Monday, 7 April 2008

Event ID's 7076, 6398 and 6432

I have seen these errors a few times, where the Application Event log shows ID's 7076, 6398 and 6432 with the message "Attempted to read or write to protected memory". Microsoft has located the problem to be related to IIS and have issued a fix at It can be installed regardless of MOSS/WSS service pack installed. Also see the following article for further details -

Update (courtesy of my colleague Virinder Aulakh): You get an unspecified SMTP error when you try changing SMTP settings in IIS after applying the hotfix (KB946517) to resolve Event ID 6398 errors. The problem is described in detail here and the subsequent Microsoft Knowledgebase article is here