When you run an Exchange aware antivirus application on a Microsoft Exchange Server 2010 server that has the Mailbox server role installed, the Microsoft Exchange Information Store service crashes occasionally. Additionally, the following events are logged in the Application log:
Time: <time> ID: 4999 Level: Error Source: MSExchange Common Machine: <computer name> Message: Watson report about to be sent for process id: <Process ID>, with parameters: E12N, <Build Type>, <Version Number>, store.exe, store.exe, <XXXX>, c0000005, <XXXX>, <Version Number>. ErrorReportingEnabled: False
This issue occurs because the Store.exe process does not verify whether the restriction on an email message is valid after an Exchange aware antivirus application removes the attachment.
To resolve this issue, install the following update rollup:
2608646 Description of Update Rollup 6 for Exchange Server 2010 Service Pack 1
To work around this issue, disable the Exchange aware antivirus application on the Exchange server that has the Mailbox server role installed.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.