XADM: Information Store Suddenly Stops and Generates the Server Specific Error "4294966781"

This article was previously published under Q262375

SYMPTOMS
The information store stops, and the following server-specific error message appears:

Error 2140. Internal Windows NT error.
The following Event ID is then generated in the Windows NT Event Viewer Application log:
Event ID: 7024
Source: MSExchangeIS
Type:Error
Description:
The Microsoft Exchange Information Store stopped with Service Specific Error 4294966781.

CAUSE
Third-party antivirus software performs a scan on the Exchange server itself. While performing this scan, the antivirus software sees the log files located in the Exchsrvr\Mdbdata directories as a virus-infected document.

It then removes the log file and either place it in a quarantine folder or recycle bin. This depends on the configuration of the antivirus software. After this happens, the logs are out of sequence and the service stops. This causes inconsistencies in the databases.

Server Specific Error 4294966781 equates to JET_errInvalidLogSequence. The log files are out of sequence.

RESOLUTION
Ensure to exclude all of the Exchsrvr directories from being scanned by third-party antivirus software.

WORKAROUND
This is a fairly simple fix. If the edb .log file has been quarantined , then just restore the file and restart the information store service. If the file has been deleted, just remove all .log ,.chk and .pat files from the mdbdata directory and restart the information store service. New log files will be generated.

MICROSOFT CERTIFIED PARTNER!! ITC IS THE ONLY CERTIFIED PARTNER EXCLUSIVELY DEDICATED TO PROVIDING EXCHANGE SERVER RECOVERY & EXCHANGE SERVER SUPPORT

Click this link to visit our Microsoft Partner Profile