cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

TransportScan.dll caused IIS Admin Service to terminate...

Hi...

Has anyone else had this problem before, any idea’s to fix it...?

thanks

Event Type:        Error
Event Source:    Service Control Manager
Event Category:                None
Event ID:              7031
Date:                     31/07/2011
Time:                     8:08:48 a.m.
User:                     N/A
Computer:          myservername123
Description:
The IIS Admin Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Transportscan.exe version 7.0.716.0
location:D:\Program files\McAfee\GroupShield for Exchange\bin


FAULTING_IP:
+99f10b8
099f10b8 50              push    eax

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 099f10b8
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000008
   Parameter[1]: 099f10b8
Attempt to execute non-executable address 099f10b8

DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT

PROCESS_NAME:  inetinfo.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000008

EXCEPTION_PARAMETER2:  099f10b8

WRITE_ADDRESS:  099f10b8

FOLLOWUP_IP:
TransportScan!ADSISearch::operator=+91c3
0979d09a 89856cffffff    mov     dword ptr [ebp-94h],eax

FAILED_INSTRUCTION_ADDRESS:
+99f10b8
099f10b8 50              push    eax

NTGLOBALFLAG:  0

FAULTING_THREAD:  00001918

PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT

BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR

LAST_CONTROL_TRANSFER:  from 0979d09a to 099f10b8

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0978f3e8 0979d09a 0978f7a8 0978f808 0978f920 0x99f10b8
0978f5c4 0979e2e9 0978f7a8 0978f808 0978f920 TransportScan!ADSISearch::operator=+0x91c3
0978f780 0979ac46 0978f83c 0978f7a8 0978f920 TransportScan!ADSISearch::operator=+0xa412
0978f978 4f0949c5 099e6440 00000000 7f82a8fc TransportScan!ADSISearch::operator=+0x6d6f
0978f9a4 4f0761c7 0828d4d4 010e430c 7f82a8fc smtpsvc!CInboundDispatcher::ChainSinks+0xd7
0978f9dc 4f08076d 010e430c 7f82a8fc 7f9e6170 smtpsvc!SMTP_CONNECTION::OnEvent+0xa6
0978fa24 4f080e3a 0978fe50 00000005 00000004 smtpsvc!SMTP_CONNECTION::GlueDispatch+0x54c
0978fe5c 4f080f36 00000005 0978fed8 0978fed8 smtpsvc!SMTP_CONNECTION::HandleCompletedMessage+0x1ac
0978fe80 4f080f9e 7f829660 00000003 00000000 smtpsvc!SMTP_CONNECTION::DoDATACommandEx+0xb4
0978feac 4f0813b6 7f829660 00000000 0978fed8 smtpsvc!SMTP_CONNECTION::ProcessDATAMailBody+0x42
0978fee8 4f081a99 00000b68 7f829350 69531b84 smtpsvc!SMTP_CONNECTION::ProcessInputBuffer+0x177
0978fefc 4f081c10 00000b68 00000000 7f82981c smtpsvc!SMTP_CONNECTION::ProcessFileWrite+0x69
0978ff20 4f073fbd 00000b68 00000000 7f82981c smtpsvc!SMTP_CONNECTION::ProcessClient+0x11f
0978ff34 4ba530c9 079f6c3c 7f82981c 00000b68 smtpsvc!SmtpCompletionFIO+0x17
0978ff54 63ec76cf 079f6c30 00000b68 00000000 fcachdll!CFileCacheObject::Completion+0x5e
0978ff80 63ec78bf 0727ba34 00000b68 7f82981c isatq!AtqpProcessContext+0x1dd
0978ffb8 77e6482f 00000000 00000000 00000000 isatq!AtqPoolThread+0x1c9
0978ffec 00000000 63ec76f6 00000000 00000000 kernel32!BaseThreadStart+0x34


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  TransportScan!ADSISearch::operator=+91c3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: TransportScan

IMAGE_NAME:  TransportScan.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  491190ed

STACK_COMMAND:  ~59s; .ecxr ; kb

FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_c0000005_TransportScan.dll!ADSISearch::operator=

BUCKET_ID:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR_BAD_IP_TransportScan!ADSISearch::operator=+91c3

Followup: MachineOwner
---------

2 Replies
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: TransportScan.dll caused IIS Admin Service to terminate...

This issues is resolved in Patch 1 for GSE701 - this is available for download (allong with a futher Rollup 1) at the McAfee download site with your grant number.

This is from Resolved issue section of Readme:-

26. ISSUE:
    Inetinfo.EXE stopped responding due to an invalid pointer in the Transport scanner.

    Reference ID: 518820

Message was edited by: Aidan on 03/08/11 09:41:47 IST
Highlighted

Re: TransportScan.dll caused IIS Admin Service to terminate...

Hi Aidan,

I'll give it a go.

Thanks

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community