Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All
Collapse the table of content
Expand the table of content
Expand Minimize

Sybari Antigen is installed on this Exchange server but the service is stopped

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at http://go.microsoft.com/fwlink/?linkid=34707.]  

Topic Last Modified: 2005-11-18

The Microsoft® Exchange Server Analyzer Tool queries the Win32_Service Microsoft Windows® Management Instrumentation (WMI) class to determine whether Sybari Antigen is installed and if the AntigenService service is running on the Exchange Server computer.

The Exchange Server Analyzer also queries the Win32_Service WMI class to determine whether the value set for the Started key in the Microsoft Exchange Information Store service is set to True or False.

A value of False indicates that the Microsoft Exchange Information Store service is not running on this Exchange Server computer. A value of True indicates that the Microsoft Exchange Information Store service is running.

If the Exchange Server Analyzer finds that the Microsoft Exchange Information Store service is running, and that Sybari Antigen is installed, but the AntigenService service is not started, a warning is displayed.

Sybari Antigen provides antivirus protection for Exchange Server. The following are some reasons the Sybari Antigen service may have been stopped, together with solutions:

  • The software you are running on your Exchange Server may be an evaluation (or trial) version that has expired. In this case, you may need to reinstall Sybari Antigen. At a minimum, to continue using the software, you must activate it.

  • An administrator may have unintentionally stopped the Sybari Antigen service. Verify that the service is set to start automatically, and then start the service.

  • A malicious worm, virus, or other program may have stopped the service. Verify that the service is set to start automatically, and start the service. If the service continues to stop unexpectedly without relevant error events, verify that the computer is not infected with a malicious worm and disinfect the system if needed.

It is generally recommended that you deploy antivirus software designed for messaging systems at either the Simple Mail Transfer Protocol (SMTP) gateway or at the Exchange servers that host mailboxes. For the most protection, run antivirus software at the gateway that scans the incoming MIME messages, and run a scanner on the Exchange server that uses VSAPI 2.5. Additionally, you should run antivirus software on the client computers. If you are running antivirus software designed for messaging systems (it can parse and scan MIME) at the gateway or on the Exchange server, running a file-level scanner at the desktop is sufficient.

  1. Open the Services MMC snap-in.

  2. Right-click AntigenService service, and then click Properties.

  3. On the General tab of the AntigenService property page, make sure the Start-up type is set to Automatic. If it is not, set it to Automatic, click Apply, and then click OK.

  4. Right-click AntigenService service, and then click Start.

  5. Close the Services snap-in.

  • For more information about fortifying an Exchange environment against e-mail transmitted viruses and worms, see "Slowing and Stopping E-Mail Viruses in an Exchange Server 2003 Environment" (http://go.microsoft.com/fwlink/?LinkId=47587).

For more information about using antivirus software with Exchange Server, see the following Microsoft Knowledge Base articles:

For a list of third-party antivirus software that is available for Exchange Server, see the Exchange Server Partners: Antivirus Web site (http://go.microsoft.com/fwlink/?linkid=16226).

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft