| Event Id | 5120 |
| Source | SmallBusinessServer |
| Description | An error occurred in the function DeleteUnsafeAttachments while running the Secure Attachments Tool (Secatts.dll) to remove SMTP e-mail attachments. The error code is: -2146644475. To fix the problem, run the Configure E-mail and Internet Connection Wizard, and clear the option to remove e-mail attachments; then run the wizard again and select the option. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. |
| Event Information | CAUSE: This behavior is caused by e-mail messages that contain MIME fields whose content type is multipart/alternative. The expected content type is multipart/mixed. Typically, e-mail messages that contain multipart/alternative content type MIME fields are the result of e-mail worms. Less frequently, this behavior can be caused by a non-Microsoft antivirus program that is running a file-level scan of the Exchange folders. The file-level scan may remove infected attachments before Small Business Server 2003 can remove the attachment. RESOLUTION: You can ignore these events, and you do not have to run the Configure E-mail and Internet Connection Wizard. However, if you have an antivirus program that runs a file-level scan, Microsoft recommends that you configure the file-level scan to exclude the Exchange Server folders. |
| Reference Links | Event ID 5120 is logged when e-mail messages are processed by Small Business Server 2003 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.