cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1002
Views
0
Helpful
1
Replies
Highlighted
Beginner

Error code 3221225539 in AMP

Hi,

Quarantine failed events were triggered for the user. 

Error details for the events are shown below:

 

Can anyone please explain the meaning of the error?

1 REPLY 1
Highlighted
Cisco Employee

Hi Gaurav,

 

Basically FireAMP was unable to obtain a handle/lock on the file away from the file system in order to quarantine it (This tends to happen when browsers have an exclusive lock on files at run-time).

It could be that any other AV had lock on this file or any system process had which did not allow AMP to take action.

Also sharing some additional links in case you need information on these codes in future--

These codes are derived from the Windows Event Log hexadecimal codes.  You can find some more information here:

https://msdn.microsoft.com/en-us/library/ee441884.aspx

 

Hex to decimal converter:

http://www.binaryhexconverter.com/hex-to-decimal-converter

 

You can use this to convert decimal to hex as well.

http://www.rapidtables.com/convert/number/decimal-to-hex.htm

 

So, once you convert these, you can check with the first article what those error codes that for.

 

I hope this helps in answering your queries.

 

Thanks,

Yogesh

Content for Community-Ad