Description of notification messages that refer to an "ExceedinglyInfected virus" and to an "ExceedinglyNested compressed file" (906002)


The information in this article applies to:

  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 7.5 for Microsoft Exchange
  • Sybari Antigen 7.5 for SMTP Gateways

INTRODUCTION

This article describes the following notification messages: Antigen for Exchange found File.zip infected with ExceedinglyInfected Virus. The File is currently removed.Antigen for Exchange found File.zip infected with ExceedinglyNested compressed file. The File is currently removed.

MORE INFORMATION

You receive a notification that refers to an "ExceedinglyInfected virus" if either of the following conditions is true:
  • Sybari Antigen encounters a compressed file that contains more than the number of virus matches that Antigen can identify.
  • Antigen encounters a compressed file that contains more than the number of file filter matches that Antigen can identify.
By default, Antigen can identify five virus matches or file filter matches. This default value is set in the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\SybariSoftware\AntigenforExchange\MaxCompressedFileInfections

You receive a notification that refers to an "ExceedinglyNested compressed file" when Antigen encounters a compressed file that contains more than the number of nested compressed files that Antigen can identify. By default, Antigen can identify five compressed files. This default value is set in the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Sybari Software\AntigenforExchange\MaxNestedCompressedFiles

For more information about these registry subkeys, see Appendix B in the Antigen User Guide.
Modification Type:MajorLast Reviewed:11/3/2005
Keywords:kbtshoot KB906002
©2004 Microsoft Corporation. All rights reserved.