do you have more errors/warnings beside 7031. It is only an info that a service stopped. Zoran > It started only automatically. Earlier everything was fine but since > last 2 months this error is coming. Installing post sp3 pack has reduced > the frequency of error. Earlier the information store service used to > get terminated every 30-40 minutes. Now its happening thrice a day. > > I have AV mcafee installed, but I don't think AV is a problem. It was > installed when exchange was installed and everything was fine untill > last 2 month=20 > > Best Regards > > =20 > > Shoeb=20 > > Senior Network Engg. > > Edi Technology, LLC > > office (971) 4-2865010 > > shoeb@xxxxxxxxxxxxxxxxxx > > > -----Original Message----- > From: Zoran [mailto:zmarjanovic@xxxxxxxx]=20 > Sent: Wednesday, February 04, 2004 4:52 PM > To: [ExchangeList] > Subject: [exchangelist] Re: Exchange 2000 Information store error > > http://www.MSExchange.org/ > > Hi Shoeb, > > did this start after you installed post sp3 pack? Try to uninstall it > and > monitor the system for couple of days. If it repeat then reinstall sp3. > If > you use another software on exchange (AV filter/client or else) it could > be incompatible with some fixes released after your third party software > was released. Also you could try to find the latest upgrade for the > software in question and keep using post sp3 pack. > > Zoran > > > Hi, > >=20 > > I have a single domain with exchange 2000 installed and updated with > > post sp3 pack. I am getting the following errors which make exchange > to > > stop momentarily and I could not find any solutions for this. I > checked > > on Microsoft site and there was only one solutions for this error is > to > > update the service pack 3 with post update sp3 pack, which I did, the > > result only to reduce the frequency of the following error > >=20 > > Event ID : 7031 > >=20 > > Description : > >=20 > > The microsoft Exchange Information store service terminated > > unexpectedly. It has done this 1 times. The following corrective > action > > will be taken in 60000 milliseconds. Restart the service. > >=20 > >=20 > > This error is repeating atleast thrice a day. > >=20 > > Best Regards > >=20 > > Shoeb=3D20 > > Senior Network Engg. > > Edi Technology, LLC > > office (971) 4-2865010 > > shoeb@xxxxxxxxxxxxxxxxxx > >=20 > >=20 > > -----Original Message----- > > From: Zoran [mailto:zmarjanovic@xxxxxxxx]=3D20 > > Sent: Wednesday, February 04, 2004 1:11 PM > > To: [ExchangeList] > > Subject: [exchangelist] Re: Exchange 2003 - Event ID 3030 Source > > MSExchangeTransport[Scanned] > >=20 > > http://www.MSExchange.org/ > >=20 > > Hi Simon, > >=20 > > check KB 256321, it says: X.1.8 Bad sender's system address (status > code > > of 5.1.8 was generated for > > recipient rfc822;jack@xxxxxxxxxx). > >=20 > > It is very possible you have an intruder. Chech your net with > antitrojan > > software. Also check your DNSs and logs of SMTP. > >=20 > > Zoran > >=20 > > > =3D3D20 > > > Raj, > > >=3D20 > > > All ready checked for the virus and all machines are clear. Plus all > > > machines are swept at night by a scheduled task and the results are > > then > > > sent to myself. > > >=3D20 > > > Regards > > > Simon Whale > > > -----Original Message----- > > > From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx]=3D3D20 > > > Sent: 03 February 2004 16:52 > > > To: [ExchangeList] > > > Subject: [exchangelist] Re: Exchange 2003 - Event ID 3030 Source > > > MSExchangeTransport[Scanned] > > >=3D20 > > > http://www.MSExchange.org/ > > >=3D20 > > > It sounds like you may have the MyDoom virus going around. My Doom > > tries > > > to spoof sender IDs and recipient IDs. It may not be that the actual > > > virus originated from your user, but might have spoofed elsewhere. > In > > > any case run a thorough check of your user PC, and the Exchange > > server. > > >=3D20 > > >=3D20 > > > Regards, > > >=3D20 > > > Raj > > >=3D20 > > > -----Original Message----- > > > From: simon whale [mailto:swhale@xxxxxxxxxxxxxx] > > > Sent: Tuesday, February 03, 2004 11:41 AM > > > To: [ExchangeList] > > > Subject: [exchangelist] Re: Exchange 2003 - Event ID 3030 Source > > > MSExchangeTransport[Scanned] > > >=3D20 > > >=3D20 > > > http://www.MSExchange.org/ > > >=3D20 > > > Zoran, > > >=3D20 > > > Thanks for your time. There is no logging switched on in the smtp > > > connector. I have just received another. > > >=3D20 > > > Event Type: Error > > > Event Source: MSExchangeTransport > > > Event Category: NDR=3D3D20 > > > Event ID: 3030 > > > Date: 03/02/2004 > > > Time: 16:35:25 > > > User: N/A > > > Computer: JUPITER > > > Description: > > > A non-delivery report with a status code of 5.1.8 was generated for > > > recipient rfc822;jack@xxxxxxxxxx (Message-ID > > > <16a201c3ea73$b8b9d170$02010a0a@xxxxxxxxxxxx>). =3D3D20 > > >=3D20 > > > But at the same time my anti virus also reported a virus from the > same > > > person: > > >=3D20 > > > A suspicious mail was processed. > > >=3D20 > > > Event: infection=3D3D20 > > > Action: Message quarantined=3D3D20 > > > Message ID: > <200402031631.i13GVdv25012@xxxxxxxxxxxxxxxxx>=3D3D20 > > > Message subject: test=3D3D20 > > > Sender: "jack@xxxxxxxxxx" <jack@xxxxxxxxxx> > > > Recipient: "fred@xxxxxxxxxxxxxx" <fred@xxxxxxxxxxxxxx>=3D3D20 > > >=3D20 > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > = > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D > > >=3D20 > > > Attachment information: > > > Event: infection =3D3D20 > > > Action: Unable to disinfect=3D3D20 > > > Filename: data.zip=3D3D20 > > > Virus: W32/MyDoom-A=3D3D20 > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > = > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D > > >=3D20 > > > Attachment information: > > > Event: infection =3D3D20 > > > Action: Unable to disinfect=3D3D20 > > > Filename: data.zip=3D3D20 > > > Virus: W32/MyDoom-A=3D3D20 > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > > > > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D=3D3D3D=3D3D3D=3D3D3D=3D3 > D=3D > > 3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D > > =3D3D3D=3D3D > > > = > =3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D= > 3D3D > > >=3D20 > > > Can I assume that these events logged for addresses that don't > exist? > > O > > > runalbe ot contact? > > >=3D20 > > > Regards > > > Simon Whale > > > -----Original Message----- > > > From: Zoran [mailto:zmarjanovic@xxxxxxxx]=3D3D20 > > > Sent: 03 February 2004 16:52 > > > To: [ExchangeList] > > > Subject: [exchangelist] Re: Exchange 2003 - Event ID 3030 Source > > > MSExchangeTransport[Scanned] > > >=3D20 > > > http://www.MSExchange.org/ > > >=3D20 > > > Hi Simon, > > >=3D20 > > > check diagnostics logging level for MSExchangeTransport. > > >=3D20 > > > Zoran > > >=3D20 > > > > All, > > > >=3D3D20 > > > > I have just noticed the following in the event viewer, can anybody > > > > shed any light on the matter? > > > >=3D3D20 > > > > Event Type: Error > > > > Event Source: MSExchangeTransport > > > > Event Category: NDR=3D3D3D20 > > > > Event ID: 3030 > > > > Date: 03/02/2004 > > > > Time: 15:35:34 > > > > User: N/A > > > > Computer: JUPITER > > > > Description: > > > > A non-delivery report with a status code of 5.1.8 was generated > for > > > > recipient rfc822;joe@xxxxxxxxxxxxxxxxxx (Message-ID=3D3D20 > > > > <168401c3ea6b$5ad73780$02010a0a@xxxxxxxxxxxx>). =3D3D3D20 > > > >=3D3D20 > > > > Have checked on google groups, eventid.net and microsoft to no > > > success. > > > >=3D3D20 > > > > Setup as follows > > > >=3D3D20 > > > > Windows 2003 (patched upto date) > > > > Exchange 2003 (patched upto date) > > > > Sophos Anti Virus - Mail monitor (up to date) > > > >=3D3D20 > > > > Many Thanks > > > > Simon > > >=3D20 > > > ------------------------------------------------------ > > > List Archives: =3D3D > > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3Dexchangelist > > > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > > > Exchange FAQ: =3D > > http://www.msexchange.org/pages/larticle.asp?type=3D3D3DFAQ > > > ------------------------------------------------------ > > > Other Internet Software Marketing Sites: > > > Leading Network Software Directory: http://www.serverfiles.com No.1 > > ISA > > > Server Resource Site: http://www.isaserver.org Windows Security > > Resource > > > Site: http://www.windowsecurity.com/ Network Security Library: > > > http://www.secinf.net/ Windows 2000/NT Fax Solutions: > > > http://www.ntfaxfaq.com > > > ------------------------------------------------------ > > >=3D20 > > >=3D20 > > >=3D20 > > >=3D20 > > >=3D20 > > > ------------------------------------------------------ > > > List Archives: =3D3D > > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3Dexchangelist > > > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > > > Exchange FAQ: =3D > > http://www.msexchange.org/pages/larticle.asp?type=3D3D3DFAQ > > > ------------------------------------------------------ > > > Other Internet Software Marketing Sites: > > > Leading Network Software Directory: http://www.serverfiles.com No.1 > > ISA > > > Server Resource Site: http://www.isaserver.org Windows Security > > Resource > > > Site: http://www.windowsecurity.com/ Network Security Library: > > > http://www.secinf.net/ Windows 2000/NT Fax Solutions: > > > http://www.ntfaxfaq.com > > > ------------------------------------------------------ > > >=3D20 > > >=3D20 > > > ------------------------------------------------------ > > > List Archives: =3D3D > > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3Dexchangelist > > > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > > > Exchange FAQ: =3D > > http://www.msexchange.org/pages/larticle.asp?type=3D3D3DFAQ > > > ------------------------------------------------------ > > > Other Internet Software Marketing Sites: > > > Leading Network Software Directory: http://www.serverfiles.com > > > No.1 ISA Server Resource Site: http://www.isaserver.org > > > Windows Security Resource Site: http://www.windowsecurity.com/ > > > Network Security Library: http://www.secinf.net/ > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > > > ------------------------------------------------------ > >=20 > > ------------------------------------------------------ > > List Archives: =3D > > http://www.webelists.com/cgi/lyris.pl?enter=3D3Dexchangelist > > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > > Exchange FAQ: = > http://www.msexchange.org/pages/larticle.asp?type=3D3DFAQ > > ------------------------------------------------------ > > Other Internet Software Marketing Sites: > > Leading Network Software Directory: http://www.serverfiles.com > > No.1 ISA Server Resource Site: http://www.isaserver.org > > Windows Security Resource Site: http://www.windowsecurity.com/ > > Network Security Library: http://www.secinf.net/ > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > ------------------------------------------------------ > List Archives: = > http://www.webelists.com/cgi/lyris.pl?enter=3Dexchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=3DFAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------