This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 69%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Hi Team,
Basically in our current business requirements we have a requirement to upload files to share point space and to wait for the status that is supposed to be delivered form sharepoint thorough ODATA Rest API call.But what we can see is that for some files it is coming good under "vti_x005f_virusstatus" field but in other case field is absent.We tried with similar type of file as well as with password protected zip file and all.
In document it says there are some criteria to be match before scanning engine scans for a particular file.So can you elaborate or confirm if we are missing some criteria or not??We tried with the file which are uploaded 1 day ago but still it's not giving us that field.
Below is the Rest API format we tried with:-
https://<Domain name>/_api/Web/Lists/GetByTitle('<Folder Name>')/Items?$filter=OData__dlc_DocId eq '<DocumentId>'&$select=File/Properties/vti_x005f_virusstatus&$expand=File/Properties
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 26%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
This should be noted for others:
All files are not automatically scanned.
Ref:
https://learn.microsoft.com/en-us/exchange/troubleshoot/antispam-and-protection/how-to-reduce-malware-threats-via-file-attachment-blocking
You cannot depend on the built-in virus detection in SharePoint to scan all files uploaded to it.
The larger takeaway from the reference above:
The Microsoft 365 virus detection engine runs asynchronously (independent from file uploads) within SharePoint Online. All files are not automatically scanned. Heuristics determine the files to scan. When a file is found to contain a virus, the file is flagged. In April 2018, we removed the 25 MB limit for scanned files.
Here's what happens:
A user uploads a file to SharePoint Online.
SharePoint Online, as part of its virus scanning processes, later determines if the file meets the criteria for a scan.
If the file meets the criteria for a scan, the virus detection engine scans the file.
If a virus is found within the scanned file, the virus engine sets a property on the file indicating that it's infected.
Hi @Abhishake Dutta ,
The property "vti_x005f_virusstatus" will be coming up after a file was scanned.
Per my test, if I uploaded a zip file which is less than around 121MB, then it will work as expected as below, the "vti_x005f_virusstatus" is coming up:
In summary, this issue should be realted to file size limiation for Virus scanning in SharePoint Online.
If the response is helpful, please click "Accept Answer" and upvote it.
Actually we are planning to have an azure function to chek for this field and based on the status we are planning to mark uploaded files as virus-free or infected.In this case we are supposed to target this field but as you said it can't be present for password protected file then how can we read that property??Is there any other field to look to for background scanning activities??
Hi @Abhishake Dutta ,
In this case we are supposed to target this field but as you said it can't be present for password protected file then how can we read that property??
Yes, per my test result, the zip file with large files about 121MB , the field won't come up.
Is there any other field to look to for background scanning activities??
Currently, the "vti_x005f_virusstatus" is the only field to detect for the scanning activities, this is controlled by Office 365 backend.
You can split to multiple zip files to avoid file size limitation if possible so that you can use this field.
Yes that's the issue.Even I just saw another thing that after uploading a 121 mb file it's not returning the status.After 10 hrs has been passed it's still not loading up that property.
But I can see virus scan getting succeeded for password protected files.But it's only for smaller files.
Hi @Abhishake Dutta ,
i tested with a smaller zip file with password encrypt, yes, it's generate the field as expected.
So it should be related to file size limitation. Last week, I tested with a zip encrypt file around 200MB, the field never coming until today.
So I suggest you can split files into multiple zip files to avoid this limitation.
I checked around official document, there is no file size limitation speified for Virus Scanning.
Hi @Abhishake Dutta ,
I will modify the answer and follow up above, as it's nothing related with password encrypt but file size limitation as discussed above :)
Yes I also even didn't see anything related to file size limitation.
Hi @Abhishake Dutta ,
I suggest you could submit a service request in SharePoint Online Admin Center so that you could get detailed information about the limitation regarding Virus Detection :)
Yaa ok.Thanks for the suggestion.I will try and see .