RE: FW: Corrupt file in Information store

  • From: "AdrianB" <adrianb@xxxxxxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 23 Dec 2004 10:02:34 +1100

Hi Greg,

Well, I found the link:
HOW TO: Remove a Virus-Infected Message from Mailboxes by Using the
ExMerge.exe Tool
http://support.microsoft.com/default.aspx?scid=kb;en-us;328202

And followed the procedure.

Exmerge reported non-fatal errors and the log displays:

===
[09:18:49] Copying data from mailbox 'adrian bolzan' ('ABOLZAN') on Server
'ISIS' to file 'C:\TEMP\ABOLZAN.PST'.
[09:18:56] Error copying messages from folder '\Inbox'
(MAPI_W_PARTIAL_COMPLETION)
[09:18:56] Trying to copy messages in folder '\Inbox', individually. To
avoid duplicates in the target store, messages will be merged and not copied
into the target store.
[09:18:56] Error copying message with subject 'Virus Scanner Test #8' in
folder '\Inbox'. (MAPI_W_PARTIAL_COMPLETION)
[09:18:56] Errors encountered copying the messages in folder '\Inbox'. One
or  more messages may not have been copied.
[09:19:08] Error copying messages from folder '\Sync Issues\Server Failures'
(MAPI_W_PARTIAL_COMPLETION)
[09:19:08] Trying to copy messages in folder '\Sync Issues\Server Failures',
individually. To avoid duplicates in the target store, messages will be
merged and not copied into the target store.
[09:19:08] Error copying message with subject 'Virus Scanner Test #8' in
folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION)
[09:19:08] Error copying message with subject 'Virus Scanner Test #8' in
folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION)
[09:19:08] Error copying message with subject 'Virus Scanner Test #8' in
folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION)
[09:19:08] Error copying message with subject 'Virus Scanner Test #8' in
folder '\Sync Issues\Server Failures'. (MAPI_W_PARTIAL_COMPLETION)
[09:19:08] Errors encountered copying the messages in folder '\Sync
Issues\Server Failures'. One or  more messages may not have been copied.
[09:19:08] Number of messages processed for mailbox 'adrian bolzan': 10
[09:19:08] Number of folders processed for mailbox 'adrian bolzan': 176
[09:19:08] Non fatal errors encountered. Copy process completed for mailbox
'adrian bolzan' ('ABOLZAN').
[09:19:08] Number of items copied from the source store for all mailboxes
processed: 10
[09:19:08] Total number of folders processed in the source store: 176
[09:19:08] 1 mailboxes successfully processed. 0 mailboxes were not
successfully processed. 10 non-fatal errors encountered.
[09:19:08] Process completion time:  0:00:00:19 

===

The backup log indicates that there were ten entries in my Mailbox resulting
in backup errors.
The Exmerge process lists the correct number of messgaes processed (10), a
number of copy failures (I count seven), yet reports that ten items were
copied from the store.

One point I note is that the corrupt files are located in "Finder/Unread
Mail", "Top of Information Store/Inbox" and "Top of Information Store/Sync
Issues/Server Failures" (from the backup log).  When I open the PST file I
do not see any messages in the Inbox or Sync Issues.

The same errors are encountered when I run Exmerge again, which suggests
that the process has not been successful.  
I have subsequently performed another backup and the corrupt files still
appear in the backup/verify.

Damn Trend...

