Dr. Watson Application Error

[UTTech]

I am running Exchange 5.5 SP4 on NT 4.0 SP6A.

At least once a week, I get a Dr. Watson application error on emsmta.exe and the MTA service stopped. I can restart the MTA service with no problem.

I tried reinstalling SP4 and SP6A but no luck. I ran MTACHECK but no errors.

In Event Viewer, the following Event ID:

Event ID 4097

The application, exe\emsmta.dbg, generated an application error The error occurred on 12/11/2002 @ 10:30: 1.609 The exception generated was c00000005 at address 005699c1 (oeprbind)

 

[SgtB]

Are there any virus scanners on your server? If so, try stopping the AV service for a week, and see if the problem reoccurs. Manually scan if need be.
I've looked up some stuff on this issue, but could only find some useless MS articles.

MS articles were about the MTA stopping abruptly, but also mentioned that it was fixed it the latest service pack. ________________________________________
Check out

http://www.security-forums.com

 

[UTTech]

I've disabled Netshield but MTA service still continued to stop.

 

[SgtB]

Does this happen at a fixed time or a specific day? Do you know of any scheduled jobs (ie backup) that may be causing this? ________________________________________
Check out

http://www.security-forums.com

 

[UTTech]

It happens usually at night between midnight and 6am although it happened to me twice this morning. There are no backups scheduled since I run backups manually on Fridays.

 

[SgtB]

Wow...I'm really stumped. When did this start? Whats the last thing that changed?

Trying to grab at more straws as you can tell... ________________________________________
Check out

http://www.security-forums.com

 

[UTTech]

I'm stumped too! This started about 2 weeks ago. I haven't changed anything.

 

[SgtB]

I'm sure you've checked the basics, but how about disk space, pagefile...

How about memory statistics? Could it possibly be a mem leak causing the MTA to crash? Check the mem usage periodically (or run performance monitor) to see if this may be the issue.

This is one big maybe though.... ________________________________________
Check out

http://www.security-forums.com

 

[UTTech]

I finally called Microsoft. They gave me a patch to replace the emsmta.dbg file and it is now fixed.