From: arwen on
Yesterday, my Exchange services crashed. I received quite a few error

messages in the Event Logs.
Application Errors:
Event ID 1000 Faulting Application inetinfo.exe, version 6.0.3790.1830,

faulting module expoxy.dll, version 6.5.7638.1, fault address

0x00006700.
Event ID 1000 faulting application w3wp.exe, version 6.0.3790.1830,

faulting module davex.dll, version 6.5.7651.61, fault address

0x000689b9.
Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,

faulting module kernel32.dll, fault address 0x00015e02.
Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,

stamp 42435bec, faulting module kernel32.dll, stamp 44060f39, debug? 0,

fault address 0x00015e02
Event ID 2273 Source W3SVC-WP Worker process could not access metabase

due to disconnection error. Marking process as unhealthy.
System Errors:
Event ID 1013 A process serving application pool

'ExchangeApplicationPool' exceeded time limits during shut down. The

process id was '1304'.
Event ID 1009 A process serving application pool

'ExchangeApplicationPool' terminated unexpectedly. The process was

'1304'. The process exit code was 0xc0000354.
Event ID 115 Source SMTP The service could not bind instance '1'. The

data is the error code.
Also, quite a few 7011s and 7034s, all services depending on the

inetinfo.exe service so it makes sense that they would have timed out

and terminated unexpectedly.
Server is Windows 2003 with latest SPs. Exchange is 2003 with latest

SPs.
From: Andy David {MVP} on
On Mon, 9 Jun 2008 07:04:00 -0700, arwen
<arwen(a)discussions.microsoft.com> wrote:

>Yesterday, my Exchange services crashed. I received quite a few error

Using Symantec for Exchange AV?



>
>messages in the Event Logs.
>Application Errors:
>Event ID 1000 Faulting Application inetinfo.exe, version 6.0.3790.1830,
>
>faulting module expoxy.dll, version 6.5.7638.1, fault address
>
>0x00006700.
>Event ID 1000 faulting application w3wp.exe, version 6.0.3790.1830,
>
>faulting module davex.dll, version 6.5.7651.61, fault address
>
>0x000689b9.
>Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
>
>faulting module kernel32.dll, fault address 0x00015e02.
>Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
>
>stamp 42435bec, faulting module kernel32.dll, stamp 44060f39, debug? 0,
>
>fault address 0x00015e02
>Event ID 2273 Source W3SVC-WP Worker process could not access metabase
>
>due to disconnection error. Marking process as unhealthy.
>System Errors:
>Event ID 1013 A process serving application pool
>
>'ExchangeApplicationPool' exceeded time limits during shut down. The
>
>process id was '1304'.
>Event ID 1009 A process serving application pool
>
>'ExchangeApplicationPool' terminated unexpectedly. The process was
>
>'1304'. The process exit code was 0xc0000354.
>Event ID 115 Source SMTP The service could not bind instance '1'. The
>
>data is the error code.
>Also, quite a few 7011s and 7034s, all services depending on the
>
>inetinfo.exe service so it makes sense that they would have timed out
>
>and terminated unexpectedly.
>Server is Windows 2003 with latest SPs. Exchange is 2003 with latest
>
>SPs.
From: arwen on
No, I'm using McAfee and have the databases excluded.

"Andy David {MVP}" wrote:

> On Mon, 9 Jun 2008 07:04:00 -0700, arwen
> <arwen(a)discussions.microsoft.com> wrote:
>
> >Yesterday, my Exchange services crashed. I received quite a few error
>
> Using Symantec for Exchange AV?
>
>
>
> >
> >messages in the Event Logs.
> >Application Errors:
> >Event ID 1000 Faulting Application inetinfo.exe, version 6.0.3790.1830,
> >
> >faulting module expoxy.dll, version 6.5.7638.1, fault address
> >
> >0x00006700.
> >Event ID 1000 faulting application w3wp.exe, version 6.0.3790.1830,
> >
> >faulting module davex.dll, version 6.5.7651.61, fault address
> >
> >0x000689b9.
> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
> >
> >faulting module kernel32.dll, fault address 0x00015e02.
> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
> >
> >stamp 42435bec, faulting module kernel32.dll, stamp 44060f39, debug? 0,
> >
> >fault address 0x00015e02
> >Event ID 2273 Source W3SVC-WP Worker process could not access metabase
> >
> >due to disconnection error. Marking process as unhealthy.
> >System Errors:
> >Event ID 1013 A process serving application pool
> >
> >'ExchangeApplicationPool' exceeded time limits during shut down. The
> >
> >process id was '1304'.
> >Event ID 1009 A process serving application pool
> >
> >'ExchangeApplicationPool' terminated unexpectedly. The process was
> >
> >'1304'. The process exit code was 0xc0000354.
> >Event ID 115 Source SMTP The service could not bind instance '1'. The
> >
> >data is the error code.
> >Also, quite a few 7011s and 7034s, all services depending on the
> >
> >inetinfo.exe service so it makes sense that they would have timed out
> >
> >and terminated unexpectedly.
> >Server is Windows 2003 with latest SPs. Exchange is 2003 with latest
> >
> >SPs.
>
From: Andy David {MVP} on
On Mon, 9 Jun 2008 07:51:03 -0700, arwen
<arwen(a)discussions.microsoft.com> wrote:

>No, I'm using McAfee and have the databases excluded.

