INO_FLTR.SYS version update available
[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at http://go.microsoft.com/fwlink/?linkid=34707.]
Topic Last Modified: 2005-11-18
The Microsoft® Exchange Server Analyzer Tool queries the CIM_Datafile Microsoft Windows® Management Instrumentation (WMI) class to determine the version of the Ino_fltr.sys Computer Associates antivirus filter driver.
The Exchange Server Analyzer queries the CIM_Datafile WMI class to determine the value of the Version key for Ino_fltr.sys and, based on the version build number, a software update may be required. If the value for the Version key indicates that the version number is less than 5.00.6100.142 for the Ino_fltr.sys file, a warning is displayed.
A version number of less than 5.00.6100.142 indicates that the most current version of the Ino_fltr.sys file is not installed on the Exchange Server computer and a more current version of the filter driver should be installed. An antivirus software update for the Ino_fltr.sys file can be found at the Computer Associates Web site. This antivirus software update is highly recommended and can improve the overall performance and reliability of the Exchange Server computer.
When Inoculan Computer Associates eTrust Antivirus version 6.x or 7.x and InoculateIT version 6.x antivirus software programs are installed on an Exchange 2000 Server or Exchange Server 2003 computer, the Setup program copies Ino_flpy.sys and Ino_fltr.sys antivirus filter driver files to the %systemroot%\system32\drivers folder. The antivirus driver filter files are Windows NT® Kernel mode drivers that are used to start the required antivirus services. Older versions of the filter drivers can cause unexpected results with the Exchange Server computer.
To correct this warning
To obtain the latest antivirus software updates for the Ino_fltr.sys file, visit the Computer Associates Web site: (http://supportconnectw.ca.com/premium/antivirus/downloads/nt/4.5/ildrvupdate.asp).
Download the appropriate updated version of eTrust or InoculateIT.
Do a full backup of the Exchange Server computer including a backup of the Ino_fltr.sys file.
Install the latest update to eTrust or InoculateIT.
Web addresses can change, so you might be unable to connect to the Web sites mentioned here.
For more information about how to use antivirus software with Exchange Server, see the following Microsoft Knowledge Base articles:
240309, "How to Fully Disable Antivirus Software from Filtering Files" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=240309)
328841, "XADM: Exchange and Antivirus Software" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=328841)
823166, "Overview of Exchange Server 2003 and antivirus software" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=823166)
306105, "XGEN: Microsoft's Position on Antivirus Solutions for Exchange 2000" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=306105)
245822, "Recommendations for troubleshooting an Exchange computer with antivirus software installed" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=245822)
For a list of third-party antivirus software available for Exchange Server, see the Exchange Server Partners: Antivirus Web site (http://go.microsoft.com/fwlink/?linkid=16226).