The Attendant service is crashingdue to libspam.dll : "Error details: System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt."

Versions / Builds Affected

GFI MailEssentials 2015

Status

Resolved

Problem Summary

The Attendant service is crashing referencing the libspam.dll file.

TT / JIRAID

2543

How to Identify

2015-04-20,10:24:16,293,1,"#000012CC","#00000004","info ","Attendant Service","Service started. Total time taken: 9.2968037 sec" 2015-04-20,12:24:13,160,1,"#000012CC","#0000002C","error ","Attendant Service","Error: CRITICAL Unhandled error, terminating:True" 2015-04-20,12:24:13,160,1,"#000012CC","#0000002C","error ","Attendant Service","Error details: System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt. ; at LibSpam.CSpamFilter.ExtractTokens(CSpamFilter* , SByte* , UInt32 ) ; at LibSpamNET.LibSpamHelper.extractSPAMTokens(Stream email) ; at ContentSecurity.ML.AST.EWSPFolders.PublicFolderTraining.ProcessFolder2(BaseFolderType rootASFolder, String folderName) ; at ContentSecurity.ML.AST.EWSPFolders.PublicFolderTraining.Process() ; at ContentSecurity.ML.AST.EWSPFolders.PublicFolderTraining.traintimer_Elapsed(Object sender, ElapsedEventArgs e) ; at System.Timers.Timer.MyTimerCallback(Object state) ; at System.Threading.TimerQueueTimer.CallCallbackInContext(Object state) ; at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) ; at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) ; at System.Threading.TimerQueueTimer.CallCallback() ; at System.Threading.TimerQueueTimer.Fire() ; at System.Threading.TimerQueue.FireQueuedTimerCompletion(Object state) ; at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() ; at System.Threading.ThreadPoolWorkQueue.Dispatch() ; at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()" 2015-04-20,12:24:13,160,1,"#000012CC","#0000002C","info ","Attendant Service","Initiating restart"

Workaround / Fix Details

Install all CUs/Upgrade to latest version In some cases disabling the Public folder processing and/or SpamTag has solved the issue. The Bayesian filter can be temporary disabled as well until a fix is available.

Required Actions

As above, attach article to case