This article has been archived. It is offered "as is" and will no longer be updated.
The scan engines in Microsoft Forefront Security for Exchange Server do not update as expected. Additionally, the following error is logged in the ProgramLog.txt file:
ERROR: UpdateException: GetFileCommand failed on <scanengine.dll>. SybSync:UnzipFile CabException: Failed to extract the file(s) from 'C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\Engines\x86\<ScanEngineName>\Bin\sybF2.tmp': 11: User aborted. CAB is readable. Failed to open 'C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\Engines\x86\<ScanEngineName>\Bin\aveMicrosoft.dll'. Error: 13. File exists. Attribs:'RW'."
INFORMATION: The <ScanEngineName> scan engine has been rolled back.
This issue occurs because one of the scan engine update files contains a hidden attribute.