IIS Crashing- Exchange 2003 with Intelligent Message Filtering and Virus Scanning- Faulting application inetinfo.exe faulting module unknown

I have a 2003 Server with Exchange 2003. 2 weeks ago, I installed Intelligent Message Filtering and then 2 days later, I installed Trend Micro's Scanmail for Exchange.

Immediately following the installation of ScanMail, when I would log on with RDP, I started receiving several generic pop up messages stating, "Internet Information Services encountered a problem and need to close". The date would be included on the popup of when this occured. They would keep popping up until one for every crash had displayed. However, there were no event in the even viewer. I found an article on Microsoft's site about IIS crashing without event logs, which had a patch that you must call a Microsoft supprt representative to obtain. The next day, I obtained the patch, which stated to only install it if I was not receiving any log entries. I went to install the patch, but found that log entries had just started being generated. So I did not install the patch. I have since uninstalled ScanMail, but was still receiving the messages about 3-6 times a day. I've changed the registry to better manage my 4GB of memory and applied some patches for corruption of IIS data and have reduced the crashes to 2 times a day. But, It's still happening and killing our productivity during the day because the virtual SMTP server id constantly dying

The following log is now being generated. But, now the pop up message is no longer coming up:

    Event Type:      Error
    Event Source:      Microsoft Exchange Server
    Event Category:      None
    Event ID:      1000
    Date:            9/12/2004
    Time:            9:23:32 AM
    User:            N/A
    Computer:      VSDCEX01
    Faulting application inetinfo.exe, version 6.0.3790.0, stamp 3e8000f7, faulting module unknown, version,
    stamp 00000000, debug? 0, fault address 0x18df9645.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The SMTP virtual server and svchost.exe are terminating unexpectedly numerous times throughout the day now as well. The times that they crash do not correspond with the times when IIS crashes. On occasion they do, but more often they don't

I've searched everywhere I can find and haven't found any answers for these events. Every person I know that has an Exchange server running Intelligent Message Filtering and any Virus Scanning app has the same issues, but there doesn't see to be any documentation on it.
Who is Participating?
BNettles73Connect With a Mentor Commented:
Check out these articles -

Microsoft Exchange: Troubleshooting Exchange-Related Metabase Corruption Issues

Probably what caused the issue was your av software scanning the IIS directories ... you cannot let your AV software scan Exchange or IIS unless it is specifically designed for that purpose ... You can probably verify metabase corruption by turning up diagnostics logging to max on MSExchangeMU ...

Might need to reinstall Exchange over top of the existing and then reapply your service packs ... in the worst case scenario, you'll need to uninstall exchange then IIS > then reinstall IIS then Exchange > apply service packs .... I had this issue a while back and a simple reinstall fixed the issue ...

As always - make sure you have a good backup!
ronaldhardingAuthor Commented:
This answer was perfect. Thank you for the information. Uninstalling IMF and re-installing Exchange took care of the issue. Perfect!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.