Dear sir , please help me Fast I had a Domain Windows server 2003 and install Exchange 2003 with it and have anti virus Saymantec Enterprise after some month's suddenly the Service Microsoft Exchange Information Store Stop every 30 mints and in some time apper this error 1053 when i start the service again apper Could not start the Microsoft exchange information store service on local computer Error 1053: the service did not respond to the start or control request in a timely fashion please reply me quick thanks Regards Ramy Fotouh mail : ramyfotouh@hotmail.com

Nothing else in the event logs? Have you disabled the anti-virus and tested? ( Is this file-level anti-virus?) Have you run ExBpa against the server? What changed when this started?

yes i uninstall the anti virus and test it but the problem still exist i want to send to you the log file( application and system when the stoped and after i run it but i want send the file log to you please send to me your mail to show you the log file and i don't have the EXbpa against can you send to me the link to download this program and how can i use it . thanks Ramy fotouh

Please post any errors from the event logs here. ExBpa: http://www.microsoft.com/downloads/details.aspx?FamilyID=dbab201f-4bee-4943-ac22-e2ddbd258df3&displaylang=en

1- The description for Event ID ( 9602 ) in Source ( MSExchangeIS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt.. 2-The description for Event ID ( 8253 ) in Source ( EXCDO ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0. 3- The description for Event ID ( 8196 ) in Source ( EXCDO ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt.. 4- The description for Event ID ( 101 ) in Source ( EXOLEDB ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt.. 6- The description for Event ID ( 906 ) in Source ( ESE BACKUP ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Information Store, 4628, Microsoft Exchange Server, Microsoft Information Store. 7- The description for Event ID ( 101 ) in Source ( ESE ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Information Store, 4628, . 8- The description for Event ID ( 103 ) in Source ( ESE ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Information Store, 4628, GAS Storage Group: , 1. 9- The description for Event ID ( 9539 ) in Source ( MSExchangeIS Mailbox Store ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: GAS Storage Group\GAS Mailbox Store. 10- The description for Event ID ( 103 ) in Source ( ESE ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Information Store, 4628, First Storage Group: , 0. 11- The description for Event ID ( 9539 ) in Source ( MSExchangeIS Public Store ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: First Storage Group\Public Folder Store (SERVER). 12- The description for Event ID ( 9539 ) in Source ( MSExchangeIS Mailbox Store ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: First Storage Group\Mailbox Store (SERVER). thees app log information happens in 7 seconds and one error log The description for Event ID ( 1182 ) in Source ( MSExchangeIS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt..

Anything from EXbpa? Cant really tell from those event logs, but are there any other 3rd party software installed? Have you applied Exch 2003 SP2 and all the latest hotfixes?

Try this: http://support.microsoft.com/kb/839174 http://social.technet.microsoft.com/forums/en-US/exchangesvrgeneral/thread/b35ef747-d1b7-4391-abf9-3e44fa74cc06 Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.

i can't get the hotfixes send to me the linkes and i still running exbpa when the exbpa finsh what report you want ? the links http://support.microsoft.com/kb/839174 http://social.technet.microsoft.com/forums/en-US/exchangesvrgeneral/thread/b35ef747-d1b7-4391-abf9-3e44fa74cc06 i can't useed it tell me wht the repot you want from exbpa? thanks

Hi Ramy, Per your description and the log, it seems you have not configured the Antivirus software on your exchange server properly. And the software has destory the exchange data. So, I want to verify, did you configure the antivirus software scan the file not inclued the exchange data, such as setupdirectory, log and database. Please delete all the registry relatd the software, and then reboot the echange server to make a test. If you have run the exbpa, you could analyze it first, and find the error information post it here. we could do more search about it. You could learn more it from below: http://technet.microsoft.com/en-us/exchange/bb288481.aspx regards! gavin