Virus/Phantom message stuck in Exchange Mailbox Root Store

12-19-08

I have been pulling my hair out trying to resolve a backup issue with a client’s backup on Veritas BackupExec 9.1. What happened was that backup was failing on 1 message because the antivirus couldn’t scan it, and locked the backup from reading it.

BackupExecs error was:
0xa0008488 - Access is denied
Backup - \\SERVER\Microsoft Exchange Mailboxes
Access denied to file FirstName LastName [user]FW: Your Tracking # 835503826372.

Now this particular message was found in the Inbox, I then deleted it and emptied the Deleted Items.
Backup still failed! But this time the message was it the root_store IE. The top level of the Mailbox and I couldn’t see it with OWA Client etc. I had to pass it on to another engineer who started looking at it, who then gave me the right tact to search.

I deleted the message by using a Microsoft tool called MDB Viewer, this is a low level tool for Mailboxes,  It’s on the exchange CD-ROM CD-ROM_Drive\Server\Support\Utils\I386\Mdbvu32.exe

I then basically (Remember I don’t do Step by Steps, I do summarys) Choose the Server, Choose the Mailbox (username), then clicked  OpenMessageStore on the MDB menu,
Click Open Root Folder on the MDB menu
From there I saw the message in Messages in Folder Column, I selected it, Choose the operation IpFld->DeleteMessage() and called the function!

Woo Hoo Backup now works!

Merry Christmas to me and you! :P

This entry was posted on Friday, December 19th, 2008 at 4:56 pm and is filed under exchange, mail, operating-systems, services, windows. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply