Re: MSExchangeIS problems

From: Damian N Leibaschoff [MSFT] (damianl_at_online.microsoft.com)
Date: 02/09/04 

Date: Mon, 9 Feb 2004 11:32:36 -0600

Hi,

Your databases are corrupt, if an email with a virus was found by a
file-level antivirus agent in a log file or in an incoming queue (as it was
received), then that might have triggered the problem.
At this time you are facing a disaster recovery of your Mailbox store.
Usually going back and restoring the store from backup is the recommended
solution.

You can try the following:
Dismount the Public Folder store if mounted.
Make a backup copy of PRIV1.EDB, PRIV1.STM, PUB1.EDB, PUB1.STM and the rest
of the files in the MDBDATA folder (verify that you don't have more than one
location across multiple drives).

Remove all files from the MDBDATA folder, but the 4 mentioned above.

>From a command prompt, change directory to \program files\exchsrvr\bin and
then run:
eseutil /p ..\mdbdata\priv1.edb
eseutil /d ..\mdbdata\priv1.edb

Once it completes, try to mount the Mailbox Store.
If the Public Folder fails to mount, run the same command but with PUB1.EDB
as the DB.

Regards,
Damian 

-- 
Damian N. Leibaschoff, MS IST, MCSE
Microsoft Corporation
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
"Steven J. Bab***" <steveb@intheblackinc.com> wrote in message
news:%23uc%23b5y7DHA.3860@tk2msftngp13.phx.gbl...
> Hi Damian,
>
> Thanks for the response,
>
> CA is an exchange aware antivirus software.  I'm not sure but I'll check
if
> it's running against the database, it should be excluding it.
>
> I also turned off the background exchange scanning, as it was running
since
> the initial installation.  CA used to sell an exchange module, but now you
> just install CA InnoculateIT 7.0 and it sees exchange and installs the
> proper software to protect it.
>
> So far, we haven't been able to mount the exchange database...any ideas??
>
> Thanks!
> Steven
> "Damian N Leibaschoff [MSFT]" <damianl@online.microsoft.com> wrote in
> message news:unSMity7DHA.2576@TK2MSFTNGP11.phx.gbl...
> > Hi,
> > Make sure that your real-time antivirus is not scanning the \program
> > files\exchsrvr\ folder structure.
> > Detecting and removing a virus in the internal mail queues, logs or
> > databases will potentially corrupt the Exchange Information Store
> database.
> > You should use an Exchange aware antivirus for that task.
> >
> > At this point, is the Mailbox store mounted? Do you have good working
> > backups of the store?
> >
> > Regards,
> > Damian
> >
> > -- 
> > Damian N. Leibaschoff, MS IST, MCSE
> > Microsoft Corporation
> >
> > Get Secure! - www.microsoft.com/security
> >
> > =====================================================
> >
> > When responding to posts, please "Reply to Group" via
> >
> > your newsreader so that others may learn and benefit
> >
> > from your issue.
> >
> > =====================================================
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > "Steven J. Bab***" <steveb@intheblackinc.com> wrote in message
> > news:%23niRwpy7DHA.2044@TK2MSFTNGP10.phx.gbl...
> > > Hi everyone,
> > > We have SBS 2003 installed from Action Pack subscription.  Love the
> > product,
> > > but something is rearing it's ugly head...
> > >
> > >
> > > Event Type: Error
> > > Event Source: ESE
> > > Event Category: Database Corruption
> > > Event ID: 470
> > > Date:  2/9/2004
> > > Time:  8:33:20 AM
> > > User:  N/A
> > > Computer: BEAVIS
> > > Description:
> > > Information Store (4052) First Storage Group: Database E:\Program
> > > Files\Exchsrvr\mdbdata\priv1.edb is partially attached. Attachment
> stage:
> > 4.
> > > Error: -344.
> > >
> > >
> > > Event Type: Error
> > > Event Source: MSExchangeIS
> > > Event Category: General
> > > Event ID: 9518
> > > Date:  2/9/2004
> > > Time:  8:33:20 AM
> > > User:  N/A
> > > Computer: BEAVIS
> > > Description:
> > > Error 0xfffffea8 starting Storage Group
> > > /DC=local/DC=InTheBlackInc/CN=Configuration/CN=Services/CN=Microsoft
> > > Exchange/CN=INTHEBLACKINC/CN=Administrative Groups/CN=first
> administrative
> > > group/CN=Servers/CN=BEAVIS/CN=InformationStore/CN=First Storage Group
on
> > the
> > > Microsoft Exchange Information Store.
> > > MDB failed to start.
> > >
> > > We are also getting a large amount of emails with the mydoom zip
virus.
> > We
> > > have Computer Associates InnoculateIT 7.0 installed and it's catching
> and
> > > deleting the files.
> > >
> > > Please offer any help that you can...
> > >
> > > Steven J. Bab***
> > > In The Black, Inc
> > > Senior Network Engineer
> > > steveb@intheblackinc.com
> > >
> > >
> >
> >
>
>
Loading