Ok, thats a flat file AV then.
Any other 3rd party apps installed on the Exch Server?

>
>"Andy David {MVP}" wrote:
>
>> On Mon, 9 Jun 2008 07:04:00 -0700, arwen
>> <arwen(a)discussions.microsoft.com> wrote:
>>
>> >Yesterday, my Exchange services crashed. I received quite a few error
>>
>> Using Symantec for Exchange AV?
>>
>>
>>
>> >
>> >messages in the Event Logs.
>> >Application Errors:
>> >Event ID 1000 Faulting Application inetinfo.exe, version 6.0.3790.1830,
>> >
>> >faulting module expoxy.dll, version 6.5.7638.1, fault address
>> >
>> >0x00006700.
>> >Event ID 1000 faulting application w3wp.exe, version 6.0.3790.1830,
>> >
>> >faulting module davex.dll, version 6.5.7651.61, fault address
>> >
>> >0x000689b9.
>> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
>> >
>> >faulting module kernel32.dll, fault address 0x00015e02.
>> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
>> >
>> >stamp 42435bec, faulting module kernel32.dll, stamp 44060f39, debug? 0,
>> >
>> >fault address 0x00015e02
>> >Event ID 2273 Source W3SVC-WP Worker process could not access metabase
>> >
>> >due to disconnection error. Marking process as unhealthy.
>> >System Errors:
>> >Event ID 1013 A process serving application pool
>> >
>> >'ExchangeApplicationPool' exceeded time limits during shut down. The
>> >
>> >process id was '1304'.
>> >Event ID 1009 A process serving application pool
>> >
>> >'ExchangeApplicationPool' terminated unexpectedly. The process was
>> >
>> >'1304'. The process exit code was 0xc0000354.
>> >Event ID 115 Source SMTP The service could not bind instance '1'. The
>> >
>> >data is the error code.
>> >Also, quite a few 7011s and 7034s, all services depending on the
>> >
>> >inetinfo.exe service so it makes sense that they would have timed out
>> >
>> >and terminated unexpectedly.
>> >Server is Windows 2003 with latest SPs. Exchange is 2003 with latest
>> >
>> >SPs.
>>
From: arwen on
Yeah, Backup Exec Remote Agent and Sunbelt Software's Ninja (spam filter).

"Andy David {MVP}" wrote:

> On Mon, 9 Jun 2008 07:51:03 -0700, arwen
> <arwen(a)discussions.microsoft.com> wrote:
>
> >No, I'm using McAfee and have the databases excluded.
>
> Ok, thats a flat file AV then.
> Any other 3rd party apps installed on the Exch Server?
>
> >
> >"Andy David {MVP}" wrote:
> >
> >> On Mon, 9 Jun 2008 07:04:00 -0700, arwen
> >> <arwen(a)discussions.microsoft.com> wrote:
> >>
> >> >Yesterday, my Exchange services crashed. I received quite a few error
> >>
> >> Using Symantec for Exchange AV?
> >>
> >>
> >>
> >> >
> >> >messages in the Event Logs.
> >> >Application Errors:
> >> >Event ID 1000 Faulting Application inetinfo.exe, version 6.0.3790.1830,
> >> >
> >> >faulting module expoxy.dll, version 6.5.7638.1, fault address
> >> >
> >> >0x00006700.
> >> >Event ID 1000 faulting application w3wp.exe, version 6.0.3790.1830,
> >> >
> >> >faulting module davex.dll, version 6.5.7651.61, fault address
> >> >
> >> >0x000689b9.
> >> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
> >> >
> >> >faulting module kernel32.dll, fault address 0x00015e02.
> >> >Event ID 1000 faulting application inetinfo.exe, version 6.0.3790.1830,
> >> >
> >> >stamp 42435bec, faulting module kernel32.dll, stamp 44060f39, debug? 0,
> >> >
> >> >fault address 0x00015e02
> >> >Event ID 2273 Source W3SVC-WP Worker process could not access metabase
> >> >
> >> >due to disconnection error. Marking process as unhealthy.
> >> >System Errors:
> >> >Event ID 1013 A process serving application pool
> >> >
> >> >'ExchangeApplicationPool' exceeded time limits during shut down. The
> >> >
> >> >process id was '1304'.
> >> >Event ID 1009 A process serving application pool
> >> >
> >> >'ExchangeApplicationPool' terminated unexpectedly. The process was
> >> >
> >> >'1304'. The process exit code was 0xc0000354.
> >> >Event ID 115 Source SMTP The service could not bind instance '1'. The
> >> >
> >> >data is the error code.
> >> >Also, quite a few 7011s and 7034s, all services depending on the
> >> >
> >> >inetinfo.exe service so it makes sense that they would have timed out
> >> >
> >> >and terminated unexpectedly.
> >> >Server is Windows 2003 with latest SPs. Exchange is 2003 with latest
> >> >
> >> >SPs.
> >>
>