Description of Hotfix Rollup 1 for Forefront Security for Office Communications Server

Article translations Article translations
Article ID: 976616 - View products that this article applies to.
Expand all | Collapse all

On This Page

SUMMARY

Microsoft has released Hotfix Rollup 1 for Microsoft Forefront Security for Office Communications Server. This article contains information about how to obtain the hotfix rollup and about the issues that are fixed by the hotfix rollup.

MORE INFORMATION

New feature in the hotfix rollup

Hotfix Rollup 1 for Forefront Security for Office Communications Server adds new functionality by using the registry to set limits on the compressed and uncompressed sizes of a file in an archive or compressed file.

To use the new functionality and set maximum compressed and uncompressed size limits for files that are contained within files that are archived or compressed, follow these steps:
  1. Upgrade to Hotfix Rollup 1 for Forefront Security for Office Communications Server.
  2. To set the maximum compressed file size, create a new DWORD registry value that is named MaxCompressedArchivedFileSize in the following registry subkey:

    For 32-bit versions
    HKEY_LOCAL_MACHINE\Software\Microsoft\Forefront Server Security\Office Communications Server
    For 64-bit versions
    HKEY_LOCAL_MACHINE\Wow6432Node\Software\Microsoft\Forefront Server Security\Office Communications Server
  3. Set the MaxCompressedArchivedFileSize value to the desired maximum file size in bytes. For example, a value of 50000000 would equate to approximately 50 megabytes (MB).
  4. To set the maximum uncompressed file size, create a new DWORD registry value that is named MaxUncompressedFileSize in the following registry subkey:

    For 32-bit versions
    HKEY_LOCAL_MACHINE\Software\Microsoft\Forefront Server Security\Office Communications Server
    For 64-bit versions
    HKEY_LOCAL_MACHINE\Wow6432Node\Software\Microsoft\Forefront Server Security\Office Communications Server
  5. Set the MaxUncompressedFileSize value to the desired maximum file size in bytes. For example, a value of 200000000 would equate to approximately 200 megabytes (MB).
  6. For the changes to take effect, do one of the following:
    1. Stop and then restart the FSCController Server service in the Service Control Manager.
    2. Open the Forefront Security for Office Communications Server Administrative console, make a change, and then click Save. For example, click to clear one of the check boxes for the scan engines from a scan job, and then click Save. Click to select the check box for the same scan engine, and then click Save.
Note When the MaxCompressedArchivedFileSize and the MaxUncompressedFileSize registry values are not present, the following default values apply:
  • MaxCompressedArchivedFileSize: 20MB
  • MaxUncompressedFileSize: 100MB

Issues that are fixed in Hotfix Rollup 1 for Forefront Security for Office Communications Server

This hotfix rollup fixes the following issues:
  1. You cannot send an instant message that contains a clickable hyperlink from Microsoft Office Communicator 2007 when the Microsoft Office Communications Server 2007 server is running Forefront Security for Office Communications Server
  2. When you stop Forefront Security for Office Communications Server by using the Office Communications Server Administrative console, the ForefrontRTCProxy64.exe process memory usage climbs until all available memory is used
  3. Memory leak in Forefront Security for Office Communications Server
  4. The \SERVERNAME parameter does not work when you use the FSCStarter.exe tool to apply template settings on a remote server in Forefront Security for Office Communications Server
  5. The Kaspersky scan engine rolls back when you try to update it in Forefront Security for Office Communications Server
  6. A scan engine update fails and logs a warning message in the ProgramLog.txt file
  7. Forefront Security for Office Communications Server (FSOCS) may contain the deprecated Computer Associates virus engine (CAVet)
  8. Those who use Office Communicator to send a file do not receive a "File Transferred Cancelled" notification if the intended recipient cancels or rejects the file transfer

Details of the issues that are fixed in the hotfix rollup

  1. You cannot send an instant message that contains a clickable hyperlink from Microsoft Office Communicator 2007 when the Microsoft Office Communications Server 2007 server is running Forefront Security for Office Communications Server
    Symptoms

    When you try to send an instant message that contains a clickable hyperlink from Microsoft Office Communicator 2007, you receive the following error message:
    The following message was not delivered. (ID:400)
    Additionally, the recipient does not receive the instant message.

    More information

    This issue is fixed in Hotfix Rollup 1 for Forefront Security for Office Communications Server. However, there is a workaround for this problem if you cannot apply the hotfix rollup.

    For more information about how to work around this problem, click the following article number to view the article in the Microsoft Knowledge Base:
    971480 You cannot send an instant message that contains a clickable hyperlink when the Office Communications Server 2007 server is running Forefront Security for Office Communications Server
  2. When you stop Forefront Security for Office Communications Server by using the Office Communications Server Administrative console, the ForefrontRTCProxy64.exe process memory usage climbs until all available memory is used
    Symptoms

    In the Microsoft Office Communications Server Administrative console, you open the Front End Script Properties. Then, you click to clear the check box next to Enabled to disable Forefront Security for Office Communications Server. After you do this, the ForefrontRTCProxy64.exe process memory usage increases until all available memory is used. Additionally, the following error message is logged in the Application event log with an Event ID of 30247:
    OCS Application Module
  3. Memory leak in Forefront Security for Office Communications Server
    Symptoms

    There is a known memory leak of approximately 10 bytes per message that Forefront Security for Office Communications Server scans. Although this is a small amount, the memory is not released after the message is scanned. Therefore, over time, the memory that is not released increases.

    Cause

    This problem is because of incorrect internal logic in Forefront Security for Office Communications Server.
  4. The \SERVERNAME parameter does not work when you use the FSCStarter.exe tool to apply template settings on a remote server in Forefront Security for Office Communications Server
    Symptoms

    You use the FSCStarter.exe tool to apply template settings on a remote server. When you do this, you cannot use the \SERVERNAME parameter together with the t parameter.

    For example, you run the following command to apply Filter Lists from a remote template to the remote server that is named MyServer:
    fscstarter.exe tl \MyServer
    When you run this command, the following entries are logged in the ProgramLog.txt file. These entries indicate that the operation was unsuccessful:
    "TEMPLATES: starter called with options (tl \MyServer)"
    "TEMPLATES: starter Option converts to (32)"
    "ERROR: antigenstarter.cpp::ReplaceLocalTemplateFile(): Template replacement file "\MyServer" does not exist."
    Cause

    This problem occurs because Forefront Security for Office Communications Server did not target the correct path of the remote server template.
  5. The Kaspersky scan engine rolls back when you try to update it in Forefront Security for Office Communications Server
    Symptoms

    When you try to update the Kaspersky scan engine in Forefront Security for Office Communications Server, the update is not successful, and Forefront Security for Office Communications Server performs a rollback to the previous engine version. The Kaspersky scan engine is not updated.

    Additionally, the following information is logged in the ProgramLog.txt file during the update attempt:
    "INFORMATION: The Kaspersky5 scan engine has been downloaded"
    "ERROR: The Kaspersky5 scan engine update timed out while disabling the scan engine"
    "INFORMATION: The Kaspersky5 scan engine has been rolled back."
  6. A scan engine update fails and logs a warning message in the ProgramLog.txt file
    Symptoms

    If any of the Forefront Security for Office Communications Server external engine vendors release an engine update, and the update incorporates files that are packaged within subdirectories, the engine update fails. Additionally, a warning message is logged in the ProgramLog.txt file that resembles the following:
    WARNING: A failure was reported by the synchronization observer while installing the scanner. Action = 0x00000001. C:\<FSOCS Installation Directory>\(EngineName)\Bin\bases/stt/
    Cause

    This problem occurs because Forefront Security for Office Communications Server cannot update a scan engine when the update contains one or more subdirectories within its update package.
  7. Forefront Security for Office Communications Server (FSOCS) may contain the deprecated Computer Associates virus engine (CAVet)

    Symptoms

    The Computer Associates virus engine (CAVet) no longer updates or scans efficiently.

    More information

    The CAVet virus engine was deprecated December 1, 2009. The CAVet virus engine is no longer supported, although this virus engine may appear in the administrative console of Forefront Security for Office Communications Server. The Authentium Command virus engine replaces the CAVet virus engine.
  8. Those who use Office Communicator to send a file do not receive a "File Transferred Cancelled" notification if the intended recipient cancels or rejects the file transfer

    Symptoms

    The sender is not notified that the pending file transfer was canceled.

    More information

    Forefront Security for Office Communications Server may block the cancellation message that is sent to the sender from Office Communicator if the recipient either cancels or rejects the file. Therefore, the sender is not notified that the file transfer was canceled.

Hotfix rollup information

Download information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

How to install the hotfix rollup

To install the hotfix rollup, follow these steps:
  1. Run the installer. To do this, double-click the hotfix rollup executable file.

    Note When the installer is running, the Forefront services are stopped.
  2. After the installation is complete, and the Forefront services are restarted, make sure that Forefront is working correctly.

