You are currently offline, waiting for your internet to reconnect

Forefront Security for SharePoint returns an error when it scans a large compressed file that contains many smaller files

This article has been archived. It is offered "as is" and will no longer be updated.
Symptoms
When Microsoft Forefront Server Security for SharePoint scans a large compressed file, it may return one of the following errors:
  • Out of memory
  • Engine Error
  • Timeout
  • Corrupted Compressed File
Cause
This problem occurs when one of the following conditions is true:
  • The size of the compressed file exceeds the maximum compressed file size.
  • The total size of all the files in the compressed archive exceeds the maximum uncompressed file size.
The maximum compressed file size and the maximum uncompressed file size are specified by the following registry values:
  • Maximum compressed file size:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint\MaxCompressedSize
  • Maximum uncompressed file size :
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint\MaxUnCompressedFileSize

    Note By default, the maximum uncompressed file size registry key is not present, but the value is 100 MB
Resolution
In Forefront Security for SharePoint with Service Pack 3 (SP3), you can enable a feature to detect compressed files that exceed limits for maximum compressed file size or maximum uncompressed file size as "CorruptedCompressedFile."

Steps to enable the feature

To do this, follow these steps:
  1. Install Forefront Security for SharePoint Service Pack 3.
  2. Add a
    SumInternalSizesOfCompressedArchive
    registry key entry, and then set the registry value to 0. To do this, follow these steps:
    1. Click Start, click Run, type regedit in the Run box, and then press ENTER.
    2. Locate and then click the following registry subkey:
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Sharepoint
    3. On the Edit menu, point to New, and then click DWORD Value.
    4. Type SumInternalSizesOfCompressedArchive, and then press ENTER.
    5. Right-click SumInternalSizesOfCompressedArchive, and then click Modify.
    6. In the Value data box, type 0, and then click OK.
    7. Exit Registry Editor.
  3. Activate the new settings. To do this, do one of the following:
    • In the Forefront Server Security Administrator client, click SETTINGS, and then click General Options. Change and then save a General Options setting. Then, revert the setting to the original setting.

      Note The registry settings are reread when any of the options are changed.
    • Restart the FSCController service in the Services panel. To do this, click Start, click Run, type services.msc, and then click OK. In the list of services, right-click FSCController, and then click Restart.
When the SumInternalSizesOfCompressedArchive value is enabled, compressed files that exceed the maximum compressed file size or the maximum uncompressed file size are detected as "CorruptedCompressedFile." These files will be deleted if the Block/Delete Corrupted Compressed Files setting is selected.

To skip scanning of compressed files that exceed the maximum compressed file size or the maximum uncompressed file size, use one of the following options:
  • Disable the Block/Delete Corrupted Compressed Files option.
  • Enable the Block/Delete Corrupted Compressed Files option, and then enable the
    SkipLargeCompressedFileDeletion
    registry entry. For more information about how to use the SkipLargeCompressedFileDeletion registry value, click the following article number to view the article in the Microsoft Knowledge Base:
    972072 Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted
    For more information about the General Options settings in Forefront Security for SharePoint, visit the following Microsoft Web site:
More information
For more information about Forefront Security for SharePoint Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
967995 Description of Forefront Security for SharePoint with Service Pack 3
FSSP SP3 Forefront Server Security for SharePoint FSSP SumInternalSizesOfCompressedArchive SkipLargeCompressedFileDeletion Out of memory Engine Error Corrupted Compressed File MaxCompressedSize MaxUnCompressedFileSize Delete Corrupted Compressed Files
Properties

Article ID: 972074 - Last Review: 01/16/2015 04:01:20 - Revision: 2.0

Microsoft Forefront Security for SharePoint, Microsoft Forefront Security for SharePoint Service Pack 1, Microsoft Forefront Security for SharePoint Service Pack 2

  • kbnosurvey kbarchive kbexpertiseinter kbbug kbqfe kbsurveynew kbprb KB972074
Feedback