Exchange 2003 Event ID 1025 related to crashing Symantec Mail Security for MS Exchange process

Posted on 2009-02-20
Last Modified: 2013-11-22
We have an Exchange 2003 server that yesterday quit processing email.  I was able to get on it and in the event viewer there were hundreds of Event ID 1025 errors stating:

An error occurred on database "SGNAME\DATABASENAME".
Function name or description of problem: SLINK::EcTestMessage
Error: 0x3f0

Mixed in with these was Event ID 1000 stating that the Symantec Mail Security for Microsoft Exchange process was crashing and restarting.  I disabled the SMSME service and rebooted the server and all is now well.  Obvoiusly that is not a good long term solution as we now don't have mail level anti-virus running on the server.  During the time that these errors were going on, emails that eventually got through were blank emails with a winmail.dat attachment.  

Does anyone have any insight into this?  I'm sure I'll end up calling Symantec but I hate doing that as I have little faith in their tech support from past experience.

Thanks all.
Question by:NetworkRangers
    LVL 6

    Expert Comment

    Even if u disable symantec their sinks are still present on smtp.
    run transwiz from here
    disable the smsme sinks of symantec
    Now the winmail.dat issue is diff as it is related to mime conversion

    Author Comment

    I'm assuming the winmail.dat files are a result of the Symantec Mail Security not fully processing the emails during the scanning.  I'm not for sure how that all works, but I know from the timing of all this that they are directly related.
    LVL 65

    Accepted Solution

    I have little faith in Symantec products full stop.
    My primary suggestion would be to remove the product and restart the server. Ideally then replace Symantec with something that actually works without using more memory than anything else.
    If you don't want to do that then reinstalling the Symantec application will often resolve issues like this.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Use these top 10 tips to master the art of email signature design. Create an email signature design that will easily wow recipients, promote your brand and highlight your professionalism.
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    The purpose of this video is to demonstrate how to set up a Mailchimp Template which will let the user create a uniform look for all of their campaigns. This will be demonstrated using a Windows 8 PC. Mailchimp will be used. Log into your Mail…
    This Micro Tutorial demonstrates  how Internet marketers work with competitive analysis data, and a common task in data preparation is creating separate column for domains. You will then extract from a list of URLs.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now