleans infected documents even though the "Attempt to clean infected documents" option in SharePoint is not selected

Article ID: 969043 - View products that this article applies to.

SYMPTOMS

Consider the following scenario:

You are running Microsoft Forefront Security for SharePoint on a SharePoint server.
In Forefront Administrator, you select Clean: repair document in the Antivirus settings.
In SharePoint Central Administrator, you clear the Attempt to clean infected documents check box in the Antivirus settings.
You try to upload an infected document to the SharePoint Web site.

In this scenario, Forefront Security for SharePoint unexpectedly cleans the document. This means the SharePoint Antivirus setting is not honored.

Back to the top | Give Feedback

This problem occurs because the SharePoint Attempt to clean infected documents option does not take precedence over the Forefront Security for SharePoint Action setting for each scan job. This problem occurs in versions of Forefront Security for SharePoint that are earlier than Service Pack 3.

Back to the top | Give Feedback

RESOLUTION

To resolve this issue, install Forefront Security for SharePoint with Service Pack 3 (SP3). For more information, click the following article number to view the article in the Microsoft Knowledge Base:

967995

(http://support.microsoft.com/kb/967995/ )

Description of Forefront Security for SharePoint with Service Pack 3

Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Back to the top | Give Feedback

MORE INFORMATION

Steps to reproduce the problem

In Forefront Administrator, click Settings, and then click Antivirus. Click to highlight any of the scan jobs, and then set the Action to Clean: repair document.
In SharePoint Central Administrator, follow these steps:
1. Click Operations.
2. In the Operation pane, under Security Configuration, click Antivirus.
3. In the Antivirus pane, click to clear the option to Attempt to clean infected documents, and then click Save.
Upload an infected document to the SharePoint Web site.