exchange 2007 edgetransport.exe application error 1000
Having an issue where it appears my message queue got corrupt. First mail stop flowing, next the queue would not load and the .que file was 6.7GB. In the event log it's throwing:
Log Name: Application
Source: Application Error
Date: 8/17/2010 11:38:53 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: corp-exchcas.Corp.Monavie.com
Description:
Faulting application edgetransport.exe, version 8.1.436.0, time stamp 0x4b9f315d, faulting module KERNEL32.dll, version 6.0.6001.18215, time stamp 0x4995354a, exception code 0xe053534f, fault offset 0x000000000002619d, process id 0x%9, application start time
0x%10.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-17T17:38:53.000Z" />
<EventRecordID>2292642</EventRecordID>
<Channel>Application</Channel>
<Computer>corp-exchcas.Corp.Monavie.com</Computer>
<Security />
</System>
<EventData>
<Data>edgetransport.exe</Data>
<Data>8.1.436.0</Data>
<Data>4b9f315d</Data>
<Data>KERNEL32.dll</Data>
<Data>6.0.6001.18215</Data>
<Data>4995354a</Data>
<Data>e053534f</Data>
<Data>000000000002619d</Data>
</EventData>
</Event>
Now, when i moved to queue to a tmp folder and restarted the transport service it regenerate the queue and things started flowing and the error went away. OK-corrupt queue...well I ran a repair on the queue and it's not showing any problems:
C:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue>eseutil /mh
mail.que
Extensible Storage Engine Utilities for Microsoft(R) Exchange Server
Version 08.01
Copyright (C) Microsoft Corporation. All Rights Reserved.
Initiating FILE DUMP mode...
Database: mail.que
File Type: Database
Format ulMagic: 0x89abcdef
Engine ulMagic: 0x89abcdef
Format ulVersion: 0x620,12
Engine ulVersion: 0x620,12
Created ulVersion: 0x620,12
DB Signature: Create time:04/26/2010 19:03:10 Rand:21410980 Computer:
cbDbPage: 8192
dbtime: 572342716 (0x221d41bc)
State: Dirty Shutdown
Log Required: 106034-106034 (0x19e32-0x19e32)
Log Committed: 0-106034 (0x0-0x19e32)
Streaming File: No
Shadowed: Yes
Last Objid: 12
Scrub Dbtime: 0 (0x0)
Scrub Date: 00/00/1900 00:00:00
Repair Count: 0
Repair Date: 00/00/1900 00:00:00
Old Repair Count: 0
Last Consistent: (0x19E32,13D0,20) 08/17/2010 13:36:49
Last Attach: (0x19E32,13D1,91) 08/17/2010 13:36:49
Last Detach: (0x0,0,0) 00/00/1900 00:00:00
Dbid: 1
Log Signature: Create time:04/26/2010 19:03:09 Rand:21400814 Computer:
OS Version: (6.0.6001 SP 1 NLS 500100.50100)
Previous Full Backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
Previous Incremental Backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
Previous Copy Backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
Previous Differential Backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
Current Full Backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
Current Shadow copy backup:
Log Gen: 0-0 (0x0-0x0)
Mark: (0x0,0,0)
Mark: 00/00/1900 00:00:00
cpgUpgrade55Format: 0
cpgUpgradeFreePages: 0
cpgUpgradeSpaceMapPages: 0
ECC Fix Success Count: none
Old ECC Fix Success Count: none
ECC Fix Error Count: none
Old ECC Fix Error Count: none
Bad Checksum Error Count: none
Old bad Checksum Error Count: none
Operation completed successfully in 0.31 seconds.
C:\Program Files\Microsoft\Exchange Server\TransportRoles\data\Queue>eseutil /p
mail.que
Extensible Storage Engine Utilities for Microsoft(R) Exchange Server
Version 08.01
Copyright (C) Microsoft Corporation. All Rights Reserved.
Initiating REPAIR mode...
Database: mail.que
Temp. Database: TEMPREPAIR10412.EDB
Checking database integrity.
The database is not up-to-date. This operation may find that
this database is corrupt because data from the log files has
yet to be placed in the database.
To ensure the database is up-to-date please use the 'Recovery' operation.
Scanning Status (% complete)
0 10 20 30 40 50 60 70 80 90 100
|----|----|----|----|----|----|----|----|----|----|
...................................................
Integrity check successful.
Note:
It is recommended that you immediately perform a full backup
of this database. If you restore a backup made before the
repair, the database will be rolled back to the state
it was in at the time of that backup.
Operation completed successfully in 7.675 seconds.
When remounted same problem.
Questions:
1) Does it indeed appear to be a corrupt queue? I cannot find any info on this event error so i'm not sure
2) Is there anyway I can recover my email files from that old queue file?
Any help would be appreciated.
August 17th, 2010 11:45pm
Addition: when I mean I ran a check on the queue file I mean I remounted to old file to the queue dir then ran a check.
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2010 11:47pm
Hi jhaaga,
Did you install anti-virus on the Exchange server? If yes,please temp disable it.
And please check whether you set the anti-virus software as followed:
File-Level Antivirus Scanning on Exchange 2007
http://technet.microsoft.com/en-us/library/bb332342(EXCHG.80).aspx
You can follow this document to restore the mails:
How to Export Messages from Queues
http://technet.microsoft.com/en-us/library/aa998625(EXCHG.80).aspxFrank Wang
August 20th, 2010 10:11am
Hi jhaaga,
Any updates on your issue?Frank Wang
Free Windows Admin Tool Kit Click here and download it now
August 24th, 2010 5:03am