You may receive the following virus detection message, "The connection to the Symantec SharePoint Security Service cannot be established. Please check the status of the Symantec SharePoint Security Service or contact your administrator for more information. Code :8000"
- The status of the Scan Engine may change to "Unavailable".
- The connector that connects SharePoint to the Scan Engine sets the VirusStatus code in the document table to a non-zero and non-null value.
- You may also see one of the following errors:
- You use either Symantec AntiVirus (SAV) for SharePoint 4.3.x or Symantec Protection for SharePoint (SPSS) 5.1.x
The connector that connects SharePoint to the Scan Engine sets the VirusStatus code in the document table to a non-zero and non-null value because the connector is not able to connect to the Scan Engine. Possible underlying causes: (1) The Scan Engine is overloaded. (2) SPSS 5.1 or 5.1.1 is installed on a Frontend web server without the Central Administration console.
- If SPSS 5.1 or 5.1.1 is installed on a Frontend web server within the Central Administration console, do one of the following:
- Upgrade SPSS to 5.1.2 or later, or
- Install the Central Administration console to each SharePoint web server where SPSS is installed.
- If Scan Engine is out of service, troubleshoot the Scan Engine and return it to service.
- Within SPSS, run a manual scan.
For more information, please refer to the documents in the "Related Articles" section.
SPSS 5.1 and 5.1.1 require that the Central Administration service of WSS3.0/MOSS2007 be installed on all Frontend web servers to perform most administration tasks and to perform real-time scanning. For more, please see:
Title: Deploying Symantec Protection 5.1 for SharePoint Servers in a stand-alone and farm SharePoint Environment
Title: You experience various symptoms when you use SharePoint Portal Server 2003 on a computer that has an antivirus scan engine installed
Symantec is not responsible for content published to the internet by other vendors.
NOTE: The Microsoft article contains a SQL query which resets the VirusStatus code for each document in the SharePoint database. Symantec does not recommend this solution, as it will reset all virus detection information, including the VirusStatus codes for documents which were marked because they contain viruses. A non-zero and non-null value is also used to indicate actual virus detection and is used when SPSS receives a valid 'infected' response from the Scan Engine.
Please note that uninstalling SAV for SharePoint/SPSS is NOT a workaround for this issue. Uninstalling will not reset the VirusStatus field and a virus scanner will need to be reinstalled to re-scan the files. The files will need to be scanned and receive a 'clean' verdict in order for the VirusStatus field to be reset.