When the Search service processes a specific "problematic" attachment of an email, it can result in a memory leak and in turn, the marc.search.exe process (Search service) crashes.
These are the steps to identify the situation:
- Observe the process marc.search.exe in task manager. You will see its memory allocation grow continuously until the process crashes.
- Let above happen a few times after each other and check the Search debug logs each time.
- If you see that the very last email before the crash was the very same one this would be a strong indication for this issue.
Check these logs for above:
- Every time
..\Search\DebugLogs\IndexableAttachment.logwould end with the very same file, e.g.:
2013-06-03,12:32:13,454,1,"#00000DD4","#0000000A","info ","IndexableAttachment","Converted A01035.pdf at depth 0"
- Every time
..\Search\DebugLogs\NewMessageCollection.logends with the very same email - e.g.:
2013-06-03,12:32:14,422,1,"#00000DD4","#0000000A","info ","NewMessageCollection","Indexed: DocId , MessageId: [-2147483588]"
The attachments we have seen triggering this were PDF files. They did open normally, but when trying to open their properties (File > Properties) within Adobe Reader, the property dialog simply did not open.
Upgrade to version 20130704 or newer.