B”H
Based on information located in the "Mail Archive" we used the names Ray
Beckwith of California Credit Union League, and Carmila Fresco. Thanks to one or
both of these individuals who submitted their results to [EMAIL PROTECTED] we may have a solution. Both had cases back in June, 2003
logged with Trend Micro. We called Trend; they found the cases, reviewed
the history, and recommended a version 6.1 update. By 12 noon (PCT) we should have the
update installed with results we can post here. (Feeling evermore like a detective
these days…lol)
Anyone with the same issues, who wants to
follow our progress can also call Trend Micro and refer to our case ID #253223.
We have asked that the previous cases regarding the same issue attached to the names
underlined above be included. –Jeff.
-----Original Message-----
From: Graeme Carstairs
[mailto:[EMAIL PROTECTED]
Sent: Thursday, July
24, 2003 6:10 AM
To: MS-Exchange Admin Issues
Subject: RE: CodeRed virus /
ScanMail v6.0 / EventID 7031
We had this issue on several of our
customers servers. We tried setting the services to restart if stopped and
it would tend to work after 5 restart, stop cycles, then carry on running.
We downloaded and installed the IIS Webdav
patch and this resolved the issue completely.
Im sorry I dont have the Q number but it
is in the knowledgebase.
-----Original Message-----
From: Drew Keavey
[mailto:[EMAIL PROTECTED]
Sent: 24 July 2003 13:26
To: MS-Exchange Admin Issues
Subject: RE: CodeRed virus /
ScanMail v6.0 / EventID 7031
We had exactly the same issue here and also
found the Code Red explanation but no evidence of infection.
We did however also find Q304166 which
relates to IIS Metabase corruption causing the same errors. We ran
through the procedures contained in there and that solved the problem.
For about three months and then it happened again! Today I've found
Q819019 which relates to an overflow in SMTP caused by malformed
messages. This is consistent with the other symptoms we've found so we'll
be trying that later today.
-----Original Message-----
From: Frey, James
[mailto:[EMAIL PROTECTED]
Sent: 24 July 2003 12:36
To: MS-Exchange Admin Issues
Subject: RE: CodeRed virus /
ScanMail v6.0 / EventID 7031
I've had this same
exact thing happen. It was the same starting timeframe too, about 3 - 4
months ago. The strange thing for me is, I hadn't made a single change on
that server. Actually, I was at Exchange2k SP2 and Windows2K SP2, and when
it first started happening, I figured I'd go to SP3 on both and maybe that
would fix it, but to no avail. I'm now at SP3 all the way around, but it
still happens. Another strange thing, is that it doesn't seem to have any
rhyme or reason. Sometimes it could happen 20 minutes apart, and then not
happen for days or weeks. Very strange.
Another thing I
noticed about the same time, is down in the system tray of this server, there
are a bunch of icons. Now, there is one more, but it's just an open
space, like an invisible icon. If you hover over it, it brings up the
internal ip of the server. Double clicking or right clicking doesn't do
anything. I'm wondering if this is somehow related, as they seemed to
show up around the same time.
-----Original Message-----
From: Jeff Gottlieb
[mailto:[EMAIL PROTECTED]
Sent: Thursday, July 24, 2003 2:51
AM
To: MS-Exchange Admin Issues
Subject: CodeRed virus / ScanMail
v6.0 / EventID 7031
The following are notes taken from the "Mail Archive". This is exactly what is happening with us. Can anyone confirm that this is a Trend issue? We are running ScanMail v6.0. Thanks. -Jeff
|
