Symantec Mail Security 5.0.1 - Filter Hub crashing

mail-flow stops and filter-hub service "crashes"
dump files are created in C:\WINDOWS\PCHEALTH\ErrorRep\UserDumps\
2 files are created at a time; one approx 200-300MB, the other around 1.5GB

workaround has been to delete dump files and restart 'SMS Filter Hub' service. mailflow then continues through spam filter.

The following is a breakdown of server specs, event logs, etc.
Server: Windows 2003 Standard SP2, 2GB RAM, Intel Xeon 3.06Ghz Processor

CPU utilization ~ 100% between the following processes
inetinfo.exe, filter-hub.exe, conduite.exe, snmp.exe with emphasis on inetinfo.exe

Application Event Logs:
Event ID: 513
 WARNING: 'Kicker failed: Unable to Send Service Control Signal to: BMIFLTRHUBSVC (Result: 1053).'.

Event ID: 1000
Faulting application filter-hub.exe, version, faulting module unknown, version, fault address 0x07a68583.

Event ID: 513
 WARNING: 'Kicker failed: Unable to Send Service Control Signal to: BMIFLTRHUBSVC (Result: 231).'.

We have been struggling with this issue for a few months and would really appreciate any suggestions or input. Please let me know if more information is required.
Note: article: seems to be similar or possibly the same as we are experiencing but was not able to resolve.
Who is Participating?
Gerald_TiplerAuthor Commented:
Resolution from Symantec:

Download and from

Follow the release notes within the patches for installation.

Reboots of the server are required

We have now been running for about a week with no issues.

Symantec also recommended doing the following to maintain the database:

To check and repair the Brightmail MySQL database when using Windows

On the Windows taskbar, click Start > Run.

In the Open box, type the command:


Press Enter.

Change to the MySQL\bin folder.

By default it is on drive C.

At the command prompt, type the command that applies to your version: (Symantec Mail Security 5 for SMTP)


The command is run from the directory location:

C:\Program Files\Symantec\SMSSMTP\MySQL\Bin

mysqlcheck -ubrightmailuser -p<paste password here> brightmail --auto-repair

Replace <password> with the value found in the .brightmailuser file. The .brightmailuser file is located in the following directory by default:

                          C:\Program Files\Symantec\SMSSMTP\

                          After the process has listed all the tables, the next command to run is:

                          mysqlcheck -ubrightmailuser -p<paste password here> brightmail --optimize

 This routine should be performed once per month or after the smtp has processed 1 million messages.
Symantec stopped updating using old liveupdate some time in summer 2008
Update, update and hopefully it works. 

(errors you posted show conflict with ASLR and/or DEP if that means something to you)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.