This article has been archived. It is offered "as is" and will no longer be updated.
Consider the following scenario:
You are running Microsoft Forefront Security for SharePoint on a SharePoint server.
In Forefront Administrator, you select Clean: repair document in the Antivirus settings.
In SharePoint Central Administrator, you clear the Attempt to clean infected documents check box in the Antivirus settings.
You try to upload an infected document to the SharePoint Web site.
In this scenario, Forefront Security for SharePoint unexpectedly cleans the document. This means the SharePoint Antivirus setting is not honored.
This problem occurs because the SharePoint Attempt to clean infected documents option does not take precedence over the Forefront Security for SharePoint Action setting for each scan job. This problem occurs in versions of Forefront Security for SharePoint that are earlier than Service Pack 3.
To resolve this issue, install Forefront Security for SharePoint with Service Pack 3 (SP3). For more information, click the following article number to view the article in the Microsoft Knowledge Base:
967995 Description of Forefront Security for SharePoint with Service Pack 3
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Steps to reproduce the problem
In Forefront Administrator, click Settings, and then click Antivirus. Click to highlight any of the scan jobs, and then set the Action to Clean: repair document.
In SharePoint Central Administrator, follow these steps:
In the Operation pane, under Security Configuration, click Antivirus.
In the Antivirus pane, click to clear the option to Attempt to clean infected documents, and then click Save.
Upload an infected document to the SharePoint Web site.