Computer Hope

Microsoft => Microsoft Windows => Windows Server => Topic started by: PhoenixAdmn on July 12, 2005, 01:28:21 PM

Title: Windows NT 4.0 application error Isasrv.exe
Post by: PhoenixAdmn on July 12, 2005, 01:28:21 PM
I am the administrator of a small LAN in a corporate environment.  There are two servers on the LAN, with one being used as a combination DNS server and test database server.  After having been out of the office for four days, I returned to find the following error message displayed by Dr. Watson for Windows NT.  It reads as follows:

An application error has occurred and an application error log is being generated.  Isasrv.exe Exception access violation (0xc0000005), Address: 0x0040c1ff

The server is working normally and we have not experienced any problems with our network, nor connecting to our company's network, etc.  Doing a search on Google for the Isasrv.exe application reveals nothing.  Google asks if I mean Lsasrv.exe, which I do not.

There have been no changes to the server in at least a week with the last one being updates from Microsoft being installed over a week ago.

This is a very old IBM PC 330 Server running a six disk RAID and will be replaced within the next few months.  I just need to know if anyone has any knowledge of what this application is, what it does and what could have caused the error.  The server has not been rebooted and only a regularly scheduled Norton Corporate Edition Antivirus scan that runs every weekend has been run as usual.

Thanks in advance for any assistance that can be offered.  :)
Title: Re: Windows NT 4.0 application error Isasrv.exe
Post by: merlin_2 on July 12, 2005, 01:33:28 PM
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q267578
Title: Re: Windows NT 4.0 application error Isasrv.exe
Post by: Gary Hileman on July 12, 2005, 02:43:55 PM
I checked the link you provided and found it was for a Windows 2K environment, whereas I am in Windows NT 4.0.  I am concerned that the steps recommended would not prove successful.  I did go further and searched the Microsoft site for references to this problem (I guess all these 60 hour weeks have dulled my brain and I never thought about that site :o) and I found the following http://www.microsoft.com/technet/archive/winntas/support/advtshoot/x0b_dll.mspx
I also checked the Dr. Watson error log and found that the problem has occurred multiple times since just after midnight on 7/11/05, when no one was on the network and the only thing running was our corporate edition of Norton Antivirus, which has run every weekend on that server for well over a year.   I cannot find a way to send an attachment with these message, so if someone thinks that can help and can instruct me on how to send it so it can be read, I will be happy to do so.

Thanks.
Title: Re: Windows NT 4.0 application error Isasrv.exe
Post by: pcdoc4christ on July 12, 2005, 07:21:44 PM
Admin:

OK, Isasrv.dll is a dynamic link library file on Windows Server 2003, as this knowledge base article indicates:

http://support.microsoft.com/?kbid=883394

So, my guess is that Isasrv.exe is a network operating system file.  Try doing a search for the file on the server and checking out it's properties to see if the file is a Microsoft one.

The error you are experiencing may possibly be explained by this knowledge base article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;317153&Product=win2000

But only if you have an older version of Symantec's corporate antivirus program installed.

Title: Re: Windows NT 4.0 application error Isasrv.exe
Post by: pcdoc4christ on July 12, 2005, 07:25:02 PM
Admin:

I'd like to ask that you check the Event Viewer (Start > Programs > Administrative Tools) to see if any of the errors and warnings listed give a clue as to the cause.  

I'm curious to know what event ID numbers and descriptions you find there, so please let me know.

Regards,
Doc
Title: Re: Windows NT 4.0 application error Isasrv.exe
Post by: PhoenixAdmn on July 13, 2005, 07:28:46 AM
The event number is 4097 and the description is the same as what I placed in my original post (see the bold text).  The source is shown as Dr.Watson.  I am going to watch and see if it occurs again this weekend and if so, I'll know it is the Corporate NAV.  We are running the most current release, but it was installed two or three weeks ago.  I guess as long as the server continues to function properly, I'll just monitor the situation.

Thanks.

P.S. Like your user name.