You are couple revisions behind on your store.exe. Run windows update to get the latest Exchange security patch released last month. See if this helps. Your store.exe store.exe, version 6.5.7638.2 DST 2007 Store.exe Store.exe 6.5.7651.61 latest 6.5.7652.24 http://www.microsoft.com/technet/security/bulletin/ms07-026.mspx ________________________________ From: exchangelist-bounce@xxxxxxxxxxxxx on behalf of Dave stevens Sent: Fri 6/29/2007 11:39 AM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] Re: Exchange 2003 Sp2 Error 9175 and 1005 Now this, The IS just crash again. find error below. Not quite sure what to make of this. Any suggestions please Event Type: Error Event Source: MSExchangeIS Event Category: General Event ID: 9659 Date: 29/06/2007 Time: 15:09:00 User: N/A Computer: EXCH03 Description: The Microsoft Exchange Information Store encountered an unexpected exception 0xC0000005 at address 7C57B5D8 while processing a request for user besadmin. For more information, click http://www.microsoft.com/contentredirect.asp. Data: 0000: 45 00 63 00 44 00 6f 00 E.c.D.o. 0008: 52 00 70 00 63 00 45 00 R.p.c.E. 0010: 78 00 74 00 00 00 x.t... Event Type: Error Event Source: Microsoft Exchange Server Event Category: None Event ID: 1000 Date: 29/06/2007 Time: 15:09:06 User: N/A Computer: EXCH03 Description: Faulting application store.exe, version 6.5.7638.2, stamp 434353c1, faulting module kernel32.dll, version 5.0.2195.7099, stamp 4498ec9e, debug? 0, fault address 0x0000b5d8. Data: 0000: 41 00 70 00 70 00 6c 00 A.p.p.l. 0008: 69 00 63 00 61 00 74 00 i.c.a.t. 0010: 69 00 6f 00 6e 00 20 00 i.o.n. . 0018: 46 00 61 00 69 00 6c 00 F.a.i.l. 0020: 75 00 72 00 65 00 20 00 u.r.e. . 0028: 20 00 73 00 74 00 6f 00 .s.t.o. 0030: 72 00 65 00 2e 00 65 00 r.e...e. 0038: 78 00 65 00 20 00 36 00 x.e. .6. 0040: 2e 00 35 00 2e 00 37 00 ..5...7. 0048: 36 00 33 00 38 00 2e 00 6.3.8... 0050: 32 00 20 00 34 00 33 00 2. .4.3. 0058: 34 00 33 00 35 00 33 00 4.3.5.3. 0060: 63 00 31 00 20 00 69 00 c.1. .i. 0068: 6e 00 20 00 6b 00 65 00 n. .k.e. 0070: 72 00 6e 00 65 00 6c 00 r.n.e.l. 0078: 33 00 32 00 2e 00 64 00 3.2...d. 0080: 6c 00 6c 00 20 00 35 00 l.l. .5. 0088: 2e 00 30 00 2e 00 32 00 ..0...2. 0090: 31 00 39 00 35 00 2e 00 1.9.5... 0098: 37 00 30 00 39 00 39 00 7.0.9.9. 00a0: 20 00 34 00 34 00 39 00 .4.4.9. 00a8: 38 00 65 00 63 00 39 00 8.e.c.9. 00b0: 65 00 20 00 66 00 44 00 e. .f.D. 00b8: 65 00 62 00 75 00 67 00 e.b.u.g. 00c0: 20 00 30 00 20 00 61 00 .0. .a. 00c8: 74 00 20 00 6f 00 66 00 t. .o.f. 00d0: 66 00 73 00 65 00 74 00 f.s.e.t. 00d8: 20 00 30 00 30 00 30 00 .0.0.0. 00e0: 30 00 62 00 35 00 64 00 0.b.5.d. 00e8: 38 00 0d 00 0a 00 8..... Dave stevens <london31uk@xxxxxxxxx> wrote: I do get a 7031 event. see below. I am probably going to have to run thru some of your suggestions as well Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7031 Date: 28/06/2007 Time: 04:57:59 User: N/A Computer: Exch03 Description: The Microsoft Exchange Information Store service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. James Chong <jchong@xxxxxxxxxxxx> wrote: Is the service crashing or stopping gracefully? If crashing, there should be some debug info, your events logs system should give you some indication if it's crashing or stopping gracefully events 7031. For grins run Ntbackup tonight instead of Symantec. Anything in the Symantec logs? Also set diagnostic logging for dsaccess, let's see if your Exchange box is having issues communicating with