Re: Help!!! Buffer overrun error on Server 2003 running Exchange

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

"The error is a pop-up box, with a single 'OK' button"

I'd rescan.


"Greg Conterio" <GregConterio@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C65DD36D-ADC7-4AAC-A661-51BE7B70EA1D@xxxxxxxxxxxxxxxx
..as I said before, the server was thoroughly scanned, both for viruses,
and
spyware. In addition, it is a brand-new, pristine installation. It has
not
been used for any Internet surfing, apart form Microsoft's update and
support
sites.
I suppose anything is possible, but I doubt it is viral or spyware.

The error is a pop-up box, with a single 'OK' button. The only event log
entry pertaining to it notes that a pop-up has occured, and recounts the
same
information in the pop-up box. There are a host of other errors, in the
event logs, all having to do with services associated with Email
terminating
and restarting, or being unable to find Bind objects, because those
objects
are in the process of restarting themselves.
--
G. Conterio
Giatech, LLC
Miami, Florida


"John Fullbright" wrote:

And how do you see the error? Is it a popup? Is it logged somewhere?
What
event ID? The wording looks suspiciously like last year's crop of
spyware/trojans.


"Greg Conterio" <GregConterio@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1D4DD9B3-7E0B-443B-BE22-DFBD31091DB5@xxxxxxxxxxxxxxxx
No, everything on this server is re-directed throguh a higher port
number,
and all traffic goes through a PIX 501. The only website on this
server
is
for OWA.
--
G. Conterio
Giatech, LLC
Miami, Florida


"Tom Felts" wrote:

Check your IIS logs. Do you see any evidence of gets requests that
look
suspicious?
Is port 80 open to the outside?


"Greg Conterio" <Greg Conterio@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:011EBDBD-DBB9-4773-AD88-07130ABEE40A@xxxxxxxxxxxxxxxx
I have Exchange 2003 running on a 2003 server, everything is current
on
updates and service packs. I am hosting Internet mail for my
domain.
Suddenly yesterday, the server started getting hammered with
repeating
buffer
overrun errors:

Microsoft Visual C++ Runtime Library : Buffer overrun detected!
Program:
C:\WINDOWS\system32\inetsrv\inetinfo.exe

This causes the SMTP service to go off-line, and seriously affects
my
ability to send outbound email to external Internet destinations. I
have
found nothing on this issue anywhere, except workstation-related
errors
of
a
similar sort.
I have scanned the server for viruses and spyware, and found
nothing.
The
configuration was unchanged, it just started erring without being
touched.
Right now I'm at a dead-end, looking for something to point me in
the
right
direction.








.

Quantcast