Solved

Exchange 2003 Groupshield has stripped all the message body from existing emails

Posted on 2008-06-13
2
487 Views
Last Modified: 2013-11-22
OK, I'm in deep doo-doo
Had someone phone me up yesterday regarding a problem with hard drive space. A quick look realised they hadn't done a backup for years and the log files were at 6 GB (the database files only totalled about 1Gb). I said about how backing up flushes the log files and it should really be done nightly..blah blah blah, but the quickest thing to do would be to move the location of the log files (they had a drive with about 50GB of space). I open System Manager, drilled down to the server, opened up the properties, changed the location for the transaction log files and watched everything work as it should do, log files were moved, stores re-mounted and hey presto they have another 6GB of space available.
Later yesterday afternoon I get a call from a user who says when they open an email there's nothingin it, the message body has been stripped out. I ask them to check using OWA to confirm it's not an Outlook problem which it isn't. After about an hour of investigation it turns out that McAfee Groupshield seems to be the culprit, in the detected items I can see all the emails and it has "removed" them as they can't be scanned, in 5 hours it has removed over 10,000 items.
McAfee = no help, I can see the items and choose to forward them (as it can only be done individually, it might take a while).
Is there a way of reversing the process through Groupshield or forwarding all of them at the same time?, Will re-running the log files into the existing database be an option, not sure if they'll do anything as the database is still full of emails, just empty ones. Am I better off trying to create a new database and run the eseutil /cc on the new database?
Any help greatly appreciated.
0
Comment
Question by:Fergusmac
2 Comments
 
LVL 8

Expert Comment

by:Share-IT
Comment Utility
firstly - adjust the scanning options in Groupshield that that it doesn't remove on scan failure.

Secondly - no, replaying the log files etc. won't work.

thirdly - i guess you never did get that backup?

fourthly - what version of groupshield?
0
 

Accepted Solution

by:
Fergusmac earned 0 total points
Comment Utility
Hi Share-IT
firstly - I dd the Groupshield adjustment as soon as i realised what was happening.
secondly - Doh
thirdly - No backup.
fourthly - 6.0
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now