Forefront Security for SharePoint returns an error when it scans a large compressed file that contains many smaller files

Article translations Article translations
Article ID: 972074 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

When Microsoft Forefront Server Security for SharePoint scans a large compressed file, it may return one of the following errors:
  • Out of memory
  • Engine Error
  • Timeout
  • Corrupted Compressed File

CAUSE

This problem occurs when one of the following conditions is true:
  • The size of the compressed file exceeds the maximum compressed file size.
  • The total size of all the files in the compressed archive exceeds the maximum uncompressed file size.
The maximum compressed file size and the maximum uncompressed file size are specified by the following registry values:
  • Maximum compressed file size:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint\MaxCompressedSize
  • Maximum uncompressed file size :
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint\MaxUnCompressedFileSize

    Note By default, the maximum uncompressed file size registry key is not present, but the value is 100 MB

RESOLUTION

In Forefront Security for SharePoint with Service Pack 3 (SP3), you can enable a feature to detect compressed files that exceed limits for maximum compressed file size or maximum uncompressed file size as "CorruptedCompressedFile."

Steps to enable the feature

To do this, follow these steps:
  1. Install Forefront Security for SharePoint Service Pack 3.
  2. Add a
    SumInternalSizesOfCompressedArchive
    registry key entry, and then set the registry value to 0. To do this, follow these steps:
    1. Click Start, click Run, type regedit in the Run box, and then press ENTER.
    2. Locate and then click the following registry subkey:
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint
    3. On the Edit menu, point to New, and then click DWORD Value.
    4. Type SumInternalSizesOfCompressedArchive, and then press ENTER.
    5. Right-click SumInternalSizesOfCompressedArchive, and then click Modify.
    6. In the Value data box, type 0, and then click OK.
    7. Exit Registry Editor.
  3. Activate the new settings. To do this, do one of the following:
    • In the Forefront Server Security Administrator client, click SETTINGS, and then click General Options. Change and then save a General Options setting. Then, revert the setting to the original setting.

      Note The registry settings are reread when any of the options are changed.
    • Restart the FSCController service in the Services panel. To do this, click Start, click Run, type services.msc, and then click OK. In the list of services, right-click FSCController, and then click Restart.
When the SumInternalSizesOfCompressedArchive value is enabled, compressed files that exceed the maximum compressed file size or the maximum uncompressed file size are detected as "CorruptedCompressedFile." These files will be deleted if the Block/Delete Corrupted Compressed Files setting is selected.

To skip scanning of compressed files that exceed the maximum compressed file size or the maximum uncompressed file size, use one of the following options:
  • Disable the Block/Delete Corrupted Compressed Files option.
  • Enable the Block/Delete Corrupted Compressed Files option, and then enable the
    SkipLargeCompressedFileDeletion
    registry entry. For more information about how to use the SkipLargeCompressedFileDeletion registry value, click the following article number to view the article in the Microsoft Knowledge Base:
    972072 Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted
    For more information about the General Options settings in Forefront Security for SharePoint, visit the following Microsoft Web site:
    http://technet.microsoft.com/en-us/library/bb795148.aspx

MORE INFORMATION

For more information about Forefront Security for SharePoint Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
967995 Description of Forefront Security for SharePoint with Service Pack 3

Properties

Article ID: 972074 - Last Review: July 1, 2009 - Revision: 1.0
APPLIES TO
  • Microsoft Forefront Security for SharePoint
  • Microsoft Forefront Security for SharePoint Service Pack 1
  • Microsoft Forefront Security for SharePoint Service Pack 2
Keywords: 
kbexpertiseinter kbbug kbqfe kbsurveynew kbprb KB972074

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com