Error details- Plug-in- Virus Manager... messages in quarantine - MMS 4.x
This article was previously published as ID#25108

Symptom:
Mail in quarantine queue.
Error details- Plug-in: Virus Manager. State: Evaluation. Reason code: 0x80004005.

Detailed Information:
Mail in quarantine queue.
Error details- Plug-in: Virus Manager. State: Evaluation. Reason code: 0x80004005.

The Virus Manager will quarantine all mail that it can't scan for viruses. One reason that the Virus Manager might not be able to scan messages is if the virus pattern files have become corrupt. Very often, the pattern files, or DAT files, become corrupt during a download, or virus pattern update, however they can become corrupt at any time for various reasons.

MMS version 4.5 introduced error checking. If MMS detects that the current DAT files have become corrupt, it will roll back to the previous known good DAT files. For example if you download the 4092 DAT files and they become corrupt, the Virus Manager may quarantine several messages with the error:
Error details- Plug-in: Virus Manager. State: Evaluation. Reason code: 0x80004005.
and then roll back to the 4091 DAT files and continue processing mail.

Resolution:
To resolve this issue, you must remove the highest numbered DAT files on your system, and download them fresh from Tumbleweeds FTP site.

1. Stop the SMTP Relay Service
2. In NT Explorer, navigate to the MMS installation directory (by default c:\program files\tumbleweed\worldsecure\)
3. Delete the file named DAT-xxxx.zip - where xxxx is the highest number in that naming scheme.
4. Delete the directory \xxxx\ - where xxxx is the highest numbered directory and should be the same as the file in step 3.
5. Restart the SMTP Relay service.
6. In the MMS config - Virus Manager->Properties - click the "update patterns now" button or see technote entitled "Virus Manager pattern updates - Manual update of pattern files"
7. To re-send quarantined message so that they are re-scanned for viruses, see technote entitled: "Cannon Utility"

Status:
Confirmed

Original Author: DLANG
Original Submitter: ACUNY
Keywords: virus manager quarantine DAT MMS ID#25108