Over the past several years, as Forefront scan engines have continued to grow, more resources are required to load and efficiently run these engines. A resulting issue has been the failure of these engines to successfully load in fragmented memory space. Because the scan engines cannot load and initialize, mail is queued and errors are logged to the Application Event Log.
The Application Event Log will contain a combination of Event ID errors 5314, 7009 and 7011 along with one of these two descriptions:
- None of the antimalware engines selected for realtime scanning have been initialized.
- None of the antimalware engines selected for transport scanning have been initialized.
Please download the new transport and realtime scanner processes available in this article.
1.) Stop all Forefront and dependent Exchange services
2.) Rename the existing FSCRealtimescanner.exe or FSCTransportScanner.exe files to FSCRealtimescanner.OLD or FSCTransportScanner.exe.OLD
3.) Copy the new file into the directory
4.) Restart all services that were stopped
*Please use the FSCRealtimeScanner.exe on a mailbox server and the FSCTransportScanner.exe on a hub transport server.
Article ID: 2919357 - Last Review: Dec 20, 2013 - Revision: 1