cancel
Showing results for 
Search instead for 
Did you mean: 

TransportScan.dll caused IIS Admin Service to terminate...

Hi...

Has anyone else had this problem before, any idea’s to fix it...?

thanks

Event Type:        Error
Event Source:    Service Control Manager
Event Category:                None
Event ID:              7031
Date:                     31/07/2011
Time:                     8:08:48 a.m.
User:                     N/A
Computer:          myservername123
Description:
The IIS Admin Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Transportscan.exe version 7.0.716.0
location:D:\Program files\McAfee\GroupShield for Exchange\bin


FAULTING_IP:
+99f10b8
099f10b8 50              push    eax

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 099f10b8
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000008
   Parameter[1]: 099f10b8
Attempt to execute non-executable address 099f10b8

DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT

PROCESS_NAME:  inetinfo.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000008

EXCEPTION_PARAMETER2:  099f10b8

WRITE_ADDRESS:  099f10b8

FOLLOWUP_IP:
TransportScan!ADSISearch::operator=+91c3
0979d09a 89856cffffff    mov     dword ptr [ebp-94h],eax

FAILED_INSTRUCTION_ADDRESS:
+99f10b8
099f10b8 50              push    eax

NTGLOBALFLAG:  0

FAULTING_THREAD:  00001918

PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT

BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR

LAST_CONTROL_TRANSFER:  from 0979d09a to 099f10b8

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0978f3e8 0979d09a 0978f7a8 0978f808 0978f920 0x99f10b8
0978f5c4 0979e2e9 0978f7a8 0978f808 0978f920 TransportScan!ADSISearch::operator=+0x91c3
0978f780 0979ac46 0978f83c 0978f7a8 0978f920 TransportScan!ADSISearch::operator=+0xa412
0978f978 4f0949c5 099e6440 00000000 7f82a8fc TransportScan!ADSISearch::operator=+0x6d6f
0978f9a4 4f0761c7 0828d4d4 010e430c 7f82a8fc smtpsvc!CInboundDispatcher::ChainSinks+0xd7
0978f9dc 4f08076d 010e430c 7f82a8fc 7f9e6170 smtpsvc!SMTP_CONNECTION::OnEvent+0xa6
0978fa24 4f080e3a 0978fe50 00000005 00000004 smtpsvc!SMTP_CONNECTION::GlueDispatch+0x54c
0978fe5c 4f080f36 00000005 0978fed8 0978fed8 smtpsvc!SMTP_CONNECTION::HandleCompletedMessage+0x1ac
0978fe80 4f080f9e 7f829660 00000003 00000000 smtpsvc!SMTP_CONNECTION::DoDATACommandEx+0xb4
0978feac 4f0813b6 7f829660 00000000 0978fed8 smtpsvc!SMTP_CONNECTION::ProcessDATAMailBody+0x42
0978fee8 4f081a99 00000b68 7f829350 69531b84 smtpsvc!SMTP_CONNECTION::ProcessInputBuffer+0x177
0978fefc 4f081c10 00000b68 00000000 7f82981c smtpsvc!SMTP_CONNECTION::ProcessFileWrite+0x69
0978ff20 4f073fbd 00000b68 00000000 7f82981c smtpsvc!SMTP_CONNECTION::ProcessClient+0x11f
0978ff34 4ba530c9 079f6c3c 7f82981c 00000b68 smtpsvc!SmtpCompletionFIO+0x17
0978ff54 63ec76cf 079f6c30 00000b68 00000000 fcachdll!CFileCacheObject::Completion+0x5e
0978ff80 63ec78bf 0727ba34 00000b68 7f82981c isatq!AtqpProcessContext+0x1dd
0978ffb8 77e6482f 00000000 00000000 00000000 isatq!AtqPoolThread+0x1c9
0978ffec 00000000 63ec76f6 00000000 00000000 kernel32!BaseThreadStart+0x34


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  TransportScan!ADSISearch::operator=+91c3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: TransportScan

IMAGE_NAME:  TransportScan.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  491190ed

STACK_COMMAND:  ~59s; .ecxr ; kb

FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_c0000005_TransportScan.dll!ADSISearch::operator=

BUCKET_ID:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR_BAD_IP_TransportScan!ADSISearch::operator=+91c3

Followup: MachineOwner
---------

2 Replies
Reliable Contributor Aidan
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: TransportScan.dll caused IIS Admin Service to terminate...

This issues is resolved in Patch 1 for GSE701 - this is available for download (allong with a futher Rollup 1) at the McAfee download site with your grant number.

This is from Resolved issue section of Readme:-

26. ISSUE:
    Inetinfo.EXE stopped responding due to an invalid pointer in the Transport scanner.

    Reference ID: 518820

Message was edited by: Aidan on 03/08/11 09:41:47 IST

Re: TransportScan.dll caused IIS Admin Service to terminate...

Hi Aidan,

I'll give it a go.

Thanks

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center