Store.exe 99-100% cpu usage

[Nickie Bryson]

Noticed that the cpu usage was 99-100%, server running very slow. Rebooted
now MS exchange information store service stays at 'starting' nobody can
connect to mail and 'M' is not mounted.

I tried disabling Norton AV but did not help.

Windows Server 2000
Exchange server 2000 SP3 v 6.0.6249.4

Any help appreciated.

Thanks

Nickie

 

[Andy Dicken]

"=?Utf-8?B?Tmlja2llIEJyeXNvbg==?=" <Nickie
(e-mail address removed)> wrote in

Noticed that the cpu usage was 99-100%, server running very slow.
Rebooted now MS exchange information store service stays at 'starting'
nobody can connect to mail and 'M' is not mounted.

I tried disabling Norton AV but did not help.

Windows Server 2000
Exchange server 2000 SP3 v 6.0.6249.4

Any help appreciated.

Thanks

Nickie

Have you tried stopping all the anti-virus services, and also the backup
program's services? sometimes these get in the way. You should be able to
restart them after the info store is going again.

Andy

 

[neo [mvp outlook]]

Take a peek at the event logs on the Exchange server. Have anything listed
that indicates a problem?

 

[Nickie Bryson]

I have found a virus which is W32Sober.I@mm!enc and i run the fix i d/l from
symantec. The result was no virus found.

Although i have also found W32.Netsky.P@mm!enc, just d/l the fix and am
going to run it.

1 pint in the event log was Source MSExchangeDSAccess Process MAD.exe pid
1452 all domain controller servers in use are not responding.

I also notice that all the mails are sitting in the queue in exchange.

I'll keep looking for more info.

Thanks

Nickie

 

[Nickie Bryson]

Hi

I have disable NAV and the backup services and when i try to start Microsoft
Exchange Information Store i get - Could not start the Microsoft Exchange
Information Store service on local computer. Error 1053 The serice did not
respond to the start or control request in a timely fashion.

I did read that a mail with a dodgy font in it could block the queue. The
problem is I have over 200 mails waiting now and im not sure if you can view
them or tell if one mail is dodgy.

Thanks

Nickie

 

[Nickie Bryson]

Hi

The virus (netsky P and sober I) is showing up in the .EML files in
D:\Program Files\Exchangesvr\Mailroot\vsi 1\queue. and if i clean these
files then I would hope that the Information Store service will start,
althought the worrying thing is that I have disabled Norton on that machine
for a period and the service still did not start.

The story continues.........and i could do to get this 1 fixed before end of
play today.

Thanks

Nickie

 

[Brian Tillman]

Noticed that the cpu usage was 99-100%, server running very slow.
Rebooted now MS exchange information store service stays at
'starting' nobody can connect to mail and 'M' is not mounted.

Ask in an Exchange newsgroup.