Event ID 4999 when the Store.exe process crashes on an Exchange Server 2010 mailbox server

Article ID: 2616365 - View products that this article applies to.
Expand all | Collapse all


Consider the following scenario:
  • You install a virus scan application on a Microsoft Exchange Server 2010 mailbox server.
  • You use Microsoft Exchange Troubleshooting Assistant (Extra.exe) to request tracing and to collect diagnostic information on the server.
  • You select the Store component in Components to Trace and the tagVirusScanAdvanced tag in Trace Tags when you click the Select a Task tab.
  • You start the tracing.
In this scenario, the Store.exe process crashes. Additionally, the following log is logged in the Application log on the mailbox server:

Time:     Time
ID:       4999
Level:    Error
Source: MSExchange Common
Machine:  Computer
Message:  Watson report about to be sent for process id: Process ID, with parameters: E12N, Build Type, Version Number, store.exe, store.exe, number, c0000005, numberVersion Number.
ErrorReportingEnabled: False


This issue occurs because a specific parameter is not passed for tracing. Therefore, the Store.exe process crashes when the process tries to format the parameter for the virus scan.


To resolve this issue, install the following update rollup:
2645995 Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2


For more information about the StoreTags members, visit the following Microsoft website:
General information about the StoreTags members


Article ID: 2616365 - Last Review: February 13, 2012 - Revision: 1.0
  • Microsoft Exchange Server 2010 Service Pack 2
  • Microsoft Exchange Server 2010 Standard
  • Microsoft Exchange Server 2010 Enterprise
kbqfe kbfix kbsurveynew kbexpertiseinter KB2616365

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com