KracsNZ
December 7th, 2006, 07:11 PM
Just recently moved exchange server to a much more powerful machine. Server is only running Exchange Server 2000 SP3 (with all rollups/patches applied) with GFI ME (for spam) and NOD32's XMON (for viruses).
We started experiencing lots of IS (Information Store) crashes. On doing some searches through google found a reference to IS crashing due to a crash by the vendor called through VSAPI interface (i.e. XMON).
First thing I did was disable Background Scanning in XMON. This made the IS allot more stable. But then we started having crashes during heavy use (i.e. archiving last mailboxes etc...).
So I did a little poking around in the Event Viewer and found a Dr Watson application error report for Nod32 about 5 seconds before the record for the IS crash.
I have uninstalled NOD32 and now the server is handling everything perfectly.
Heres the Dr Watson report...
{QUOTE-> Event Type: Information
Event Source: DrWatson
Event Category: None
Event ID: 4097
Date: 8/12/2006
Time: 12:14:09 p.m.
User: N/A
Computer: JMIREMOTE1
Description:
The application, , generated an application error The error occurred on 12/08/2006 @ 12:14:08.734 The exception generated was c0000005 at address 20B0B1EB (NOD32Ioctl)
<-QUOTE}
We started experiencing lots of IS (Information Store) crashes. On doing some searches through google found a reference to IS crashing due to a crash by the vendor called through VSAPI interface (i.e. XMON).
First thing I did was disable Background Scanning in XMON. This made the IS allot more stable. But then we started having crashes during heavy use (i.e. archiving last mailboxes etc...).
So I did a little poking around in the Event Viewer and found a Dr Watson application error report for Nod32 about 5 seconds before the record for the IS crash.
I have uninstalled NOD32 and now the server is handling everything perfectly.
Heres the Dr Watson report...
{QUOTE-> Event Type: Information
Event Source: DrWatson
Event Category: None
Event ID: 4097
Date: 8/12/2006
Time: 12:14:09 p.m.
User: N/A
Computer: JMIREMOTE1
Description:
The application, , generated an application error The error occurred on 12/08/2006 @ 12:14:08.734 The exception generated was c0000005 at address 20B0B1EB (NOD32Ioctl)
<-QUOTE}