Event ID 4999 when the Store.exe process crashes on an Exchange Server 2010 mailbox server

Article ID: 2616365 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You install a virus scan application on a Microsoft Exchange Server 2010 mailbox server.
  • You use Microsoft Exchange Troubleshooting Assistant (Extra.exe) to request tracing and to collect diagnostic information on the server.
  • You select the Store component in Components to Trace and the tagVirusScanAdvanced tag in Trace Tags when you click the Select a Task tab.
  • You start the tracing.
In this scenario, the Store.exe process crashes. Additionally, the following log is logged in the Application log on the mailbox server:

Time:     Time
ID:       4999
Level:    Error
Source: MSExchange Common
Machine:  Computer
Message:  Watson report about to be sent for process id: Process ID, with parameters: E12N, Build Type, Version Number, store.exe, store.exe, number, c0000005, number, Version Number.
ErrorReportingEnabled: False


Back to the top | Give Feedback

CAUSE

This issue occurs because a specific parameter is not passed for tracing. Therefore, the Store.exe process crashes when the process tries to format the parameter for the virus scan.
Back to the top | Give Feedback

RESOLUTION

To resolve this issue, install the following update rollup:
2645995
(http://support.microsoft.com/kb/2645995/ )
Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2


Back to the top | Give Feedback

MORE INFORMATION

For more information about the StoreTags members, visit the following Microsoft website:
General information about the StoreTags members
(http://msdn.microsoft.com/en-us/library/microsoft.exchange.diagnostics.storetags_members(v=exchg.140).aspx)

Back to the top | Give Feedback

Properties

Article ID: 2616365 - Last Review: February 13, 2012 - Revision: 1.0
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 2
  • Microsoft Exchange Server 2010 Standard
  • Microsoft Exchange Server 2010 Enterprise
Keywords: 
kbqfe kbfix kbsurveynew kbexpertiseinter KB2616365
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top