General discussion

Locked

Exchange, Novarg and EDB logs

By CRISTIANR ·
We've been having some problems with our EDB lately. It keeps constantly dismounting, and when we try to remount it, it gives errors. Our log files seem to keep getting corrupted and we have to erase them, repair the database, defrag it and then remount it. We have been getting a lot of "novarg' and "mydoom" virus attempts but GFI has been deleting them alot. The attacks are ridiculous (300 +) within an hour. Does the Novarg corrupt EDB logs eventhough the virus does not get it?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Curacao_Dejavu In reply to Exchange, Novarg and EDB ...

Among many posts (among others MS) I found out that they recommend to exclude the exchange folders from being scanned by the antivirus.
The reason is that the log file can become infected and would be delete by the AV (if you had set the option to delete automatically) Therefor the database scan not synchronize the properly any more because of a missing log file (thats the error message in the eventviewer if you look that up at the MS KB).


Leopold

Collapse -

by Rvickers78 In reply to Exchange, Novarg and EDB ...

Just like Answer 1, my server log files kept getting infected with the virus and then deleted by the anti-virus software cause it couldn't be cleaned. Go into the software and exclude the fold that holds the log files, I believe its mdbdata. After I did this, I haven't had any problem with the stores dismounting themselves. I had to use the eseutil to recover, repair, and defrag the stores and I can still see they are corrupt.

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums