Summary
WFBS Advanced's Real-time Scan monitor shows the following message when scanning mails with attachments bigger than 30MB:
[Virus Scanning Filter] file "<name of file>.zip" [Damaged_ZipFile]
WFBS Advanced then sends an email to you with a text file named:
REMOVED_BY_THE_EXCHANGE_EMAIL_SCANNING_SERVICE_008BC5E7_55E9F016D00.
The issue occurs because the SMEX store level hook truncates files larger than 30MB into 30MB files before it does the scan. This may damage the file structure of the attachment, and cause WFBS Advanced to treat the file as a corrupted zip file.
As a workaround, do the following:
- Open the Registry (regedit.exe) and go to HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion.
Always
back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
- Add the "MaxAllowedVsapiMessageSize" registry key and set its value to "104857600" (100MB).
- Restart the Messaging Security Agent Master Service.
WFBS Advanced will show the message "[Over Restriction (attachment size)]", but you will still receive the email with the attachment.
