| Event Id | 21246 |
| Source | Microsoft Operations Manager |
| Description | The host process for the script responses (nnnn) will be restarted because it is using nnnnnn more bytes than its limit of 104857600. To adjust this limit, edit the Software\Mission Critical Software\OnePoint\MaxScriptHostPrivateBytes registry key. |
| Event Information | "According To Microsoft:" CAUSE: This problem occurs because McAfee VirusScan replaces the Windows Script Host component with the ScriptScan proxy component (ScriptProxy.dll). The ScriptScan proxy component scans JavaScript scripts and Visual Basic Scripting Edition (VBScript) scripts. When a script runs and passes through the scan as clean, the script is passed to the appropriate Windows Script Host. The ScriptScan proxy component parses scripts before they are run by the associated Windows Script Host. When the ScriptScan feature is turned on, the MOMHost.exe component slowly leaks memory. However, turning off the ScriptScan feature in the McAfee VirusScan properties does not correct the problem. WORKAROUND: Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.To work around this problem, you must unregister the ScriptScan proxy component. To do this, follow these steps. Important When you unregister the ScriptScan proxy component, McAfee VirusScan does not check scripts for viruses. 1. Log on to the agent computer by using an account that has domain administrator permissions. 2. Click Start , click Run , type cmd, and then click OK. 3. At the command prompt, locate the %ProgramFiles%\Network Associates\VirusScan folder. 4. At the command prompt, type the following: regsvr32 /u scriptproxy.dll 5. You must restart the OnePoint service to apply the changes. To do this, follow these steps: a. Click Start, point to Administrative Tools, and then click Services. b. In the Services snap-in, right-click OnePoint, and then click Restart. c. Exit the Services snap-in. |
| Reference Links | Event 21246 is logged on an agent computer, and you receive an error message in the Microsoft Operations Manager (MOM) 2005 Operator Console |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.