Nothing in my logs. When these events occur, you need to do the following: Check for DrWatson logs. Check for files in the proc\review directory Check the logs for that time period.
What do the above 3 indicate? John T eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Mark Smith > Sent: Tuesday, October 25, 2005 1:45 PM > To: [email protected] > Subject: [Declude.JunkMail] DecludeProc crashing still > > I'm not 100% sure if people aren't noticing Decludeproc crashing. > The installer sets the service recovery to restart in 0 seconds. > > So, would a few of you mind checking your System event logs and look for > Event ID 7031 and 26. I want to triple check that I'm the only one getting > these. > > Here's what happens... ALL FOUR of my declude servers are seeing this. > I've renamed virus.cfg to virus.bak, I've removed all external tests, > removed the biggest body filter test. > Still crashes. Every version of Declude Proc is crashing AND CPU time is > always at 100% with DecludeProc usually at the top. > > Windows 2003 Server STD, Imail > Dell PowerEdge 1650 > Dual Proc 1.4Ghz, 2GB RAM. > VERSION 3.05.11 > > THREADS 15 > WAITFORMAIL 2000 > > ===================================================== > ======================= > === > > Event Type: Information > Event Source: Application Popup > Event Category: None > Event ID: 26 > Date: 10/25/2005 > Time: 2:24:40 PM > User: N/A > Computer: CTCMX02 > Description: > Application popup: decludeproc.exe - Application Error : The instruction at > "0x7c8120d0" referenced memory at "0x018e0000". The memory could not be > "read". > > Click on OK to terminate the program > Click on CANCEL to debug the program > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > ===================================================== > ======================= > === > > > > Event Type: Error > Event Source: Service Control Manager > Event Category: None > Event ID: 7031 > Date: 10/25/2005 > Time: 2:13:58 PM > User: N/A > Computer: CTCMX02 > Description: > The Decludeproc service terminated unexpectedly. It has done this 1 > time(s). The following corrective action will be taken in 120000 > milliseconds: Restart the service. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
