Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Gfiscans.exe and whitelist.dll error

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Gfiscans.exe and whitelist.dll error Page: [1]
Login
Message << Older Topic   Newer Topic >>
Gfiscans.exe and whitelist.dll error - 21.Oct.2009 7:30:14 AM   
M4Gg0T5

 

Posts: 19
Joined: 3.Apr.2008
Status: offline
Hello everyone,

We're running GFI Mailessentials with the very last build on a server. Everything is fine and working but I receive this error in the Windows Logs few time a day. The whitelist seems to work well and I wonder can cause this message. It start few weeks ago without any of our interventions on the system.

Here's the error : Faulting application gfiscans.exe, version 14009.727.0.25, time stamp 0x4a6dc9b3, faulting module earchivein.dll, version 14009.526.0.14018, time stamp 0x4a13f763, exception code 0xc000000d, fault offset 0x00010dea, process id 0x133c, application start time 0x01ca2b1e407e65c3.



Do someone have any idea what is it ?

Thank you

Charles
Post #: 1
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 9:37:43 AM   
RSP

 

Posts: 1270
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
See if you can isolate a message that's causing this problem, as I'm sure GFI support will want to look into it. It looks like someone's crafting a message that crashes their product, possibly by accident.

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to M4Gg0T5)
Post #: 2
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 9:40:09 AM   
neilc

 

Posts: 146
Joined: 29.Jul.2003
From: Malta
Status: offline
Hi M4Gg0T5,

That error is triggered by particular emails whose format causes an issue within the whitelist module. As of releasing ME 14.1, we have released a patch for Whitelist which addresses 2 whitelist issues. A third issue has also been addressed and its fix will be available in a service release we'll be making available soon.

When such issues occur, what will happen is that the email which triggered the issue would be put in the failed mails folder and also sent to the intended recipient, after which the GFI MailEssentials Scan Engine service would automatically recover from the crash and continue processing emails.

The list of patches released after ME 14.1 can be found here:
http://forums.gfi.com/Patch_Information_-_GFI_MailEssentials_14%251_build_20090826/m_900781227/tm.htm
http://kbase.gfi.com/showarticle.asp?id=KBID003637

The whitelist patch is the following: ME141_PATCH_20090917_01

_____________________________

Regards,
Neil A. Cassar
GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to M4Gg0T5)
Post #: 3
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 9:50:11 AM   
M4Gg0T5

 

Posts: 19
Joined: 3.Apr.2008
Status: offline
Thank you very much both of you ! I will wait for the next release to come out then. Anyway the system is stable exept for this.

Have a nice day :)

Charles

(in reply to neilc)
Post #: 4
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 10:26:04 AM   
neilc

 

Posts: 146
Joined: 29.Jul.2003
From: Malta
Status: offline
Hi M4Gg0T5,

In the previous reply I've replied to your post assuming the issue was caused by whitelist module, when it's actually the mail monitoring module which is causing the issue. We're aware of this issue and we shall be releasing a fix for this soon, most probably as a patch after ME 14.1 SR1, since the fix didn't make it in time for the final build.

_____________________________

Regards,
Neil A. Cassar
GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to M4Gg0T5)
Post #: 5
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 10:34:32 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
I would like to add 2 more points to Neil's last reply ....

From what we can see, this issue should occur rarely. Please let us know if it is occurring very often.

When you encounter such issues, and you are presented with the Windows Error Reporting window (from the OS), pls select to send the error report to Microsoft. We are monitoring for such error reports, and the do allow us to act faster on such issues which would otherwise be rather difficult to troubleshoot.

Thank you

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to neilc)
Post #: 6
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 10:35:41 AM   
M4Gg0T5

 

Posts: 19
Joined: 3.Apr.2008
Status: offline
It happens 1-2 times a day.

(in reply to Nicks)
Post #: 7
RE: Gfiscans.exe and whitelist.dll error - 21.Oct.2009 10:45:17 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
This issue is also caused by some ill-formatted emails. We'll post in this thread as soon as we have the patch ready.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to M4Gg0T5)
Post #: 8
RE: Gfiscans.exe and whitelist.dll error - 28.Oct.2009 10:45:39 AM   
lorennerol

 

Posts: 16
Joined: 9.May2008
Status: offline
I've been struggling with this issue at one client in particular. It's been so bad that I've had to revert them to the April build. In this case the crashing GFI module would break outbound email entirely. The only fix I found was to remove GFI and reboot. A stability issue with GFI software that causes an email outage is very serious and I hope you are working to address it very quickly.

Also, I see several patches for the August release are posted. Are these patches cumulative?

(in reply to Nicks)
Post #: 9
RE: Gfiscans.exe and whitelist.dll error - 28.Oct.2009 10:55:21 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
Hi,

The patches documented in http://kbase.gfi.com/showarticle.asp?id=KBID003637 should only be applied to MailEssentials 14.1 build 20090826.

Which is the faulting module in your case?

Thank you.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to lorennerol)
Post #: 10
RE: Gfiscans.exe and whitelist.dll error - 28.Oct.2009 11:03:10 AM   
lorennerol

 

Posts: 16
Joined: 9.May2008
Status: offline
quote:

ORIGINAL: Nicks

Hi,

The patches documented in http://kbase.gfi.com/showarticle.asp?id=KBID003637 should only be applied to MailEssentials 14.1 build 20090826.

Which is the faulting module in your case?

Thank you.


whitelist.dll

In this case, though the GFI service was restarting, email delivery was broken in both directions and did not resume.

Are these patches cumulative, or do they need be applied sequentially? If the latter, should they be applied in the order listed in the KB article, or by date (20090918 is listed before 20090914, 1009 before 1008, etc)?

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/27/2009
Time: 6:21:51 PM
User: N/A
Computer: xxxxx
Description:
Faulting application gfiscans.exe, version 14009.727.0.25, faulting module whitelist.dll, version 14009.817.0.18, fault address 0x00028841.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 67 66 69 ure gfi
0018: 73 63 61 6e 73 2e 65 78 scans.ex
0020: 65 20 31 34 30 30 39 2e e 14009.
0028: 37 32 37 2e 30 2e 32 35 727.0.25
0030: 20 69 6e 20 77 68 69 74 in whit
0038: 65 6c 69 73 74 2e 64 6c elist.dl
0040: 6c 20 31 34 30 30 39 2e l 14009.
0048: 38 31 37 2e 30 2e 31 38 817.0.18
0050: 20 61 74 20 6f 66 66 73 at offs
0058: 65 74 20 30 30 30 32 38 et 00028
0060: 38 34 31 841

(in reply to Nicks)
Post #: 11
RE: Gfiscans.exe and whitelist.dll error - 28.Oct.2009 11:05:37 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
The patches can be applied in any order. ME141_PATCH_20090917_01 seems to be the patch that you are missing.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to lorennerol)
Post #: 12
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Gfiscans.exe and whitelist.dll error Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts