Loading...

Knowledge Center


Security for Microsoft Exchange fails to quarantine items and the console fails to open (Postgres database is corrupt)
Technical Articles ID:   KB74104
Last Modified:  12/29/2016
Rated:


Environment

McAfee Security for Microsoft Exchange 8.5, 8.0
Microsoft Exchange 2013, 2010, 2007

Problem

The Security for Microsoft Exchange (MSME) console is unresponsive and cannot be opened to manage or configure the product.

Problem

The Postgres processes are not listed in Windows Task Manager, which means that MSME cannot quarantine items. When this occurs, the following error is recorded in the Windows Application Event log:
 
Event ID: 2049
Log Name: Application
Source: MSME
Description: The Detected Items failed to store a record with error 80040230:McEFILEIOERROR 

Cause

The Postgres Quarantine database has become corrupt, resulting in the Postgres.exe processes failing to load. This causes the MSME console to become unresponsive and interrupts scanning and quarantining activities.

Solution

Rename the MSME Quarantine database.

IMPORTANT: All existing items in the MSME Detected Items will be permanently lost when this process is complete. However, the database is already corrupt and, in most cases, the items are already lost.

{GENRD.EN_US}
 
  1. Stop the MSME services:
     
    1. Click Start, Run, type services.msc, and then click OK.
    2. Right-click the following services and select Stop:

      McAfee Security for Microsoft Exchange service
      McAfee Framework Service

       
  2. Terminate any remaining MSME processes in Task Manager:
     
    1. Click Start, Run, type taskmgr, and click OK.
    2. Click the Processes tab.
    3. Click Image Name to sort the list by Process Name.
    4. If any of the following processes are listed, select them and click End Process:

      Safeservice.exe
      RPCserv.exe
      (two instances) 
      Postgres.exe (multiple instances)

       
  3. Rename the MSME Database folder:
     
    1. Click Start, Run, type regedit and then click OK.
    2. Navigate to the Postgres Quarantine location at the following key:

      32-bit systems: [ HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MSME\Repository\Variables]
      64-bit systems: [ HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee\MSME\Repository\Variables]
       
    3. In the right pane, note the DataPath value because this contains the path to the Quarantine Database.

      NOTE: The Default in MSME is McHome\McAfee\MSME\Data (this translates to %ALLUSERSPROFILE%\McAfee\MSME\Data). If this location does not work (or does not exist), see Solution 2.

       
    4. In Windows Explorer, browse to the path specified in DataPath and rename or delete the MSMEData subfolder.

       
  4. Start the MSME services:
     
    1. In the Services control panel, right-click the McAfee Security for Microsoft Exchange service and click Start.
    2. Ensure the following processes are started in Task Manager:

      Safeservice.exe  
      RPCserv.exe
      (two instances) 
      Postgres.exe (multiple instances)

       
    3. Right-click Mcafee Framework Service and click Start.

Solution

If the default location of McHome\McAfee\MSME\Data in Solution 1 does not work, follow these alternative steps:
  1. Create a new folder on an available local drive (for example: C:\McAfee\QTine or D:\McAfee\Qtine). Do not create the folder on a mapped or network drive.
  2. Ensure that Server\Domain Administrators and System have Full Control permissions on the new folder.
  3. Follow the steps in Solution 1 for stopping the services and any orphaned processes.
  4. Click Start, Run, type regedit, and then click OK.
  5. Navigate to the following key:
     
    32-bit systems: [ HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MSME\Repository\Variables]
    64-bit systems: [ HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee\MSME\Repository\Variables]
     
  6. Edit the DataPath value and add the folder created in step 1 of this procedure.

    NOTE: If you use ePolicy Orchestrator to manage MSME, ensure that the policy for Detected Items is either not specified or matches the folder path you have created. If the location is not specified in the policy, the setting in the registry will be used.

     
  7. Follow the steps in Solution 1 for starting the services.
  8. When all services and processes have started, attempt to open the User Interface.

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.