Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Scan Engine service terminated unexpectedly

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Scan Engine service terminated unexpectedly Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Scan Engine service terminated unexpectedly - 3.Sep.2009 7:26:06 AM   
bigsoup

 

Posts: 22
Status: offline 		After upgrading to 14.1 I am seeing the following errors in the server System log:
"Faulting application gfiscans.exe, version 14009.727.0.25, faulting module blacklist.dll, version 14009.820.0.18, fault address 0x0002625d."
"The GFI MailEssentials Scan Engine service terminated unexpectedly. It has done this 4 time(s)."
I figured something was up because once in a while I will receive SPAM in my Inbox that usually gets picked off.  Has anyone else experienced this?  Any suggestions?
Post #: 1
RE: Scan Engine service terminated unexpectedly - 3.Sep.2009 8:05:59 AM   
owenb

 

Posts: 145
Joined: 30.Oct.2005
From: Malta
Status: offline 		Hi

It would be helpful if we can get a set of event Viewer files from the application log and a set of troubleshooter files immediately after the issue is reproduced. To send me the troubleshooter files, please run the troubleshooter and then compress the contents of the Support folder (in GFI MailEssentials folder) and upload to our support FTP by following these instructions:
http://kbase.gfi.com/showarticle.asp?id=KBID002935

Once that the upload is complete, please submit your a support request on http://support.gfi.com/Support/supportrequest.aspx?lcode=en and reference this thread. 

_____________________________

Owen Baldacchino
GFI Software - www.gfi.com
Web & Mail Security, Archiving & Fax, Networking & Security

(in reply to bigsoup)
Post #: 2
RE: Scan Engine service terminated unexpectedly - 4.Sep.2009 7:08:42 AM   
sputnam

 

Posts: 28
Joined: 10.Jan.2007
Status: offline 		I'm getting the same error on three 14.1 upgrades. Faulting module is whitelist.dll though.

_____________________________

Regards,
Steven

(in reply to owenb)
Post #: 3
RE: Scan Engine service terminated unexpectedly - 4.Sep.2009 8:55:34 AM   
bigsoup

 

Posts: 22
Status: offline 		Thank you for your response.  I have uploaded the files and submitted a support request.

(in reply to bigsoup)
Post #: 4
RE: Scan Engine service terminated unexpectedly - 9.Sep.2009 7:30:55 AM   
sputnam

 

Posts: 28
Joined: 10.Jan.2007
Status: offline 		Any update on this? I'm going to have to downgrade my clients back to ME14 due to this.....

_____________________________

Regards,
Steven

(in reply to bigsoup)
Post #: 5
RE: Scan Engine service terminated unexpectedly - 10.Sep.2009 2:48:13 AM   
owenb

 

Posts: 145
Joined: 30.Oct.2005
From: Malta
Status: offline 		Hi Everyone.

Just to let you know we have found a fix for this issue and a patch will be released soon.

_____________________________

Owen Baldacchino
GFI Software - www.gfi.com
Web & Mail Security, Archiving & Fax, Networking & Security

(in reply to sputnam)
Post #: 6
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 1:32:27 PM   
it_tech2000

 

Posts: 13
Joined: 15.Apr.2009
Status: offline 		Will this fix cover just blacklist.dll or whitelist.dll?

We are having the same issue as Sputnam with whitelist.dll

Also, do we know when a patch is expected? We desperately need to either roll back or patch. TIming would be appreciated so we know what we need to do.

Thanks!

(in reply to bigsoup)
Post #: 7
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 3:21:55 PM   
sputnam

 

Posts: 28
Joined: 10.Jan.2007
Status: offline 		I personally didn't have the luxury of waiting and had to uninstall 14.1 and then downgrade 8 or 9 sites to version 14.......

_____________________________

Regards,
Steven

(in reply to it_tech2000)
Post #: 8
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 3:31:09 PM   
it_tech2000

 

Posts: 13
Joined: 15.Apr.2009
Status: offline 		Yeah-

I'm getting killed by this but if the patch was being released today then I could hold out... but I'll probably have to roll back tonight.

How did you do it? My guess is when I stop all teh services and bang the installer for 14.0 it will bark and say a newer version is already installed.

I'd really like to avoid having to export and then import all teh various keywords/whitelists/blasklists etc.

Is there an easier way to do the rollback?

