Steps To Remediate Antigenic Antivirus Events

Sometimes your computer may generate an error indicating that it is displaying the Antigen Antivirus event receiver. There can be several reasons for this problem.

Updated: ASR Pro

1. Download and install ASR Pro

2. Launch the program and select your language

3. Follow the on-screen instructions to start scanning for problems

Improve your computer's performance by clicking here to download the software.

Microsoft Exchange 2000 Server Standard Edition
Microsoft Server Exchange 2003 Enterprise Edition
Microsoft Server Exchange 2003 Standard Edition

Important! This article provides information on how to modify the registry exactly. Be sure to back up the registry before making any changes. Make sure you know exactly how to restore the registry if you have a problem. For more information about backing up, restoring, and modifying your laptop or computer, see the following article in the Microsoft Knowledge Base:

SYMPTMS

The server that is running Microsoft Exchange 2000 Server or Microsoft Exchange Server 2003 in your organization may be experiencing one of the following problems, as well as several of the following:

Messages can also be saved to the mailboxes of these queues. You may not be able to resolve this issue by restarting the Exchange 2000 Server-related services, or possibly the Exchange Server Services 2003-related services. Instead, you must restart your computer on the Internet to restore message flow.
If you are using telnet on the Telnet port on a telnet server that is not working If it melts properly, and you issue the MAIL FROM: or DATA command, your company receives the following error message:
452 4.3. No storage space
The Exchange server logs the following event in the Application event log:
Event ID: 429
Event Source: SMTPSVC
Event type: error
Description: “Invalid virtual server MailQueue directory: The specified mail queue list is not valid.” The SMTP service could not be started. “

REASON

This problem can have one or more reasons. Some of the most common reasons are usually as follows.

Reason 1

Reason 2

The module hosting Exchange does not have sufficient read / write permissions to write messages to the BadMail, Pickup, and Queue folders, especially the Mailroot VSI # folders. 3

This

The problem can occur regardless of whether your Exchange server is receiving a lot of spam. In this case, the Invalid Mail folder is filled with messages that your server normally cannot process. Also, the hard drive is definitely almost full.

In most cases, this problem canThis does not occur if the Antigen Antivirus Event (version 6.5) is installed on your device. This issue can be caused by – a leak in MailMsg objects.

Exchange 2001 Server or Exchange Server 2003 has a default limit of 90,000 MailMsg objects that can be assigned. When this limit is reached, the actual Exchange server cannot process further points. For more information on coverage, click the article number below to view the article in the Microsoft Knowledge Base:

258748 How to set the confidence interval for the number of SMTP messages in queues

SOLUTION

Since this problem can have multiple causes, follow one or more of the applicable solutions, depending on your situation.

Resolution 1

Tlist.exe: On the Windows 2000 CD, extract the Tlist.exe utility from the entire Support.cab file to the entire Support Tools folder.
Smtpreg.vbs: To get it, download the installation and the Exchange Server SDK. To do this, visit the following Microsoft website:

Determine if an antigen event handler is loaded. Do it :
1. Click Start “,” Run “, type cmd in the” Open “field and click” OK “.
2. Find the folder where you got the Tlist.exe utility, then enter the following command:
  network information
  
  If AntigenSmtpSink.dll is listed in the DLL loaded counter, the Antigen event listener is loaded.
Determine if Antigen Event Receiver is bound to the SMTP Virtual Server. To be capable of:
1. Click the Start button, click Run, and then click OK.
2. Find most of the folder where the Smtpreg.vbs archive is stored (by default C: Program Files Microsoft SDK Include), and then enter the command shortly after that:
  cscript smtpreg.vbs / enum> avant.txt
3. Open our own Before.txt file with a handy text editor such as a small notepad and search for “Antigen”. (Note that the actual OnPostCategorize transport event may be SMTP-related.) Close the editor.
Warning. Serious problems can occur if you modify the registry incorrectly using Registry Editor or any other method. These issues can force families to reinstall the opera The functional system. Microsoft cannot guarantee that problems can be solved. Modify the at registry at your own risk.
Click Start, Run, type in regedit, open and click OK.
Go to the following registry subkey:
Updated: ASR Pro

Is your computer running slow? Is it plagued with frustrating errors and problems? Then you need ASR Pro � the ultimate software for repairing and optimizing your Windows PC. With ASR Pro, you can fix any Windows issue with just a few clicks � including the dreaded Blue Screen of Death. Plus, the software will detect and resolve files and applications that are crashing frequently, so you can get back to work as quickly as possible. Don't let your computer hold you back � download ASR Pro today!

