PRB: Antivirus software causes FileSystemObject calls to hang IIS (295375)


The information in this article applies to:

  • Microsoft Active Server Pages
This article was previously published under Q295375
Important These steps may increase your security risk. These steps may also make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We recommend the process that this article describes to enable programs to operate as they are designed to, or to implement specific program capabilities. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this process in your particular environment. If you choose to implement this process, take any appropriate additional steps to help protect your system. We recommend that you use this process only if you really require this process.

Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.

SYMPTOMS

When you browse to an Active Server Pages (ASP) page that contains FileSystemObject calls, the request for that page stops responding (hangs), and then eventually times out in the browser.

CAUSE

This problem occurs because the Script Blocking feature in Norton AntiVirus software blocks scripting operations that access the file system, such as FileSystemObject. Although this problem is prevalent in Active Server Pages (ASP) Web applications, it can also occur in other technologies, such as Windows Scripting.

Note This problem occurs even if Norton AntiVirus has been disabled.

In August 2003, Network Associates McAfee added a feature that is named Script Stopper. Script Stopper is similar to Norton AntiVirus Script Blocker. Currently, Script Stopper blocks access to the FileSystemObject. However, Script Stopper may do more than just block access.

RESOLUTION

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk. To resolve this problem in Norton AntiVirus, contact Norton AntiVirus Software Support. The following Symantec Web site describes how to remove the Script Blocking feature:

http://service1.symantec.com/SUPPORT/nav.nsf/8d071816eedd7cac88256c0e005a96e5/32066c6bf6a78ded88256ab7006a3a25?OpenDocument

Note You may have to reboot the server after you make the above-mentioned changes to the Norton AntiVirus software.

To resolve this problem in McAfee VirusScan, contact McAfee Technical Support.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

REFERENCES

For more information about the McAfee, visit the following Web site:

http://download.mcafee.com/products/manuals/en-us/VS_UserGuide_Sep03.pdf

Modification Type:MinorLast Reviewed:7/8/2005
Keywords:kbFSO kbprb kbScript kbSECAntiVirus kbSecurity kbWebServer KB295375 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.