Event Id | 201 |
Source | SpntLog |
Description | Description 1. The exception(0XC0000005) occurred in SpntSvc.exe at 0X77F475B2. ModuleBase: C:\WINDOWS\system32\ntdll.dll (0x77f40000) Description 2. The RPC server threw an exception. ExceptionCode: 0xc0000005 FunctionNumber: 0x000a0006 InputBuffer: 0x0014e900 (668) OutputBuffer: 0x00798d28 (668) |
Event Information | PROBLEM: After installing or upgrading the ServerProtect Normal Server (NS) to 5.5 or 5.56, some the following symptoms are encountered: 1. The Trend ServerProtect service is unable to start. 2. The Management Console of ServerProtect freezes or takes too long to open and the NS will be shown with a STOP sign. 3. If you look at the application event log of the problem server. 4. If you enable debugging on the problem NS and check the spnt.log file created. SOLUTION: During installation of SPNT, by using either using the setup program or Install New SPNT(s), you will be asked for an administrator account to access the target server. If the password of the account used is too long, it will cause buffer overrun on the RPC module. If the password is greater than 14 characters, it occurs occasionally. If it is greater than 20 characters, it always occurs. This issue is resolved by hot fix 1326 for ServerProtect 5.5 and hot fix 1008 for ServerProtect 5.56. It will also allow you to retain the long password initially used. |
Reference Links | According to Trend Micro |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.