Re: The IIS Admin Service service terminated unexpectedly

Tech-Archive recommends: Speed Up your PC by fixing your registry

I've handed off what you have posted here to my Exchange Team and will let you know how the workaround goes.

Thanks much for the heads-up.

- MEK

"Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:DB090753-9CCD-4527-A352-7273757AA1C1@xxxxxxxxxxxxxxxx
Ok, guys. Just got off the phone with Symantec. As I suspected, there was a
bad ruleset included with a recent update. And surprising me was the fact
that they actually admitted this and told me how to work around it. They are
working on a new rule set that will be posted as an update hopefully today or
tomorrow, but in the meantime here is the workaround from the email they sent
me. Be sure to make a backup of the .xml file before proceeding. Apparently
there is no further action required - the update will fix the ruleset in the
.xml automatically:

Greetings,Chris
To modify bmiconfig.xml to work around the issue:
Open the services menu by going to Start -> Run and typing services.msc
Stop the Symantec Mail security for Microsoft exchange service, and the
Symantec Mail security spam statistics service, if they are started
Open <system drive>:\Program
iles\Symantec\SMSMSE\5.0\Server\SpamPrevention\bmiconfig.xml in a text editor
such as notepad
Go to the File menu, choose save as, and save the file as bmiconfig.old
Delete the following strings:

<ruleType>header_regex</ruleType>

<ruleType>body_regex</ruleType>

<ruleType>lang_header_regex</ruleType>

<ruleType>lang_body_regex</ruleType>

<ruleType>bodysig</ruleType>



· Once those entries are deleted, go to the File menu, and choose
save as, save the file as bmiconfig.xml

· Restart the Symantec mail security for Microsoft exchange service;
it is not necessary to restart the Spam statistics service.


Sincerely,Rudy

--------------------------------------------------------------------------------


Symantec Technical Support

I don't usually cross-post, but I'm going to throw this out on the few other
threads for this topic, so don't kill me. Good luck!

-Chris

"Chris" wrote:

Same thing - this is getting to be quite the epidemic. We are seeing this on
3 separate customers now. The first one started last Wednesday, the other
two yesterday. All 3 servers are running Exchange 2003 and Symantec AV/Mail
Security with premium antispam. The only difference is that the 1st server
affected is runing version 4.5 of Mail Sec, while the other two are running
the latest version. Disabling the Symantec premium antispam stops the
problem.

It's clear that there's either a coding error in the latest spam update, or
someone has figured out an exploit in the antispam software. Either way
Symantec has nothing posted on their site concerning this - typical, huh?
I'm going to call them, but I feel completely confident that they will never
admit their software is screwed up, so we're probably on our own. I'll post
again if I come up with anything, please do the same if any of you do.

-Chris

"Michael Edward Kohlman" wrote:

> We are seeing the exact same issue with nearly the exact same setup
> (Exchange 2003 SP2 on Windows 2003 SP1 with SMSMSE 5.0.4.363) every 15
> minutes on the average the thing blows with events 7031 and 7034.
>
> Just started in the last few days.
>
> - MEK
>
> "Oliver Moazzezi" <o.moazzeziNO@xxxxxxxxxxxxxxxxx> wrote in message
> news:evYPtAIGHHA.2464@xxxxxxxxxxxxxxxxxxxxxxx
> > 'libspamhunter!bltModGetVersion' is Symantec.
> >
> > Raise a call with them regarding the product you have installed and > > are
> > using on the server, in the interim to keep the Exchange Server up > > and
> > running consider disabling it
> >
> > Oliver
> >
>

.

Relevant Pages

  • Re: Convincing the boss to move to Exchange
    ... You would be substituting Trend Micro for Symantec. ... Trend to server and, finally, install it to the workstations. ... Will Trend for Exchange work with Symantec Corporate AV? ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange errors 9564 and 9665
    ... I would also strongly recommend that you run ExBPA against your server as it ... Run Microsoft Exchange Server Best Practices Analyzer Today ... > Symantec Mail Security Version 4.6. ...
    (microsoft.public.exchange2000.information.store)
  • Re: Calendar Appointments Disappear
    ... > software items- Symantec hangs when you try and view a scheduled job, ... Exchange agent for BE if they don't have it. ... What kind of antivirus scan did you run? ... > there being only one server, with that one server being the sole AD ...
    (microsoft.public.exchange.admin)
  • Re: Calendar Appointments Disappear
    ... >> even after reinstalling the software, and Backup Exec doesn't see ... Wanted to add that Symantec had to be held back from scanning ... Exchange in two places: ... New server came up on Thursday. ...
    (microsoft.public.exchange.admin)
  • virus alerts on exchange server 2k
    ... >also use Symantec Antivirus Filter Version 3.0, ... for protecting the server against virus ... >from the last 3 weeks i have been noticing virus alerts as ... Check in exchange manager to see if your mailbox cleanup ...
    (microsoft.public.exchange2000.general)