Thanks!

(in reply to sputnam)
Post #: 9
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 4:08:47 PM   
sputnam

 

Posts: 28
Joined: 10.Jan.2007
Status: offline 		I so very seldom add anything to the keywords, etc myself so I don't worry about it. What I do is to go to the GFI folder and copy autowhitelsit.mdb and .ldb files to another folder. Then I copy the three weights files from the Data folder. Don't forget to grab your license key! Uninstall and reboot. Delete GFI folder then install the older version. Copy back those 5 files, overwriting of course. Run the Configuration and r\emove your local domain in the General section. Configure your Module priority, perimeter, global settings and module properties. Sounds like a pain but I've done it so many times, really doen't take long at all.

_____________________________

Regards,
Steven

(in reply to it_tech2000)
Post #: 10
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 5:08:32 PM   
it_tech2000

 

Posts: 13
Joined: 15.Apr.2009
Status: offline 		THANKS!

I'll probably roll back tonight.

A couple of other questions if you have a sec - why have you needed to roll back so much? I am new to ME and am still learning.

Second, I see from time to time really slow performance on inbound messages... sometimes taking 45 minutes to clear IIS and be forwarded on to the mail server.

DIsk and CPU utilization are int eh basement as it is a pretty stout box and I just have not found any tweaks on gewtting more performance out of the solution. THe domain gets about 25K messages a day for very few users so the box is a little busy - but the hardware is not working hard at all and it seams like there is a bottleneck somewhere.

If I look in the queue folder I'll see several hundred messages - mostly tagged spam but some valid emails as well.

The delay is not large enough to get anyones attention yet - but it sort of freaks me out as this thing may just die and then I'd be in real trouble.

Thanks for your time - I appreciate the assist.

(in reply to sputnam)
Post #: 11
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 7:21:50 PM   
RSP

 

Posts: 1270
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline 		Sorry to butt in, but you might find this thread a possibility regarding your delays: http://forums.gfi.com/fb.aspx?m=900780495

spoellath suggests an uninstall 14.1/install 14.0 worked well. I've also suggested some steps to be safer in that thread, here.

Many of the contributors here look after a number of installations on various configurations of system, so the odd roll-back is inevitable, just as with a Microsoft service pack

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to it_tech2000)
Post #: 12
RE: Scan Engine service terminated unexpectedly - 14.Sep.2009 9:58:56 PM   
it_tech2000

 

Posts: 13
Joined: 15.Apr.2009
Status: offline 		RSP - THANK YOU.

I am surprised that we would not, at the very least, have access to a previous version that was stable and bug-free.

I will revert our server via an Acronis image rather than going through the gyrations of a manual rollback. THankfully we keep an extra server just for occasions like these.

Going forward, can you offer any suggestions about deploying upgrades? I'm concerned about filter accuracy and am eager to upgrade to the latest version in an attempt to get better accuracy in filtering, but am now reluctant if a new version actually causes delays of many hours in mail delivery... or actually BLOCKS mail delivery due to service failure.

Thanks again for your help!

(in reply to RSP)
Post #: 13
RE: Scan Engine service terminated unexpectedly - 15.Sep.2009 7:14:14 AM   
sputnam

 

Posts: 28
Joined: 10.Jan.2007
Status: offline
quote:

why have you needed to roll back so much?
I've got over 30 GFI ME installations I support and I've been using ME close to forever it seems. Probably 8 years or longer. Normally the updated builds are stable but I have had upgrades fail, which is why I have this procedure.

quote:

Second, I see from time to time really slow performance on inbound messages... sometimes taking 45 minutes to clear IIS and be forwarded on to the mail server.
That's an awful long time! Is there an AV on that box? If so I'd exclude those directories. 25K emails is a lot but 45 minutes is insane.

_____________________________

Regards,
Steven

(in reply to it_tech2000)
Post #: 14
RE: Scan Engine service terminated unexpectedly - 15.Sep.2009 7:17:20 AM   
it_tech2000

 

Posts: 13
Joined: 15.Apr.2009
Status: offline 		THanks.

Reverted to rev 0408 (thanks to RSP and acronis) and seems to be running ok. I think the delays were caused by the 14.1 rev barfing on me.

I'll keep an eye on it today and we'll see.

(in reply to sputnam)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Scan Engine service terminated unexpectedly Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts