event id 5008

Hi,

we have two terninal servers with windows server 2003 x64.

as virus protection we use forefront endpoint protection 2010 (forefront endpoint protection version 2.1.1116.0; antimalware client version 3.0.8402.0; engine version 1.1.10502.0) but since the definition update on 16 april we get errors

"Microsoft Antimalware engine has been terminated due to an unexpected error.
Failure Type: Crash
Exception code: 0xc0000005
Resource: file:C:\Documents and Settings\xxxx\Local Settings\Temporary Internet Files\Content.IE5\YZRVKITK\editCA1LP049.htm"<o:p></o:p>

on one server we updated to system center endpoint protection 2012 (antimalware client version 4.5.216.0; engine version 1.1.10502.0) but still the same, several time a day the service crashes.

Anyone know why is crashes and how we can fix it?

Koen

May 5th, 2014 5:07am

Hi,

What is the source of the event ID? If the source is Windows Defender, please close Windows Defender and open it again, then run a Windows Defender quick scan to see if the scanning engine is available or not. If not, please restart the computer and run a Windows Defender quick scan again. Besides, please also run sfc /scannow at the command prompt to see any system files existed.

Best regards,

Susie

Free Windows Admin Tool Kit Click here and download it now
May 6th, 2014 2:51am

Hi,

here is a copy of the event:

Event Type: Error
Event Source: Microsoft Antimalware
Event Category: None
Event ID: 5008
Date:  5/6/2014
Time:  8:47:01 AM
User:  N/A
Computer: SV******
Description:
Microsoft Antimalware engine has been terminated due to an unexpected error.
  Failure Type: Crash
  Exception code: 0xc0000005
  Resource: file:C:\Documents and Settings\*****\Local Settings\Temporary Internet Files\Content.IE5\4B73SGTU\edit[1].htm

already ran a quick and full scan with FEP but then no problem

did a reboot of the servers, no result

Koen

May 6th, 2014 4:54am

Hi,

Thanks for your reply.

Which version of definition you have updated? Please make sure that you have updated to the latest version.

Microsoft pre-release definition updates

In addition, according to the this article, the Antimalware Engine 1.1.10502.0 was released to customers on 17 April 2014, when did you update it?

Best regards,

Susie


Free Windows Admin Tool Kit Click here and download it now
May 7th, 2014 5:30am

Hi,

the definitions are the latest version: 1.173.1524.0, the engine version is 1.1.10502.0 en the client version is 4.1.522.0

We did a reinstallation on the 28 of april.

Koen

May 7th, 2014 8:08am

Hi,

Thanks for your reply.

Which version of definition you have updated? Please make sure that you have updated to the latest version.

Microsoft pre-release definition updates

In addition, according to the this article, the Antimalware Engine 1.1.10502.0 was released to customers on 17 April 2014, when did you update it?

Best regards,

Susie


Free Windows Admin Tool Kit Click here and download it now
May 7th, 2014 12:25pm

Hi,

Thanks for your reply.

Which version of definition you have updated? Please make sure that you have updated to the latest version.

Microsoft pre-release definition updates

In addition, according to the this article, the Antimalware Engine 1.1.10502.0 was released to customers on 17 April 2014, when did you update it?

Best regards,

Susie


May 7th, 2014 12:25pm

Hi,

We did an update of the client to version 4.5.216 but still the same :-(

any ideas?

Koen

Free Windows Admin Tool Kit Click here and download it now
May 9th, 2014 2:35am

Hi,

Sorry to say that I have no ideas on this issue. Maybe you can contact support to fix it:

http://support.microsoft.com/contactus/?ln=en-au#find_store

Best regards,

Susie

May 27th, 2014 5:50am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics