The Microsoft Exchange Information Store service crashes occasionally when you run an Exchange aware antivirus application on an Exchange Server 2010 Mailbox server

Article ID: 2535289 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

When you run an Exchange aware antivirus application on a Microsoft Exchange Server 2010 server that has the Mailbox server role installed, the Microsoft Exchange Information Store service crashes occasionally. Additionally, the following events are logged in the Application log:

Time: <time>
ID: 1000
Level: Error
Source: Application Error
Machine: <computer name>
Message: Faulting application name: store.exe, version: <Version Number>, time stamp: <time stamp>
Faulting module name: store.exe, version: <Version Number>, time stamp: <time stamp>
Exception code: 0xc0000005
Fault offset: <memory address>
Faulting process id: <Process ID>
Faulting application start time: <time>
Faulting application path: <drive>:\Program Files\Microsoft\Exchange Server\V14\bin\store.exe
Faulting module path: <drive>:\Program Files\Microsoft\Exchange Server\V14\bin\store.exe
Report Id: <ID>

Time: <time>
ID: 4999
Level: Error
Source: MSExchange Common
Machine: <computer name>
Message: Watson report about to be sent for process id: <Process ID>, with parameters: E12N, <Build Type>, <Version Number>, store.exe, store.exe, <XXXX>, c0000005, <XXXX>, <Version Number>.
ErrorReportingEnabled: False


CAUSE

This issue occurs because the Store.exe process does not verify whether the restriction on an email message is valid after an Exchange aware antivirus application removes the attachment.

RESOLUTION

To resolve this issue, install the following update rollup:
2608646 Description of Update Rollup 6 for Exchange Server 2010 Service Pack 1

WORKAROUND

To work around this issue, disable the Exchange aware antivirus application on the Exchange server that has the Mailbox server role installed.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 2535289 - Last Review: October 31, 2011 - Revision: 2.0
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 1, when used with:
    • Microsoft Exchange Server 2010 Enterprise
    • Microsoft Exchange Server 2010 Standard
Keywords: 
kbqfe kbfix kbsurveynew kbexpertiseinter KB2535289

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com