Within our test roll out of users we're noticing a number of the Zen Clients (all our clients are 10.1, including our SuSe 10 VM server too) having the Novell ZenWorks Agent Service crashing at random times. While it seems to be isolated to a lower percentage of the test group the rest may not be using Zen objects as much.

I have gathered the following from the event viewer and to me it suggests a memory leak. The very last one mentions "The process cannot access the file 'C:\Program Files\Novell\ZENworks\cache\zmd\fcb3f4a2b8314862a9 f8a0a6b216019d.APPSTATE' because it is being used by another process. " which could suggest something like the virus scanner might be holding the process?

We are running PatchLink, TrendMicro 7.3 and Encryption Plus hard drive encryption.

Event Type: Information
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 1001
Date: 9/26/2008
Time: 8:22:53 AM
User: N/A
Computer: <computer name>
Description:
Bucket 883436245, bucket table 1, faulting application zenworkswindowsservice.exe, version 10.1.0.0, stamp 4893fb38, faulting module mscorwks.dll, version 2.0.50727.1433, stamp 471ef729, debug? 0, fault address 0x0000a6d3.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 00 75 00 63 00 6b 00 B.u.c.k.
0008: 65 00 74 00 3a 00 20 00 e.t.:. .
0010: 38 00 38 00 33 00 34 00 8.8.3.4.
0018: 33 00 36 00 32 00 34 00 3.6.2.4.
0020: 35 00 0d 00 0a 00 42 00 5.....B.
0028: 75 00 63 00 6b 00 65 00 u.c.k.e.
0030: 74 00 54 00 61 00 62 00 t.T.a.b.
0038: 6c 00 65 00 20 00 31 00 l.e. .1.
0040: 0d 00 0a 00 ....

Event Type: Error
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 1000
Date: 9/26/2008
Time: 7:58:53 AM
User: N/A
Computer: <computer name>
Description:
Faulting application explorer.exe, version 6.0.2900.2180, stamp 41107ece, faulting module nalshell.dll, version 10.1.0.0, stamp 4885f4b3, debug? 0, fault address 0x0007b6f3.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 65 00 78 00 70 00 .e.x.p.
0030: 6c 00 6f 00 72 00 65 00 l.o.r.e.
0038: 72 00 2e 00 65 00 78 00 r...e.x.
0040: 65 00 20 00 36 00 2e 00 e. .6...
0048: 30 00 2e 00 32 00 39 00 0...2.9.
0050: 30 00 30 00 2e 00 32 00 0.0...2.
0058: 31 00 38 00 30 00 20 00 1.8.0. .
0060: 34 00 31 00 31 00 30 00 4.1.1.0.
0068: 37 00 65 00 63 00 65 00 7.e.c.e.
0070: 20 00 69 00 6e 00 20 00 .i.n. .
0078: 6e 00 61 00 6c 00 73 00 n.a.l.s.
0080: 68 00 65 00 6c 00 6c 00 h.e.l.l.
0088: 2e 00 64 00 6c 00 6c 00 ..d.l.l.
0090: 20 00 31 00 30 00 2e 00 .1.0...
0098: 31 00 2e 00 30 00 2e 00 1...0...
00a0: 30 00 20 00 34 00 38 00 0. .4.8.
00a8: 38 00 35 00 66 00 34 00 8.5.f.4.
00b0: 62 00 33 00 20 00 66 00 b.3. .f.
00b8: 44 00 65 00 62 00 75 00 D.e.b.u.
00c0: 67 00 20 00 30 00 20 00 g. .0. .
00c8: 61 00 74 00 20 00 6f 00 a.t. .o.
00d0: 66 00 66 00 73 00 65 00 f.f.s.e.
00d8: 74 00 20 00 30 00 30 00 t. .0.0.
00e0: 30 00 37 00 62 00 36 00 0.7.b.6.
00e8: 66 00 33 00 0d 00 0a 00 f.3.....

