Topic Last Modified: 2005-11-18

The Microsoft® Exchange Server Analyzer Tool queries the Win32_Service Microsoft Windows® Management Instrumentation (WMI) class to determine whether Sybari Antigen is installed and if the AntigenStore service is running on the Exchange computer.

The Exchange Server Analyzer also queries the Win32_Service WMI class to determine whether the value set for the Started key in the Microsoft Exchange Information Store service is set to True or False.

A value of False indicates that the Microsoft Exchange Information Store service is not running on this Exchange Server computer. A value of True indicates that the Microsoft Exchange Information Store service is running.

If the Exchange Server Analyzer finds that the Microsoft Exchange Information Store service is running, and that Sybari Antigen is installed, but the AntigenStore service is not started, a warning is displayed.

Sybari Antigen provides antivirus protection for Exchange Server. Some reasons the Sybari AntigenStore service may have been stopped, together with solutions are listed here.

It is generally recommended that you deploy antivirus software designed for messaging systems at either the Simple Mail Transfer Protocol (SMTP) gateway, or at the Exchange servers that host mailboxes. For the most protection, run antivirus software at the gateway that scans the incoming MIME messages, and a scanner on the Exchange Server that uses VSAPI 2.5. Additionally, you should be running client antivirus software on the user desktop. If you are running antivirus software designed for messaging systems (it can parse and scan MIME) at the gateway or on the Exchange server, running a file-level scanner at the desktop is sufficient.

To start the AntigenStore service

  1. Open the Services MMC snap-in.

  2. Right-click AntigenStore service, and then click Properties.

  3. On the General tab of the AntigenStore property page, make sure the Start-up type is set to Automatic. If it is not, set it to Automatic, click Apply, and then click OK.

  4. Right-click AntigenStore service, and then click Start.

  5. Close the Services snap-in.

For information about fortifying an Exchange environment against e-mail transmitted viruses and worms, see "Slowing and Stopping E-Mail Viruses in an Exchange Server 2003 Environment" (http://go.microsoft.com/fwlink/?LinkId=47587).

For more information about using antivirus software with Exchange Server, see the following Microsoft Knowledge Base articles:

For a list of third-party antivirus software that is available for Exchange Server, see the Exchange Server Partners: Antivirus Web site (http://go.microsoft.com/fwlink/?linkid=16226).