    Notes
    • The Forefront services are restarted automatically during the installation.
    • Forefront service packs or hotfix rollups can be installed by using the FFSMC Deployment job. For more information, see "Deployment Jobs" in the Forefront Server Security Management Console User's Guide. In this case, the installer runs in silent mode, and user input is not required. The rest of the process remains the same as when you double-click the executable file to run the installer .

Prerequisites

This hotfix rollup requires that Microsoft Forefront Security for Office Communications Server build 10.2.308 is installed.

File information

This hotfix may not contain all the files that you must have to fully update a product to the latest build. This hotfix contains only the files that you must have to correct the issues that are listed in this article.

The English (United States) version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Adonavigator.dll10.2.308.17420,72009-Apr-201020:54x86
Custominstall.dll10.2.308.17876,91209-Apr-201020:54x86
Dcomperm.exeNot Applicable79,36009-Apr-201018:44x86
Eula.rtfNot Applicable2,74729-Jan-201018:02Not Applicable
Eventstrings-en_us.dll10.2.308.17128,88009-Apr-201020:54x86
Eventstrings.dll10.2.308.17128,88009-Apr-201020:54x86
Extractfiles.exe10.2.308.17335,72809-Apr-201020:54x86
Filterengine.dll10.2.308.17330,60809-Apr-201020:54x86
Forefrontnotificationagent.exe10.2.308.1734,67209-Apr-201020:54x86
Forefrontnotificationagent.exe.manifestNot Applicable87018-Nov-200917:20Not Applicable
Forefrontrtcproxy.exe10.2.308.17104,30409-Apr-201020:54x86
Forefrontrtcproxy.exe.configNot Applicable9518-Nov-200917:20Not Applicable
Forefrontrtcproxy64.exe10.2.308.1798,30409-Apr-201018:41x86
Forefrontrtcproxy64.exe.configNot Applicable9518-Nov-200917:21Not Applicable
Fscadmarksvc.exe10.2.308.1789,08809-Apr-201018:44x86
Fsccodec.dll10.2.308.17194,92809-Apr-201020:54x86
Fsccommon.dll10.2.308.1718,28809-Apr-201020:54x86
Fsccontroller.exe10.2.308.171,541,48809-Apr-201020:54x86
Fsccontrollerps.dll10.2.308.1784,84809-Apr-201020:54x86
Fsccontrollerps64.dll10.2.308.1797,79209-Apr-201017:56x64
Fsccontroller_net_wrapper.dll10.2.308.1738,76809-Apr-201020:54x86
Fscdiag.exe10.2.308.17511,34409-Apr-201020:54x86
Fscperfmonitor64.dll10.2.308.17532,84809-Apr-201021:01x64
Fscreg.cfgNot Applicable14,55418-Nov-200917:20Not Applicable
Fscstarter.exe10.2.308.17244,08009-Apr-201020:54x86
Fscstatsserv.exe10.2.308.17270,70409-Apr-201020:55x86
Fscutility.exe10.2.308.17499,56809-Apr-201020:55x86
Fsemailpickup.exe10.2.308.17161,64809-Apr-201020:55x86
Fsocagent.dll10.2.308.1738,76809-Apr-201020:55x86
Fsocscanner.exe10.2.308.17766,32009-Apr-201020:55x86
Fsoperf.hNot Applicable89318-Nov-200917:20Not Applicable
Fsoperf.iniNot Applicable6,88818-Nov-200917:20Not Applicable
Fssaclient.exe10.2.308.171,199,98409-Apr-201020:55x86
Getenginefiles.exe10.2.308.17601,96809-Apr-201020:55x86
Gziparchive.dll10.2.308.17264,56009-Apr-201020:55x86
Installservice.exe10.2.308.1749,00809-Apr-201020:55x86
Installtask.exe10.2.308.17225,13609-Apr-201020:55x86
Installutil.dll.configNot Applicable11,22518-Nov-200917:21Not Applicable
Keywordinstaller.msiNot Applicable386,04809-Apr-201018:44Not Applicable
Languageconfig.xmlNot Applicable8909-Apr-201021:20Not Applicable
Launcher.exe10.2.308.17212,84809-Apr-201020:55x86