Thanks again,

Adrian



> -----Original Message-----
> From: Lara, Greg [mailto:GLara@xxxxxxx] 
> Sent: Thursday, 23 December 2004 2:21 AM
> To: [ExchangeList]
> Subject: [exchangelist] RE: FW: Corrupt file in Information store
> 
> http://www.MSExchange.org/
> 
> Adrian,
> You can use Exmerge to pull only that message from your 
> mailbox since you know the particulars about it (subject, 
> date, etc.). That's a good technique to know.
> 
> Greg Lara
> 
> --------------------------------------------------------------
> --------------
> ---------------------------
> This e-mail message may contain privileged, confidential 
> and/or proprietary information intended only for the 
> person(s) named. If you are not the intended recipient, 
> please destroy this message, and any attachments, and notify 
> the sender by return e-mail. If you are not the intended 
> recipient(s), or the employee or agent responsible for 
> delivering the message to the intended recipient(s), you are 
> hereby notified that any dissemination, disclosure or copying 
> of this communication is strictly prohibited. 
> --------------------------------------------------------------
> --------------
> ---------------------------
> 
> 
> -----Original Message-----
> From: Adrian Bolzan [mailto:adrianb@xxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Tuesday, December 21, 2004 9:53 PM
> To: [ExchangeList]
> Subject: [exchangelist] RE: FW: Corrupt file in Information store
> 
> http://www.MSExchange.org/
> 
> As an addendum, I thought to:
> - export my email,contacts, etc. to PST
> - delete my mailbox
> - create a new mailbox
> - import from the PST
> 
> But that seems inelegant, and does not allow me to learn any 
> new techniques, so...
> 
> Cheers,
> Adrian
> 
> 
> > -----Original Message-----
> > From: Adrian Bolzan [mailto:adrianb@xxxxxxxxxxxxxxxxxxxxxxx]
> > Sent: Wednesday, 22 December 2004 8:42 AM
> > To: [ExchangeList]
> > Subject: [exchangelist] RE: FW: Corrupt file in Information store
> > 
> > http://www.MSExchange.org/
> > 
> >  
> > 
> > > -----Original Message-----
> > > From: Lara, Greg [mailto:GLara@xxxxxxx]
> > > Sent: Wednesday, 22 December 2004 2:22 AM
> > > To: [ExchangeList]
> > > Subject: [exchangelist] RE: FW: Corrupt file in Information store
> > > 
> > > http://www.MSExchange.org/
> > > 
> > > I guess that says it all. 
> > > 
> > > Greg Lara
> > > 
> > 
> > 
> > 
> > :)
> > Sorry. Corruption spreads through the system. 
> > 
> > Try again...
> > 
> > I  performed the tests available on the TestVirus.Org webpsge 
> > (http://www.testvirus.org/), in order to test my installation of 
> > TrendMicro antivirus products- InterScan Messaging Security Suite 
> > (IMSS) and Scanmail for Exchange.
> > 
> > Note: TrendMicro did not detect the Eicar virus in four of 
> the tests, 
> > although I am working with Trend to rectify this.
> > 
> > Message Path:
> > Internet --> Trend IMSS --> Exchange with Scanmail --> Outlook
> > 
> > Anyway, one of the tests (Test #8, Eicar virus sent using BinHex 
> > encoding within a MIME segment) never appeared in my Inbox, 
> although 
> > it did reach
> > Exchange.   When performing my backups with Veritas 
> BackupExec 9.1 for
> > Windows I see the following errors in the log:
> > 
> > -------
> > WARNING: "Virus Scanner Test #8" is a corrupt file.
> > This file cannot verify.
> > 
> > WARNING: "\\ISIS\Microsoft Exchange Mailboxes\adrian bolzan 
> > [abolzan]&Finder&Unread Mail&<some gobbledegook>Virus 
> Scanner Test #8" 
> > is a corrupt file.
> > This file cannot verify.
> > Database or database element is corrupt
> > 
> > WARNING: "\\ISIS\Microsoft Exchange Mailboxes\adrian bolzan 
> > [abolzan]&Top of Information Store&Inbox&<some
> > gobbledegook>Virus Scanner Test #8" is a corrupt file.
> > This file cannot verify.
> > Database or database element is corrupt
> > 
> > -------
> > 
> > How would I remove this message from the Mailbox?  I 
> thought there may 
> > be a way to do this using System Manager but I cannot find it.
> > 
> > Any help appreciated.
> > 
> > 
> > Adrian
> > 
> > 
> > ------------------------------------------------------
> > List Archives: 
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: 
> http://www.windowsnetworking.com Leading 
> > Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org Windows 
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org Discussion List 
> > as: adrianb@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
> 
> 
> ------------------------------------------------------
> List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com 
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org 
> Windows Security Resource Site: 
> http://www.windowsecurity.com/ Network Security Library: 
> http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org 
> Discussion List as:
> glara@xxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com 
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org 
> Windows Security Resource Site: 
> http://www.windowsecurity.com/ Network Security Library: 
> http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org 
> Discussion List as: adrianb@xxxxxxxxxxxxxxxxxxxxxxx To 
> unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
> 



Other related posts: