Hi Greg, Well, I found the link: HOW TO: Remove a Virus-Infected Message from Mailboxes by Using the ExMerge.exe Tool http://support.microsoft.com/default.aspx?scid=kb;en-us;328202 And followed the procedure. Exmerge reported non-fatal errors and the log displays: === [09:18:49] Copying data from mailbox 'adrian bolzan' ('ABOLZAN') on Server 'ISIS' to file 'C:\TEMP\ABOLZAN.PST'. [09:18:56] Error copying messages from folder '\Inbox' (MAPI_W_PARTIAL_COMPLETION) [09:18:56] Trying to copy messages in folder '\Inbox', individually. To avoid duplicates in the target store, messages will be merged and not copied into the target store. [09:18:56] Error copying message with subject 'Virus Scanner Test #8' in folder '\Inbox'. (MAPI_W_PARTIAL_COMPLETION) [09:18:56] Errors encountered copying the messages in folder '\Inbox'. One or more messages may not have been copied. [09:19:08] Error copying messages from folder '\Sync Issues\Server Failures' (MAPI_W_PARTIAL_COMPLETION) [09:19:08] Trying to copy messages in folder '\Sync Issues\Server Failures', individually. To avoid duplicates in the target store, messages will be merged and not copied into the target store. [09:19:08] Error copying message with subject 'Virus Scanner Test #8' in folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION) [09:19:08] Error copying message with subject 'Virus Scanner Test #8' in folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION) [09:19:08] Error copying message with subject 'Virus Scanner Test #8' in folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION) [09:19:08] Error copying message with subject 'Virus Scanner Test #8' in folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION) [09:19:08] Errors encountered copying the messages in folder '\Sync Issues\Server Failures'. One or more messages may not have been copied. [09:19:08] Number of messages processed for mailbox 'adrian bolzan': 10 [09:19:08] Number of folders processed for mailbox 'adrian bolzan': 176 [09:19:08] Non fatal errors encountered. Copy process completed for mailbox 'adrian bolzan' ('ABOLZAN'). [09:19:08] Number of items copied from the source store for all mailboxes processed: 10 [09:19:08] Total number of folders processed in the source store: 176 [09:19:08] 1 mailboxes successfully processed. 0 mailboxes were not successfully processed. 10 non-fatal errors encountered. [09:19:08] Process completion time: 0:00:00:19 === The backup log indicates that there were ten entries in my Mailbox resulting in backup errors. The Exmerge process lists the correct number of messgaes processed (10), a number of copy failures (I count seven), yet reports that ten items were copied from the store. One point I note is that the corrupt files are located in "Finder/Unread Mail", "Top of Information Store/Inbox" and "Top of Information Store/Sync Issues/Server Failures" (from the backup log). When I open the PST file I do not see any messages in the Inbox or Sync Issues. The same errors are encountered when I run Exmerge again, which suggests that the process has not been successful. I have subsequently performed another backup and the corrupt files still appear in the backup/verify. Damn Trend... Thanks again, Adrian > -----Original Message----- > From: Lara, Greg [mailto:GLara@xxxxxxx] > Sent: Thursday, 23 December 2004 2:21 AM > To: [ExchangeList] > Subject: [exchangelist] RE: FW: Corrupt file in Information store > > http://www.MSExchange.org/ > > Adrian, > You can use Exmerge to pull only that message from your > mailbox since you know the particulars about it (subject, > date, etc.). That's a good technique to know. > > Greg Lara > > -------------------------------------------------------------- > -------------- > --------------------------- > This e-mail message may contain privileged, confidential > and/or proprietary information intended only for the > person(s) named. If you are not the intended recipient, > please destroy this message, and any attachments, and notify > the sender by return e-mail. If you are not the intended > recipient(s), or the employee or agent responsible for > delivering the message to the intended recipient(s), you are > hereby notified that any dissemination, disclosure or copying > of this communication is strictly prohibited. > -------------------------------------------------------------- > -------------- > --------------------------- > > > -----Original