Re: if edb.log was deleted

From: Dan Townsend [MSFT] (dtown_at_online.microsoft.com)
Date: 02/05/04


Date: Wed, 4 Feb 2004 18:05:37 -0600

And a virus would likely ruin the log so Exchange would crash trying to read
it - and I've yet to see that happen.

-- 
Hope that helps,
Dan Townsend
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Steve Antonio [MSFT]" <steveant@online.microsoft.com> wrote in message
news:esJt3Y36DHA.2712@tk2msftngp13.phx.gbl...
> Dan is absolutely correct. And the exchange transaction logs will not have
a
> virus in them, AV software sees the logs as being changed so often that
they
> often incorrectly believe they are infected.
>
>
> -- 
> Cheers,
>
> Steve Antonio
> Microsoft Exchange Support
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Dan Townsend [MSFT]" <dtown@online.microsoft.com> wrote in message
> news:eqnw3I36DHA.1052@TK2MSFTNGP12.phx.gbl...
> > Don't scan Exchange folders with file level AV.
> >
> > -- 
> > Hope that helps,
> > Dan Townsend
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Please do not send email to this address, post a reply to this
newsgroup.
> >
> > Use of included script samples are subject to the terms specified at
> > http://www.microsoft.com/info/cpyright.htm
> >
> > "Jeff" <anonymous@discussions.microsoft.com> wrote in message
> > news:a43501c3eb6a$e42c6000$a501280a@phx.gbl...
> > > I am using Exchsrvr5.5sp4 on winnt4 sp6, and norton
> > > antivirus enterprise 7.0 also running on the same server.
> > >
> > > yesterday, edb.log was affected by MyDoom virus and anti-
> > > virus program found it and deleted it. As result, the
> > > Inforamtion store service stopped and priv database
> > > becomed inconsistent.
> > >
> > > How could I prevent edb.log being affected and removed.
> > >
> > > Thanks a lot.
> >
> >
>
>


Relevant Pages

  • Re: Track down external email
    ... If it's smtp mail, it should show you originating ip address in message ... MVP - Exchange ... The header only shows who the email was from and who it went to. ... the timestamps in logs still use UTC. ...
    (microsoft.public.exchange.admin)
  • Re: Outlook client fails to connect to Exchange Server 2000 but OW
    ... there were errors in the logs even before this. ... Now I tried to get help from 1 guy workin with MS Exchange, ... We have a single MS Exchange Server 2000 which works as a member ... I can access exchange thru OWA but not thru Outlook client. ...
    (microsoft.public.exchange.clients)
  • Re: Hard Drive Configuration for Exchange 2003
    ... How do I identify the logs that should be moved after the install? ... Go to the properties of the Storage Group in Exchange System Manager. ... I've read that the following should be on separate drives: ...
    (microsoft.public.exchange.setup)
  • RE: Exchange no longer deleting Message Tracking Logs older than x
    ... 01:00 then it decides to not delete the logs. ... I wonder if a full restart of ALL exchange services was needed, ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • =?iso-8859-1?Q?Re:_Informationsspeicher_bei_Exchange_2000_h=E4ngt_beim_Be?= =?iso-8859&#
    ... > Exchange liest im laufenden Betrieb nie aus den Logs, nur beim Recovery ... Da habe ich selbst den "Microsoft Exchange ... > werden alle Logs in denen noch offene Transaktionen sind in das Fullbackup ...
    (microsoft.public.de.german.exchange2000.general)