Topic Last Modified: 2005-11-18
The Microsoft® Exchange Server Analyzer Tool queries the Win32_Service Microsoft Windows® Management Instrumentation (WMI) class to determine whether a value is set for the Started key. The Win32_Service class determines whether Symantec Antivirus for Exchange Server is installed. A value of True on the Started key indicates that the Symantec Antivirus service is running on this Exchange Server computer. A value of False on the Started key indicates that the Symantec Antivirus service is not running on this Exchange Server computer.
If the Exchange Server Analyzer finds that the Symantec Antivirus is installed on this Exchange Server computer but the Symantec Antivirus service is not started, the Exchange Server Analyzer displays a warning.
Symantec Antivirus provides antivirus protection for Exchange Server. Some reasons the Symantec Antivirus service may have been stopped, together with solutions, are listed here.
- The software that you are running on your Exchange server may
be an evaluation version or trial version that has expired. In this
case, you may have to reinstall Symantec Antivirus. At a minimum,
to continue to use the software, you must activate it.
- An administrator may have unintentionally stopped the Symantec
Antivirus service. Verify that the service is set to start
automatically, and then start the service.
- A malicious worm, virus, or other program may have stopped the
service. Verify that the service is set to start automatically, and
start the service. If the service continues to stop unexpectedly
without relevant error events, verify that the computer is not
infected with a malicious worm and disinfect the system if it is
infected.
It is recommended that you deploy antivirus software designed for messaging systems at either the Simple Mail Transfer Protocol (SMTP) gateway or at the Exchange servers that host mailboxes. For the most protection, run antivirus software at the gateway that scans the incoming MIME messages, and a scanner on the Exchange Server that uses VSAPI 2.5.
To start the Symantec Antivirus service-
Open the Services MMC snap-in.
-
Right-click Symantec Antivirus service, and then click Properties.
-
On the General tab of the Symantec Antivirus property page, make sure the Start-up type is set to Automatic. If it is not, click Apply, and then click OK.
-
Right-click Symantec Antivirus service, and then click Start.
-
Close the Services snap-in.
Additionally, you should run client antivirus software on the user desktop. A file-level scanner at the desktop provides sufficient protection if one of the following conditions is true:
- You are running antivirus software that is designed for
messaging systems that can parse and scan MIME at the gateway.
- You are running antivirus software that is designed for
messaging systems that can parse and scan MIME on the Exchange
server.
For more information about the different types of virus-scanning programs that are typically used with Microsoft Exchange Server 2003, see the Microsoft Knowledge Base article 823166, "Overview of Exchange Server 2003 and antivirus software" (http://go.microsoft.com/fwlink/?LinkId=3052&kbid=823166).
For more information about the different types of virus-scanning programs that are typically used with Microsoft Exchange 2000 Server, see the Knowledge Base article 328841, "Exchange and antivirus software" (http://go.microsoft.com/fwlink/?LinkId=3052&kbid=328841).
For information about fortifying an Exchange Server environment against e-mail transmitted viruses and worms, see "Slowing and Stopping E-Mail Viruses in an Exchange Server 2003 Environment" (http://go.microsoft.com/fwlink/?LinkId=47587).