Message----- > From: Adrian Bolzan [mailto:adrianb@xxxxxxxxxxxxxxxxxxxxxxx] > Sent: Tuesday, December 21, 2004 9:53 PM > To: [ExchangeList] > Subject: [exchangelist] RE: FW: Corrupt file in Information store > > http://www.MSExchange.org/ > > As an addendum, I thought to: > - export my email,contacts, etc. to PST > - delete my mailbox > - create a new mailbox > - import from the PST > > But that seems inelegant, and does not allow me to learn any > new techniques, so... > > Cheers, > Adrian > > > > -----Original Message----- > > From: Adrian Bolzan [mailto:adrianb@xxxxxxxxxxxxxxxxxxxxxxx] > > Sent: Wednesday, 22 December 2004 8:42 AM > > To: [ExchangeList] > > Subject: [exchangelist] RE: FW: Corrupt file in Information store > > > > http://www.MSExchange.org/ > > > > > > > > > -----Original Message----- > > > From: Lara, Greg [mailto:GLara@xxxxxxx] > > > Sent: Wednesday, 22 December 2004 2:22 AM > > > To: [ExchangeList] > > > Subject: [exchangelist] RE: FW: Corrupt file in Information store > > > > > > http://www.MSExchange.org/ > > > > > > I guess that says it all. > > > > > > Greg Lara > > > > > > > > > > > :) > > Sorry. Corruption spreads through the system. > > > > Try again... > > > > I performed the tests available on the TestVirus.Org webpsge > > (http://www.testvirus.org/), in order to test my installation of > > TrendMicro antivirus products- InterScan Messaging Security Suite > > (IMSS) and Scanmail for Exchange. > > > > Note: TrendMicro did not detect the Eicar virus in four of > the tests, > > although I am working with Trend to rectify this. > > > > Message Path: > > Internet --> Trend IMSS --> Exchange with Scanmail --> Outlook > > > > Anyway, one of the tests (Test #8, Eicar virus sent using BinHex > > encoding within a MIME segment) never appeared in my Inbox, > although > > it did reach > > Exchange. When performing my backups with Veritas > BackupExec 9.1 for > > Windows I see the following errors in the log: > > > > ------- > > WARNING: "Virus Scanner Test #8" is a corrupt file. > > This file cannot verify. > > > > WARNING: "\\ISIS\Microsoft Exchange Mailboxes\adrian bolzan > > [abolzan]&Finder&Unread Mail&<some gobbledegook>Virus > Scanner Test #8" > > is a corrupt file. > > This file cannot verify. > > Database or database element is corrupt > > > > WARNING: "\\ISIS\Microsoft Exchange Mailboxes\adrian bolzan > > [abolzan]&Top of Information Store&Inbox&<some > > gobbledegook>Virus Scanner Test #8" is a corrupt file. > > This file cannot verify. > > Database or database element is corrupt > > > > ------- > > > > How would I remove this message from the Mailbox? I > thought there may > > be a way to do this using System Manager but I cannot find it. > > > > Any help appreciated. > > > > > > Adrian > > > > > > ------------------------------------------------------ > > List Archives: > > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Other Internet Software Marketing Sites: > > World of Windows Networking: > http://www.windowsnetworking.com Leading > > Network Software Directory: http://www.serverfiles.com > > No.1 ISA Server Resource Site: http://www.isaserver.org Windows > > Security Resource Site: > > http://www.windowsecurity.com/ Network Security Library: > > http://www.secinf.net/ Windows 2000/NT Fax Solutions: > > http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this MSEXchange.org Discussion List > > as: adrianb@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit > > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > > Report abuse to listadmin@xxxxxxxxxxxxxx > > > ------------------------------------------------------ > List Archives: > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: > http://www.windowsecurity.com/ Network Security Library: > http://www.secinf.net/ Windows 2000/NT Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this MSEXchange.org > Discussion List as: > glara@xxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Report abuse to listadmin@xxxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: > http://www.windowsecurity.com/ Network Security Library: > http://www.secinf.net/ Windows 2000/NT Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this MSEXchange.org > Discussion List as: adrianb@xxxxxxxxxxxxxxxxxxxxxxx To > unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Report abuse to listadmin@xxxxxxxxxxxxxx >