|
These pop-up in an alert box when you log into Windows 2003 using
Remote Desktop and are also logged in the Event Viewer (I believe Win2K
will do the same). Here's an example: Faulting application SCAN.EXE, version 4.4.0.0, faulting module MCSCAN32.DLL, version 4.4.0.0, fault address 0x0001d9d0. I would probably chalk it up to being related to load, but I've had my server run at 100% for an hour without throwing one of these errors, and then on days like today where it only reaches 100% on bursts, it comes in droves, with 17 such errors between 3:15 and 3:45 p.m. EST. I can't precisely match errors in my Declude Virus log with these errors, although Declude Virus is multiple-scanning E-mail all over the place this afternoon for some reason. For instance, here's one such example: 04/25/2005 15:04:41 Q3f12d6230082219f ERROR: Could not open recip file F:\\_3f12d6230082219f.~MD [2]I certain that the above conditions are related to load and there are many of them in my logs. This indicates that this message was scanned at least 7 times and I believe that Declude JunkMail does the same when this occurs. It doesn't appear to be directly related to the errors in Event Viewer/pop-ups, but maybe the McAfee errors are destabilizing the system or causing excessive load in some cases and precipitates these conditions. Maybe SP1 is also to blame??? I like the quality of McAfee's results, but their scanner seems less than stable on my system lately. I've seen similar errors using an older McAfee scan engine as well. I can't recall F-Prot ever throwing similar errors, though it isn't reliable enough on its own. Matt Scott Fisher wrote: I haven't seen anything obvious in a quick glance through today's logs. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== |