HKEY_LOCAL_MACHINE SOFTWARE Sybari Software Antigen for Exchange
In the registration menu, click “Export registration file”.
For File Name, Exported Source and Antigen, just click Save.
Note. If you do not need to edit this Windows registry subkey, double-click the Exported Antigen.reg file that you unfortunately saved.
In the right pane of the Registry Editor window, right-click the AntigenEnabled value and select Modify.
Set AntigenEnabled to 0x1 (default is 0x3).
Note. This indicates that you need to enable the Antigen service for scanning.
- 0 disables all scanning processes.
- 1 Scan activations that can only be found in the information store (live, manual and MTA).
- 2 only activates the prov taskInternet services.
- 3 (standard) almost lets you scan.
Close the registry editor.
Log out and then resume the Antigen IMC service.
Note. If you restrict the IMC antigen service, the SMTP service will also be stopped.
To completely unload the Antigen event receiver, stop the Microsoft Internet Information Services (IIS) management service.
It also stops all dependent services like Microsoft Information Store, SMTP, Microsoft Exchange MTA stacks, WWW Publishing Service and others.
Run the tlist inetinfo command and verify that AntigenSmtpSink.dll does not appear in the registry of loaded DLL files.
Make sure most Antigen event receivers are no longer bound to the SMTP virtual machine. Do it :
1. Click Start, Run, cmd and then just click OK.
2. Find the folder where you saved the Smtpreg.vbs file (in case of non-payment, C: Program Files Microsoft SDK Include), then enter the following command:
  
  cscript smtpreg.vbs / enum> after.txt
3. Just open the After.txt file in a text editor, say notepad, and then search for a variety of “antigens”. (Antigen should not appear in a while text file.) Close Notepad.

For more information on Antigen software, visit the appropriate Microsoft website:

Resolution 2

Using Windows Explorer, check the VSI file # . By default, this folder is located at the Exchange installation point:
exchsrvr mailroot

Note. VSI 1 corresponds to SMTP virtual server 1, VSI 2 corresponds to SMTP virtual server 2 and is absolutely enabled.
Right-click the # VSI folder and then just click Properties.
Click the Security tab and then just make sure the system account balance is listed in the field name.
Then click on the specific system account and confirm who granted full access permissions.
Repeat steps 2-4 for the BadMail, Queues, and Pickup subfolders, which are typically found in Exchsrvr Mailroot Vsi # .
If you find that the system account is never listed in the access control list (ACL), add the system account and simply give it full control.
Close and restart the websiteSMTP and Microsoft Exchange Routing Engine.

Resolution 3

Stop the SMTP service. To do this, follow these steps:
1. In this IT management system, double-click the Services and Applications branch and then click Services.
2. In the defined right pane, right-click Simple Mail Protocol Transport (SMTP) and select Stop.
In Windows Explorer, find the Exchsrvr Mailroot Vsi # .Do
folder.It is important not to open the BadMail folder. Depending on the amount of junk messages being processed by the Exchange server, the server in turn can contain several hundred downloads. If you open this file, the server may not respond.
Permanently delete the invalid mail folder. To do this, click the BadMail directory in Windows Explorer, press and move the SHIFT key, then DELETE media
Note. Deleting this folder may take a while, depending on how many files the file typically contains.
Create a new BadMail folder.
Start all SMTP services.

For more information on how to automaticallyto delete messages from our own BadMail folder in Exchange Server 03 and Exchange 2000 Server, click the following article number to view the article in the Microsoft Knowledge Base:

To work around this standalone release, use the Antigen event listener for this SMTP Virtual Server in Exchange 2002 Server or Exchange Server 03. This workaround only applies to Antigen, which will be version 6.5. To do this, follow these steps. Refer to

Before performing any of these steps, pay attention to the following utilities and install them:

Warning. Serious problems can occur every time you use Registry Editor or other methods to modify the registry incorrectly. These problems may require reinstalling the maintenance kit. Microsoft cannot guarantee that the circumstances can be resolved. Edit them in the registry at your own risk.

867642 Automatic deletion of messages from the Invalid Mail folder in Exchange Server 2003 and therefore in Exchange Server 2000