Security for a day

Found a odd bug with DPM and Forefront. Forefront detects a virus and puts in to a manual clean mode. DPM stops synchronizing until the file is manually cleaned.

Background

Users folders are being redirected to a server; My Documents, Profiles etc. The user machines are only set to quick scans.

The server does a full scan, out of hours, of all the files on the server. It detects compressed files containing infected files (in .zip/.rar/.iso/etc and tries to clean them. It fails to clean or remove the infected file and places an alert in MOM and on the server in question (the big red cross on the Forefront icon is displayed) DPM  ’07 tries to back up the file but appears to stop. Forefront has “locked” access to the file. Until manual action is taken, in this case the compressed file is deleted from the user’s My Documents, Forefront fails to clean it and DPM won’t backup the server. Once the file is deleted and Forefront confirms the system is clean again, DPM continues on it happy way of replicating the data.

Microsoft have been informed and we’re waiting on an answer.

—- Update——

After building a lab or two and talks with Ms (thanks Lee!) discovered the new client build 1.5.1958.0 KB956280 fixes the problem. Have deployed it to a number of previous problem sites and DPM is behaving itself nicely.