License.cfgNot Applicable10,84018-Nov-200917:20Not Applicable
License.rtfNot Applicable150,34618-Nov-200917:20Not Applicable
License_rules.cfgNot Applicable13,17218-Nov-200917:20Not Applicable
Macbinnavigator.dll10.2.308.17237,93609-Apr-201020:55x86
Microsoft.fso.common.dll10.2.308.17116,59209-Apr-201020:55x86
Microsoft.fso.diagnostics.dll10.2.308.1755,15209-Apr-201020:55x86
Microsoft.fso.imclient.dll10.2.308.1755,15209-Apr-201020:55x86
Microsoft.fso.installationhelper.dll10.2.308.1775,63209-Apr-201020:55x86
Microsoft.fso.performancecounters.dll10.2.308.1738,76809-Apr-201020:55x86
Microsoft.fso.registryaccess.dll10.2.308.1742,86409-Apr-201020:55x86
Microsoft.office.interop.uccapi.dll2.0.6362.15320,56018-Nov-200917:20x86
Mimenavigator.dll10.2.308.17321,39209-Apr-201020:55x86
Multimapper.dll10.2.308.17200,56009-Apr-201020:55x86
Networkinterfaceselector.exe10.2.308.1716,24009-Apr-201020:55x86
Openxmlnavigator.dll10.2.308.17250,22409-Apr-201020:55x86
Perfmonitorsetup.exe10.2.308.17289,64809-Apr-201020:55x86
Pidgen.dll5.2.3790.266030,91218-Nov-200917:20x86
Productconfig.xmlNot Applicable72818-Nov-200917:20Not Applicable
Programlogmsg.dll10.2.308.17111,47209-Apr-201020:55x86
Rarnavigator.dll10.2.308.17330,60809-Apr-201020:55x86
Remotinglayer.dll10.2.308.1782,28809-Apr-201020:55x86
Rtmpltfm.dll3.0.6362.105,322,24018-Nov-200917:20x86
Scanengines.dll10.2.308.1751,05609-Apr-201020:55x86
Scanenginetest.exe10.2.308.17314,22409-Apr-201020:55x86
Smimenavigator.dll10.2.308.17234,86409-Apr-201020:55x86
Statistics.configNot Applicable2,85318-Nov-200917:18Not Applicable
Statisticsmanager.dll10.2.308.17535,92009-Apr-201020:55x86
Structstgnavigator.dll10.2.308.17298,35209-Apr-201020:55x86
Tararchive.dll10.2.308.17246,64009-Apr-201020:55x86
Tnefnavigator.dll10.2.308.17305,00809-Apr-201020:55x86
Uccapi.dll2.0.6362.153,424,25618-Nov-200917:20x86
Uccapires.dll2.0.6362.15636,93618-Nov-200917:20x86
Uuencodenavigator.dll10.2.308.17253,80809-Apr-201020:55x86
Version.exe10.2.308.17309,61609-Apr-201020:55x86
Xmlconfigim.xmlNot Applicable4,03618-Nov-200917:20Not Applicable
Ziparchive.dll10.2.308.17300,91209-Apr-201020:55x86
Avemicrosoft.dll1.0.59.0434,56018-Mar-201016:40x86
Manifest.cabNot Applicable7,61309-Apr-201021:19Not Applicable
Mpavbase.vdm1.79.0.037,382,03215-Mar-201013:16Not Applicable
Mpavdlta.vdm1.79.1515.01,937,80809-Apr-201014:49Not Applicable
Mpengine.dll1.1.5605.05,283,15210-Mar-201001:47x86
Manifest.cabNot Applicable10,38318-Nov-200917:21Not Applicable
Wormprge.datNot Applicable22,72218-Nov-200917:21Not Applicable
Extractfiles.dll.mui10.2.308.1752,59209-Apr-201020:54Not Applicable
Forefrontserver.chmNot Applicable259,87618-Nov-200917:20Not Applicable
Fscdiag.dll.mui10.2.308.1759,76009-Apr-201020:54Not Applicable
Fscutility.dll.mui10.2.308.1765,39209-Apr-201020:55Not Applicable
Fssaclient.dll.mui10.2.308.17359,79209-Apr-201020:55Not Applicable
Getenginefiles.dll.mui10.2.308.1754,12809-Apr-201020:55Not Applicable
Resourcestrings.dll.mui10.2.308.17118,12809-Apr-201020:55Not Applicable

Properties

Article ID: 976616 - Last Review: April 14, 2010 - Revision: 1.0
APPLIES TO
  • Microsoft Forefront Security for Office Communications Server
Keywords: 
atdownload kbdownload kbautohotfix kbhotfixrollup kbfix kberrmsg kbbug kbexpertiseinter kbsurveynew kbqfe kbhotfixserver KB976616

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com