| Event Id | 21422 |
| Source | Microsoft Operations Manager |
| Description | The host process for the script responses has terminated unexpectedly. Management Group : ManagementGroupName |
| Event Information | According to Microsoft: CAUSE: This problem is typically caused by McAfee VirusScan Enterprise 8.0i. Specifically, the problem may occur when the McAfee Scriptscan.dll component scans a script that calls an ActiveX control. The McAfee ScriptScan component replaces the Windows Script Host component with its own proxy component. The McAfee ScriptScan proxy component (ScriptProxy.dll) scans JavaScript and Visual Basic Scripting Edition (VBScript) scripts. When a script is executed and passes through the scan as clean, the script is passed on to the appropriate Windows Script Host. However, the ScriptProxy.dll component may cause an access violation when it parses the Active Directory Management Pack scripts in the MOMHost.exe process that calls ActiveX controls. When the ScriptProxy.dll component stops responding, the MOMHost.exe process that is running the script also fails. The MOM service tries to restart the failed MOMHost.exe process, and the access violation is repeated. RESOLUTION: This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk. To work around this problem, you must unregister the ScriptProxy.dll component. To do this, follow these steps. Important When you unregister the ScriptProxy.dll component, McAfee VirusScan software does not check any scripts for viruses. 1. Use an account that has domain administrator permissions to log on to the Windows Server 2003-based domain controller. 2. Click Start, click Run, type cmd, and then click OK. 3. At the command prompt, locate the %ProgramFiles%\Network Associates\VirusScan folder. 4. At the command prompt, type regsvr32 /u scriptproxy.dll. 5. You must restart the MOM service to apply the changes. To do |
| Reference Links | MOMHost.exe processes may stop responding after you install Windows Active Directory Management Pack for Microsoft Operations Manager 2005 on a Windows Server 2003-based domain controller |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.