cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1359
Views
0
Helpful
1
Replies

Error code 3221225539 in AMP

gaurav14
Level 1
Level 1

Hi,

Quarantine failed events were triggered for the user. 

Error details for the events are shown below:

 

Can anyone please explain the meaning of the error?

1 Reply 1

yogdhanu
Cisco Employee
Cisco Employee

Hi Gaurav,

 

Basically FireAMP was unable to obtain a handle/lock on the file away from the file system in order to quarantine it (This tends to happen when browsers have an exclusive lock on files at run-time).

It could be that any other AV had lock on this file or any system process had which did not allow AMP to take action.

Also sharing some additional links in case you need information on these codes in future--

These codes are derived from the Windows Event Log hexadecimal codes.  You can find some more information here:

https://msdn.microsoft.com/en-us/library/ee441884.aspx

 

Hex to decimal converter:

http://www.binaryhexconverter.com/hex-to-decimal-converter

 

You can use this to convert decimal to hex as well.

http://www.rapidtables.com/convert/number/decimal-to-hex.htm

 

So, once you convert these, you can check with the first article what those error codes that for.

 

I hope this helps in answering your queries.

 

Thanks,

Yogesh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card