Event Type: Error
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 1000
Date: 9/26/2008
Time: 6:18:47 AM
User: N/A
Computer: <computer name>
Description:
Faulting application zenworkswindowsservice.exe, version 10.1.0.0, stamp 4893fb38, faulting module mscorwks.dll, version 2.0.50727.1433, stamp 471ef729, debug? 0, fault address 0x0000a6d3.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 7a 00 65 00 6e 00 .z.e.n.
0030: 77 00 6f 00 72 00 6b 00 w.o.r.k.
0038: 73 00 77 00 69 00 6e 00 s.w.i.n.
0040: 64 00 6f 00 77 00 73 00 d.o.w.s.
0048: 73 00 65 00 72 00 76 00 s.e.r.v.
0050: 69 00 63 00 65 00 2e 00 i.c.e...
0058: 65 00 78 00 65 00 20 00 e.x.e. .
0060: 31 00 30 00 2e 00 31 00 1.0...1.
0068: 2e 00 30 00 2e 00 30 00 ..0...0.
0070: 20 00 34 00 38 00 39 00 .4.8.9.
0078: 33 00 66 00 62 00 33 00 3.f.b.3.
0080: 38 00 20 00 69 00 6e 00 8. .i.n.
0088: 20 00 6d 00 73 00 63 00 .m.s.c.
0090: 6f 00 72 00 77 00 6b 00 o.r.w.k.
0098: 73 00 2e 00 64 00 6c 00 s...d.l.
00a0: 6c 00 20 00 32 00 2e 00 l. .2...
00a8: 30 00 2e 00 35 00 30 00 0...5.0.
00b0: 37 00 32 00 37 00 2e 00 7.2.7...
00b8: 31 00 34 00 33 00 33 00 1.4.3.3.
00c0: 20 00 34 00 37 00 31 00 .4.7.1.
00c8: 65 00 66 00 37 00 32 00 e.f.7.2.
00d0: 39 00 20 00 66 00 44 00 9. .f.D.
00d8: 65 00 62 00 75 00 67 00 e.b.u.g.
00e0: 20 00 30 00 20 00 61 00 .0. .a.
00e8: 74 00 20 00 6f 00 66 00 t. .o.f.
00f0: 66 00 73 00 65 00 74 00 f.s.e.t.
00f8: 20 00 30 00 30 00 30 00 .0.0.0.
0100: 30 00 61 00 36 00 64 00 0.a.6.d.
0108: 33 00 0d 00 0a 00 3.....

Event Type: Error
Event Source: .NET Runtime
Event Category: None
Event ID: 1023
Date: 9/26/2008
Time: 6:18:35 AM
User: N/A
Computer: <computer name>
Description:
.NET Runtime version 2.0.50727.1433 - Fatal Execution Engine Error (79FFEE24) (80131506)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 1000
Date: 9/22/2008
Time: 6:25:03 AM
User: N/A
Computer: <computer name>
Description:
Faulting application explorer.exe, version 6.0.2900.2180, stamp 41107ece, faulting module nalshell.dll, version 10.1.0.0, stamp 4885f4b3, debug? 0, fault address 0x0007b6f3.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 65 00 78 00 70 00 .e.x.p.
0030: 6c 00 6f 00 72 00 65 00 l.o.r.e.
0038: 72 00 2e 00 65 00 78 00 r...e.x.
0040: 65 00 20 00 36 00 2e 00 e. .6...
0048: 30 00 2e 00 32 00 39 00 0...2.9.
0050: 30 00 30 00 2e 00 32 00 0.0...2.
0058: 31 00 38 00 30 00 20 00 1.8.0. .
0060: 34 00 31 00 31 00 30 00 4.1.1.0.
0068: 37 00 65 00 63 00 65 00 7.e.c.e.
0070: 20 00 69 00 6e 00 20 00 .i.n. .
0078: 6e 00 61 00 6c 00 73 00 n.a.l.s.
0080: 68 00 65 00 6c 00 6c 00 h.e.l.l.
0088: 2e 00 64 00 6c 00 6c 00 ..d.l.l.
0090: 20 00 31 00 30 00 2e 00 .1.0...
0098: 31 00 2e 00 30 00 2e 00 1...0...
00a0: 30 00 20 00 34 00 38 00 0. .4.8.
00a8: 38 00 35 00 66 00 34 00 8.5.f.4.
00b0: 62 00 33 00 20 00 66 00 b.3. .f.
00b8: 44 00 65 00 62 00 75 00 D.e.b.u.
00c0: 67 00 20 00 30 00 20 00 g. .0. .
00c8: 61 00 74 00 20 00 6f 00 a.t. .o.
00d0: 66 00 66 00 73 00 65 00 f.f.s.e.
00d8: 74 00 20 00 30 00 30 00 t. .0.0.
00e0: 30 00 37 00 62 00 36 00 0.7.b.6.
00e8: 66 00 33 00 0d 00 0a 00 f.3.....

