Petri Newsletter Sign-up
Tech Tuesday

Subscribe to Tech Tuesday, the latest insights from Petri.com for IT Pros.

    See All Petri Newsletters

    How can I mount the Exchange 2000/2003 database when the E00.log is missing and I receive events 9518 and 455?

    Posted on by Daniel Petri in Exchange Server with 6 Comments

    You may receive the following error message when you try to mount a mailbox or public store:

    An internal processing error has occurred. Try restarting the Exchange System Manager or the Microsoft Exchange Information Store service, or both. ID no: c1041724

    In the Application event log, you may also receive following events.

    Event Type: Error
    Event Source: ESE98
    Event Category: Logging/Recovery
    Event ID: 455
    Date: 3/18/2001
    Time: 5:14:22 PM
    User: N/A
    Computer: SERVER1
    Description: Information Store (2376) Error -1811 (0xfffff8ed) occurred while opening log file D:\exchsrvr\MDBDATA\E000xxx.log.

    Event Type: Error
    Event Source: MSExchangeIS
    Event Category: General
    Event ID: 9518
    Date: 3/18/2001
    Time: 5:14:22 PM
    User: N/A
    Computer: SERVER1
    Description: Error Current log file missing starting Storage Group /DC=COM/DC=COMPANY/CN=CONFIGURATION/CN=SERVICES/CN=MICROSOFT EXCHANGE/CN=MICROSOFT/CN=ADMINISTRATIVE GROUPS/CN=FIRST ADMINISTRATIVE GROUP/CN=SERVERS/CN=SERVER1/CN=INFORMATIONSTORE/CN=FIRST STORAGE GROUP on the Microsoft Exchange Information Store.

    There might be a few reasons for these errors:

    • You might be running an Anti-Virus program on the Exchange server and that program might not be properly configured. Read article KB245822 for more info on how to properly configure your Anti-Virus software on a computer running Exchange server.
    • If the Anti-Virus Quarantine option is enabled on the Exchange server and the anti-virus is not configured according to article KB245822.
    • If your Anti-Virus software is configured to scan x:\Program Files\exchsrvr\MDBDATA it might think that the “E00.log “ contains a virus, or that the file itself is the virus, therefore it will automatically quarantine the E00.log and cause the Exchange services to crash.

    In order to solve these errors you might want to consider the following options:

    Resolution

    1. Stop all exchange services.
    2. Configure your Anti-Virus program according to article KB245822.
    3. Save your current log files that are usually located on x:\Program Files\exchsrvr\MDBDATA\Exxxxxxx.Log to a temporary folder.
    4. Delete all *.log files in the  x:\Program Files\exchsrvr\MDBDATA.
    5. Check that the folder “(x:\Program Files\exchsrvr\MDBDATA)” only contains the following files:

      e00.chk

      res1.log

      res2.log

    If not, move all extra files to a temporary folder.

    1. Start all Exchange Services and mount the Information Store service.

    If the above procedure did not work, you might have a problem in the Exchange Database and you will need to try to resolve it by following option number two.

    If the above procedure did not work, you might have a problem in the Exchange Database and you will need to refer to article KB313184.

    Links

    You Cannot Mount the Database, and Receive Events 9518 and 455 – 294367

    How to recover the information store on Exchange 2000 in a single site – 313184

    Recommendations for troubleshooting an Exchange computer with antivirus software installed – 245822

    How to Recover a Deleted Mailbox in Exchange 2000 – 274343

    BECOME A PETRI MEMBER:

    Don't have a login but want to join the conversation? Sign up for a Petri Account

    Register