Microsoft Forefront Protection for Exchange Server failed to update the Kaspersky scan engine

Issue Description:

A Microsoft Forefront Protection event IDs 7003 and 7006 appears in the application log as a warning,

You will notice a warning in the engines part of the FPE dashboard,

If you clicked on engine summary you will notice an alert stating that Kaspersky antivirus definition has failed,

You might also receive an email from FPE stating that that Kaspersky antivirus definition has failed assuming you have configured the notification for that

Cause:

This is a bug and till moment it is not clear if it is from Microsoft or Kaspersky side.

Resolution:

Make sure you enable the show hidden files

On Windows Server 2003

Browse the following directory  “C:\Documents and Settings\All Users\Application Data” and rename the “Kaspersky SDK” folder to “Kaspersky SDK old”

Click on the Update All Engines Now from the actions menu

On windows Server 2008

Browse to the following directory “C:\ProgramData”  and rename the “Kaspersky SDK” folder to “Kaspersky SDK old”

Click on the Update All Engines Now from the actions menu
after some time a new folder will be created with the old name,

Notes:

The first attempt to update the engines most probably will fail due to the timeout settings,

You will need to rerun the  Update All Engines Now from the actions menu for more than once till it succeed.

 see you soon, Hany Donia