Solved

Exchange 2003 Groupshield has stripped all the message body from existing emails

Posted on 2008-06-13
2
493 Views
Last Modified: 2013-11-22
OK, I'm in deep doo-doo
Had someone phone me up yesterday regarding a problem with hard drive space. A quick look realised they hadn't done a backup for years and the log files were at 6 GB (the database files only totalled about 1Gb). I said about how backing up flushes the log files and it should really be done nightly..blah blah blah, but the quickest thing to do would be to move the location of the log files (they had a drive with about 50GB of space). I open System Manager, drilled down to the server, opened up the properties, changed the location for the transaction log files and watched everything work as it should do, log files were moved, stores re-mounted and hey presto they have another 6GB of space available.
Later yesterday afternoon I get a call from a user who says when they open an email there's nothingin it, the message body has been stripped out. I ask them to check using OWA to confirm it's not an Outlook problem which it isn't. After about an hour of investigation it turns out that McAfee Groupshield seems to be the culprit, in the detected items I can see all the emails and it has "removed" them as they can't be scanned, in 5 hours it has removed over 10,000 items.
McAfee = no help, I can see the items and choose to forward them (as it can only be done individually, it might take a while).
Is there a way of reversing the process through Groupshield or forwarding all of them at the same time?, Will re-running the log files into the existing database be an option, not sure if they'll do anything as the database is still full of emails, just empty ones. Am I better off trying to create a new database and run the eseutil /cc on the new database?
Any help greatly appreciated.
0
Comment
Question by:Fergusmac
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 8

Expert Comment

by:Share-IT
ID: 21777161
firstly - adjust the scanning options in Groupshield that that it doesn't remove on scan failure.

Secondly - no, replaying the log files etc. won't work.

thirdly - i guess you never did get that backup?

fourthly - what version of groupshield?
0
 

Accepted Solution

by:
Fergusmac earned 0 total points
ID: 21777285
Hi Share-IT
firstly - I dd the Groupshield adjustment as soon as i realised what was happening.
secondly - Doh
thirdly - No backup.
fourthly - 6.0
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SPF record for Exchange Cloud 9 41
Exchange Mail forwarding 9 41
Creating Recovery DB in Exchange 2010 3 24
Exchange 2010 certificate warning. 5 30
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question