your DCs. You also mentioned that when this happens IS fails to recover. Start run drwtsn32 -i Start run drwtsn32 Check dump symbol table, Dump all threads, Append to existing log file, Create crash dump. Not where the dump file is created. When you start the IS service and crashes check to see if the dump file is generated. James Chong (MVP) MCSE | M+, S+, MCTS, Security+ msexchangetips.blogspot.com ________________________________ From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Dave stevens Sent: Wednesday, June 27, 2007 10:05 AM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] Re: Exchange 2003 Sp2 Error 9175 and 1005 Well most of the time when this error is logged is during the full backup. So we set service recovery to restart of failuer twice. Not quite sure if that is working as we come in the morning to meet the service down. We are currently using symantec backup exec 10.0d. Nothing else in the logs besides this. Ta Dave James Chong <jchong@xxxxxxxxxxxx> wrote: Your IS stops during backups? Can you describe fails to recover? You mean during backup process or it is currently down? What backup software are you using? Anything else in the logs besides that? James Chong Sr. Systems Engineer InPhonic, Inc. 10805 Parkridge Blvd. Reston, VA 20191 O (703) 657-4612 C (703) 863-1483 ________________________________ From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Dave stevens Sent: Tuesday, June 26, 2007 11:16 AM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] Exchange 2003 Sp2 Error 9175 and 1005 Hi Guys, We been having this error for so,etime now, and it is driving me crazy. Not quite sure what it is, but we seem to get this during our full backups, The problem is that the IS falls over and fails to recover. I am now thinking of going down the route of a total exchange rebuild cos this is getting pretty critical, and I do not seem to be getting thr right pointers to the problem. MS resolution is very vague and unhelpful. Maybe someone can advice on the error below. Event Type: Error Event Source: MSExchangeSA Event Category: MAPI Session Event ID: 9175 Date: 26/06/2007 Time: 07:45:32 User: N/A Computer: EXCH003 Description: The MAPI call 'OpenMsgStore' failed with the following error: The Microsoft Exchange Server computer is not available. Either there are network problems or the Microsoft Exchange Server computer is down for maintenance. The MAPI provider failed. Microsoft Exchange Server Information Store ID no: 8004011d-0526-00000000 For more information, click http://www.microsoft.com/contentredirect.asp. Thanks Dave ________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" <http://autos.yahoo.com/green_center/;_ylc=X3oDMTE4MGw4Z2hlBF9TAzk3MTA3MDc2BHNlYwNtYWlsdGFncwRzbGsDZ3JlZW5jZW50ZXI-> at Yahoo! Autos' Green Center. ________________________________ Shape Yahoo! in your own image. Join our Network Research Panel today! <http://us.rd.yahoo.com/evt=48517/*http:/surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7> ________________________________ Pinpoint customers <http://us.rd.yahoo.com/evt=48250/*http://searchmarketing.yahoo.com/arp/sponsoredsearch_v9.php?o=US2226&cmp=Yahoo&ctv=AprNI&s=Y&s2=EM&b=50> who are looking for what you sell. ________________________________ Need a vacation? Get great deals to amazing places <http://us.rd.yahoo.com/evt=48256/*http://travel.yahoo.com/;_ylc=X3oDMTFhN2hucjlpBF9TAzk3NDA3NTg5BHBvcwM1BHNlYwNncm91cHMEc2xrA2VtYWlsLW5jbQ--> on Yahoo! Travel.