Hey everyone. I've searched through Google and through the Technet forums but have been unable to find a resolution to this issue we're having. A few users are experiencing bounceback emails internally. The messages are from one internal user to another internal user so they're not leaving the organization. There's only one server and it's running Trend Micro Scan Mail. Exchange 2007 SP1 is installed. Here's the error: Please note, the domain name was changed for privacy concerns. Generating server: exchange64.domain.com JimD@domain.com #554 5.6.0 STOREDRV.Deliver; Corrupt message content ## Original message headers: Received: from exchange64.domain.com ([192.168.1.11]) byexchange64.domain.com ([192.168.1.11]) with mapi; Tue, 29 Apr2008 10:02:50 -0400Content-Type: application/octet-stream; name="winmail.dat"Content-Transfer-Encoding: binaryFrom: Josephine Carballo JCarballo@domain.comTo: Jim DiGiacomo JimD@domain.comCC: Annette Altavilla Annette@domain.com, Rocio Carranza rcarranza@domain.comDate: Tue, 29 Apr 2008 10:02:48 -0400Subject: TODAY'S KOHL'S ORDER: 4-29 EDIThread-Topic: TODAY'S KOHL'S ORDER: 4-29 EDIThread-Index: Acip++IzHraWx0acQSeVfUtgR+BdjwAA1BVAAAB1bwA=Message-ID: <FD7AA0D7F99C5E44B043E7029294D2B50298EDA0B9@exchange64.domain.com>References: <FD7AA0D7F99C5E44B043E7029294D2B50298F109DD@exchange64.domain.com>X-TM-AS-Product-Ver: SMEX-8.0.0.1181-5.500.1026-15878.004X-TM-AS-Result: No--3.233000-5.000000-31X-TM-AS-User-Approved-Sender: NoX-TM-AS-User-Blocked-Sender: NoMIME-Version: 1. Any Help is appreciated! Thanks

From the header information X-TM-AS-Product-Ver: SMEX-8.0.0.1181-5.500.1026-15878.004X-TM-AS-Result: No--3.233000-5.000000-31X-TM-AS-User-Approved-Sender: NoX-TM-AS-User-Blocked-Sender: No looks like messages are getting scanned by TrenMicro Scan Mail product. Try to disable TrendMicro Scan mail and verify mailflow again. If that works then it is TrendMicro Scan mail issue.

.

Hi, I understand that the email was bounced back among a few internal user, the error stating 5.6.0 STOREDRV.Deliver; Corrupt message content Error was received. And the Trend Micro Scan Mail was installed on the computer. Regarding this issue, firstly I would like to explain that content conversion occurs in two places, that are the Store Driver and the Content Conversion stage of Categorization. Since the issue exists in the delivery mail of internal user, the agent that was used in the process of handling by Store Driver may cause this issue. I realized that the Trend Micro Scan Mail was installed on the computer, the agent that fall within Trend Micro Scan Mail seems to be the culprit. Now please take the following steps to troubleshoot this issue. Launch Microsoft Management Shell: First run Get-TransportAgent command to check the Trand Micro scan mail agent was installed in Hub Transport server. Then run Get-TransportPipeline | ft -AutoSize command to check what event was registered by scan mail agent. Then run disable-transportagent -identity "the name of scan mail agent" command to disable the agent of Trend Micro Scan Mail. Now check this issue. If the issue persists, please try to use Managing Content Conversion Tracing tool to capture the failture. Below is the instruction for the tool. http://technet.microsoft.com/en-us/library/bb397226(EXCHG.80).aspx Thanks Allen

Download and install SP1 for ScaMail. After you have applied the ScanMail 8.0 SP1, apply the following changes in the registry: * Path: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion\ * Key: AntiSpamSkipScanning * Type: REG_SZ * Value: application/ms-tnef;application/octet-stream;text/html Restart the SMEX Master service. Worked for us.

Hi, I want to try this issue but can you tell me where i can find ScanMail 8.0 SP1 ? Thank you

Allen, I did run get-transportagent and get the following with no agent for anti virus. What is next? The problem is still happening. Identity Enabled Priority -------- ------- -------- SMSMSERoutingAgent True 1 SMSMSESMTPAgent True 2 Transport Rule Agent True 3 Journaling Agent True 4 AD RMS Prelicensing Agent False 5