Forefront Server Security TechCenter > Forefront Server Security Forums > Antigen > Event ID 5025 while performing a manual scan
Ask a questionAsk a question
 

AnswerEvent ID 5025 while performing a manual scan

  • Wednesday, June 03, 2009 10:37 PMDagmar Heidecker Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    while performing a manual scan I frequently find Even ID 5025 in the Windows Eventlog. The manual scan process does not shut down in this case but has to be killed using task manager.

    Event ID: 5025
    An exception ocurred within the Manual Scan (most likely caused by deeply nested folders). HR = 0x0

    What can I do? Is there any chance to find out the message which causes the error?

    Thank you for your help!

    Kind regards,
    Dagmar

Answers

  • Tuesday, June 09, 2009 11:04 AMAndy S. Day Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Dagmar,

    You may be able to find out more information on this event by looking in AntigenHrLog.txt and ProgramLog.txt, which are both found in the Antigen install folder (e.g. %Program Files%\Microsoft Antigen for Exchange). I imagine that an ERROR: entry (or two) will be written to the ProgramLog.txt. Match the exact time of those event(s) to AntigenHrLog.txt as well. You should get hex code(s) in the AntigenHrLog.txt. Maybe not much use to you, but if you paste them back to me by Reply, I may be able to find out what's happening.

    Again, as always, I would recommend opening a Support Case with CSS (Customer Service and Support), if the issue looks more complex and you cannot get any further.

    Kind Regards,

    Andy Day

    CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)

All Replies

  • Tuesday, June 09, 2009 11:04 AMAndy S. Day Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Dagmar,

    You may be able to find out more information on this event by looking in AntigenHrLog.txt and ProgramLog.txt, which are both found in the Antigen install folder (e.g. %Program Files%\Microsoft Antigen for Exchange). I imagine that an ERROR: entry (or two) will be written to the ProgramLog.txt. Match the exact time of those event(s) to AntigenHrLog.txt as well. You should get hex code(s) in the AntigenHrLog.txt. Maybe not much use to you, but if you paste them back to me by Reply, I may be able to find out what's happening.

    Again, as always, I would recommend opening a Support Case with CSS (Customer Service and Support), if the issue looks more complex and you cannot get any further.

    Kind Regards,

    Andy Day

    CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)