What is MSExchangeTransport error 348?

Windows 2000 Server SP4
Exchange 2003 SP1
Panda Antivirus

Is this an Exchange or an Anti-Virus issue?


Event Type:      Error
Event Source:      MSExchangeTransport
Event Category:      Exchange Store Driver
Event ID:      348
Date:            07/07/2005
Time:            07:52:30
User:            N/A
Computer:      SERVER
Description:
A message could not be virus scanned - this operation will be retried later. Internet Message ID <SERVERKXLE1pJVmBchm00000487@server.ceplc.local>, Error Code 0x0.

For more information, click http://www.microsoft.com/contentredirect.asp.
PowerhousecomputingAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NiclasHCommented:
Seems that the fix was included in sp1 but something was broken so you need a new updated hotfix postsp1. Call Microsoft to get a hotfix, http://support.microsoft.com/default.aspx?scid=kb;en-us;843545, well know issue.
PowerhousecomputingAuthor Commented:
Thanks NiclasH, I spoke to MS and they sent me the hotfix.  I will apply tonight out of office hours just in case something unexpected happens!
PowerhousecomputingAuthor Commented:

The hotfix has been applied but error 348 now appears much more frequently and the information store crashed again.  Here is the newer version of 348 that is appearing in the Application Log:

----------------------------------
Event Type:      Error
Event Source:      MSExchangeTransport
Event Category:      (5)
Event ID:      348
Date:            12/07/2005
Time:            07:54:10
User:            N/A
Computer:      SERVER
Description:
The description for Event ID ( 348 ) in Source ( MSExchangeTransport ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: <SERVERjiGwYt7yiGh0500000348@server.ceplc.local>, 0x0.
----------------------------------

Would you suggest creating a new mailbox store and transferring all mailboxes to it?  Are there any guides on the net about this?  I am going to reinstall the Exchange components from CD in the meantime to see if that helps at all.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

NiclasHCommented:
First open the application log on a machine with Exchange installed so you get the proper description in the 348 event, is it the same as in the previous example? I would try with another antivirus software.
PowerhousecomputingAuthor Commented:
The error I posted above is the proper description on the server.  Oddly there is the usual link to Microsoft's website for further information on this one.

Since the 12th July I have reinstalled the Exchange components from CD and the error hasn't occured yet.......
CetusMODCommented:
PAQ'd, 500 points refunded.
CetusMOD
Community Support Moderator

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.