I have a Windows 2008 R2 DataCenter SP1 running Exchange 2010 SP3 Rollup 14. IIS 7 is installed too.
Every 20 - 25 minutes I receive about 20 Event id: 1000 logged over a 3-4 minute span. Then there's peace until the events get logged again in about 20 minutes. When these application events get thrown I received warnings (5139) in the System log at the same time.
Log Name: Application
Source: Application Error
Date: 8/9/2016 12:01:34 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: HQVS06.mlg.us
Description:
Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2
Faulting module name: KERNELBASE.dll, version: 6.1.7601.23455, time stamp: 0x573a54fc
Exception code: 0xe053534f
Fault offset: 0x000000000001a06d
Faulting process id: 0x%9
Faulting application start time: 0x%10
Faulting application path: %11
Faulting module path: %12
Report Id: %13
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</Event
ID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000
</Keywords
>
<TimeCreated SystemTime="2016-08-09T16:
01:34.0000
00000Z" />
<EventRecordID>1143679</Ev
entRecordI
D>
<Channel>Application</Chan
nel>
<Computer>HQVS06.mlg.us</C
omputer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>7.5.7601.17514</Data
>
<Data>4ce7afa2</Data>
<Data>KERNELBASE.dll</Data
>
<Data>6.1.7601.23455</Data
>
<Data>573a54fc</Data>
<Data>e053534f</Data>
<Data>000000000001a06d</Da
ta>
</EventData>
</Event>
So I took a look into the Mail Archiver server , no errors logged. But I did notice windows updates were available so I took the opportunity to install them and disable the Mail Archiver services. I left then stopped for 1 hour and walla...no errors logged on Exchange.
I'm now working with GFI to resolve this issue as it appears their software is the cause.
Thanks Again for your reply.
Todd