Event Type: Error
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 1000
Date: 9/22/2008
Time: 6:22:29 AM
User: N/A
Computer: <computer name>
Description:
Faulting application zenworkswindowsservice.exe, version 10.1.0.0, stamp 4893fb38, faulting module mscorwks.dll, version 2.0.50727.1433, stamp 471ef729, debug? 0, fault address 0x0000a6d3.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 7a 00 65 00 6e 00 .z.e.n.
0030: 77 00 6f 00 72 00 6b 00 w.o.r.k.
0038: 73 00 77 00 69 00 6e 00 s.w.i.n.
0040: 64 00 6f 00 77 00 73 00 d.o.w.s.
0048: 73 00 65 00 72 00 76 00 s.e.r.v.
0050: 69 00 63 00 65 00 2e 00 i.c.e...
0058: 65 00 78 00 65 00 20 00 e.x.e. .
0060: 31 00 30 00 2e 00 31 00 1.0...1.
0068: 2e 00 30 00 2e 00 30 00 ..0...0.
0070: 20 00 34 00 38 00 39 00 .4.8.9.
0078: 33 00 66 00 62 00 33 00 3.f.b.3.
0080: 38 00 20 00 69 00 6e 00 8. .i.n.
0088: 20 00 6d 00 73 00 63 00 .m.s.c.
0090: 6f 00 72 00 77 00 6b 00 o.r.w.k.
0098: 73 00 2e 00 64 00 6c 00 s...d.l.
00a0: 6c 00 20 00 32 00 2e 00 l. .2...
00a8: 30 00 2e 00 35 00 30 00 0...5.0.
00b0: 37 00 32 00 37 00 2e 00 7.2.7...
00b8: 31 00 34 00 33 00 33 00 1.4.3.3.
00c0: 20 00 34 00 37 00 31 00 .4.7.1.
00c8: 65 00 66 00 37 00 32 00 e.f.7.2.
00d0: 39 00 20 00 66 00 44 00 9. .f.D.
00d8: 65 00 62 00 75 00 67 00 e.b.u.g.
00e0: 20 00 30 00 20 00 61 00 .0. .a.
00e8: 74 00 20 00 6f 00 66 00 t. .o.f.
00f0: 66 00 73 00 65 00 74 00 f.s.e.t.
00f8: 20 00 30 00 30 00 30 00 .0.0.0.
0100: 30 00 61 00 36 00 64 00 0.a.6.d.
0108: 33 00 0d 00 0a 00 3.....

Event Type: Error
Event Source: .NET Runtime
Event Category: None
Event ID: 1023
Date: 9/22/2008
Time: 6:22:24 AM
User: N/A
Computer: <computer name>
Description:
.NET Runtime version 2.0.50727.1433 - Fatal Execution Engine Error (79FFEE24) (80131506)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.