I have a 2003 Server with Exchange 2003. 2 weeks ago, I installed Intelligent Message Filtering and then 2 days later, I installed Trend Micro's Scanmail for Exchange.
Immediately following the installation of ScanMail, when I would log on with RDP, I started receiving several generic pop up messages stating, "Internet Information Services encountered a problem and need to close". The date would be included on the popup of when this occured. They would keep popping up until one for every crash had displayed. However, there were no event in the even viewer. I found an article on Microsoft's site about IIS crashing without event logs, which had a patch that you must call a Microsoft supprt representative to obtain. The next day, I obtained the patch, which stated to only install it if I was not receiving any log entries. I went to install the patch, but found that log entries had just started being generated. So I did not install the patch. I have since uninstalled ScanMail, but was still receiving the messages about 3-6 times a day. I've changed the registry to better manage my 4GB of memory and applied some patches for corruption of IIS data and have reduced the crashes to 2 times a day. But, It's still happening and killing our productivity during the day because the virtual SMTP server id constantly dying
The following log is now being generated. But, now the pop up message is no longer coming up:
Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Time: 9:23:32 AM
Faulting application inetinfo.exe, version 6.0.3790.0, stamp 3e8000f7, faulting module unknown, version 0.0.0.0,
stamp 00000000, debug? 0, fault address 0x18df9645.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
The SMTP virtual server and svchost.exe are terminating unexpectedly numerous times throughout the day now as well. The times that they crash do not correspond with the times when IIS crashes. On occasion they do, but more often they don't
I've searched everywhere I can find and haven't found any answers for these events. Every person I know that has an Exchange server running Intelligent Message Filtering and any Virus Scanning app has the same issues, but there doesn't see to be any documentation on it.