Re: exchange looging gone mad - help needed

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


well you could, but it doesn't solve the underlying issue.

you may want to try some freeware stuff on your workstations too in addition to the CA stuff...AVG free is great
for malware... http://www.malwarebytes.org/mbam.php I've picked up stuff that defender doesn't find



--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Joe#2" <Joe2@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:8899B9C7-92F6-4E58-8557-6EE492928B69@xxxxxxxxxxxxxxxx
It would appear you are correct.

Could I turn on circular logging where it overwrites the same logfile each
time (as a tempory measure)?

I have the package for SBS, It is exchange aware, but I noticed the exchange
directory is excluded! All email is also scanned by my firewall fron Calyptix.

"Cris Hanna [SBS - MVP]" wrote:

Well it sure sounds like an email worm...exactly which CA product do you
have? Are you sure that it scan's the mail as it comes in and goes out or
does it just do file scanning?

You are probably going to need to check all workstations too for a
worm/bot...

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Joe#2" <Joe2@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:885F0B25-FC1C-47EE-A3F8-DCDEFA437DA1@xxxxxxxxxxxxxxxx
> Don't know why my last post reply got posted as a blank.
>
> I have AV from CA. No unusual activities reported. I scanned for pest.
> Nothing found.
>
> Exchange locked up, everything showed as started. But exchange was not
> working. Logfile generation stopped. Rebooted the server, it started > back,
> but so did the logfiles. 200 mbytes a minute.
>
> No unusual entries in event folder
>
> "Cris Hanna [SBS - MVP]" wrote:
>
>> Do you have Antivirus running on your exchange server?? Sounds like
>> you've
>> got a worm or a bot.
>>
>> -- >> Cris Hanna [SBS - MVP]
>> Co-Author, Windows Small Business Server 2008 Unleashed
>> http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
>>
>> ------------------------------------
>> MVPs do not work for Microsoft
>> Please do not submit questions directly to me.
>>
>> "Joe#2" <Joe2@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:A8E12643-7649-41F0-8830-1CBDF95B616E@xxxxxxxxxxxxxxxx
>> >I was just got a low disk space warning message on my Exchange Disk.
>> >
>> > I found that exchange is generating 45 logs a minute at 5 mb each or
>> > 200
>> > megabytes a minute of just logs!!! I had to scramble to delete some
>> > before
>> > it
>> > all crashed.
>> >
>> > The loggs are being created in the \ExchsrvrMBDATA folder. They have >> > a
>> > name
>> > of E000nnnn.log (all hex number and sequental)
>> >
>> > What is going on ?
>>
>>



.

Relevant Pages

  • Re: exchange looging gone mad - help needed
    ... I'd still be checking the workstations too. ... Windows Small Business Server 2008 Unleashed ... > MVPs do not work for Microsoft ... >> I have the package for SBS, It is exchange aware, but I noticed the ...
    (microsoft.public.windows.server.sbs)
  • Re: Migrating SBS2003 to Exchange 2003/2007
    ... It's using to Exchange 2007 standard edition. ... Cris Hanna [SBS - MVP] ... Windows Small Business Server 2008 Unleashed ... > MVPs do not work for Microsoft ...
    (microsoft.public.windows.server.sbs)
  • Re: 2003 SBS without Exchange?
    ... If you're going to set up Exchange, it could be copied to a Calendar in a public folder, but not to A calendar on CompanyWeb ... Windows Small Business Server 2008 Unleashed ... MVPs do not work for Microsoft ...
    (microsoft.public.windows.server.sbs)
  • RE: Upgrading from sbs 2000 to sbs 2003
    ... I understand that the Exchange Component can not be ... Technically speaking, before Upgrading Small Business Server 2000, you ... Although your Internet connection settings are ...
    (microsoft.public.windows.server.sbs)
  • Re: Microsoft burning party
    ... > drawing conclusions by correlating features to purchases may be a flawed ... > are trying to use Entourage in a corporate environment and the MacBU's ... Good will and another notch in Exchange Server's bedpost, perhaps, but no ... > MS MVPs don't have a "job". ...
    (microsoft.public.mac.office.entourage)