Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Unable to synchronize a message! (Error: 0x8004011b MAPI_E_CORRUPT_DATA)
  •  
jonelli

Messages: 33
Karma: 0
Send a private message to this user
Hi All,
I have a user that is occasionally getting SPAM messages that get corrupted within Kerio and are generating this error to the user:

From: Kerio Outlook Connector
Sent: None
Subject: Unable to synchronize a message!
Importance: High

Kerio Outlook Connector hasn't been able to deliver the message

We are sorry, but an error occurred while synchronizing the Inbox/0000a84a message from the server to your Outlook account. This is usually caused by an error in the message, but there may be a bug in the product too.
The original message can be found in the Failed Message.eml attachment and you may succeed in opening it. You can also use Kerio WebMail to access the message.
Details for administrator:

Error: 0x8004011b MAPI_E_CORRUPT_DATA
Message: [SID=xxxx<_at_>xxxxxx.xxx/ffc9b05e-ceb2-4956-8580-215783dbccf6/0000a84a,
ID={A70C5C55-BB6E-44EF-6F4B-38CEEF0967AB},
Folder: Inbox ]

The message has also been copied to the __keriomapi__STORE/Failed_Conversions folder in the user's store.
Please send the content of this error report (including both attachments) to Kerio Technologies.
[26/06/2014 16:12:57.089] (16008) {err}{convertor}
In MapiConvertor\MapiConvertor.cpp:185 (mimeToMapi)
Exception of class HResultException: MapiConvertor\GroupwareBaseConvert.cpp(514), toMapi::GroupwareBaseConvertHelper::findAndLoadGroupwareBody :
0x8004011b MAPI_E_CORRUPT_DATA: Failed to read groupware body. Groupware body is probably malformed.
Conversion has failed.


[26/06/2014 16:12:57.089] (16008) {err}{scp-worker}
In SCProvider\ConvertorHelper.cpp:183 (ConvertorHelper::convertMimeMessage)
Exception of class HResultException: SCProvider\ConvertorHelper.cpp(176), ConvertorHelper::convertMimeMessage:
0x8004011b MAPI_E_CORRUPT_DATA
HRESULT: 0x8004011b MAPI_E_CORRUPT_DATA


My server is WIN2K3, with Symantec Endpoint Protection SBE v12, and the Program Files\Kerio folder is excluded from all scans on the server, and is also disabled on the client for scanning email.

Kerio support agrees with what I believe is happening that the message is getting deleted/blocked/or quarantined at some point causing the sync error.

Their suggestion was to delete the user's mailbox journal.db and
specguid.fld files, and to rebuild his client side profile in Outlook.
And to also disable the anti-virus for testing.

It only happens a couple times every couple weeks, and I have a feeling that the problem will not be fixed by rebuilding his profile.
I'm looking for a more direct/specific cause and solution if possible. Has anybody else run into this?

The only other additional info I have is that this user who is the only user experiencing this, has two other computers, each with a profile accessing the same Kerio accounts.

Is it possible that the multi-computer access is more likely the cause than an anti-virus behavior? I have attached the original message file with the end-user's email deleted.

  •  
gbalbach

Messages: 72
Karma: 0
Send a private message to this user
I have a user that has the some thing happen - theirs is also a specific type of spam email that they get every day or two. The problem is something in the client can't decode the message properly. The message displays fine on their iPhone 5s though. Anyone have any suggestions?
  •  
krokodiliukas

Messages: 11
Karma: 0
Send a private message to this user
I have exactly the same issue once a week with 2 user accounts.
  •  
jonelli

Messages: 33
Karma: 0
Send a private message to this user
I'm running a test where the user will never have outlook open on more than one machine. If I get him through 3 weeks without the error, then I feel confident that's the problem.

Krododiliukai...labas!
  •  
jonelli

Messages: 33
Karma: 0
Send a private message to this user
Okay, I have new information:
Recap - User has 3 different PC's, Two with Outlook 2010, one with 2003.
When more than one machine has outlook open, we get sync errors.
The sync errors seem to be related to SPAM messages only.

We tried making sure only one PC had Outlook opened at a time and the sync errors were non existent from what we could tell.
Then one day they forgot the office machine (PC1) had outlook open and concurrently opened outlook on the laptop (PC2). Sync errors immediately followed. But, some of the error-ed messages were dated from weeks prior...meaning that PC1 must have either already processed that message or was already gone from the server, then PC2 came online and the sync error happened. But, I don't understand how if PC1 already processed the message(deleted/junked) or the server deleted/junked it two weeks ago, how it would still be intact enough to show me the entire message?

Here is the header/footer of one of the messages:

Return-Path: <jpeterson<_at_>wziaorgmkt.com>
X-Spam-Status: No, hits=2.5 required=3.9
tests=BAYES_50: 1.567,FROM_EXCESS_BASE64: 0.979,HTML_MESSAGE: 0.001,
T_REMOTE_IMAGE: 0.01,TOTAL_SCORE: 2.557,autolearn=no
X-Spam-Level: **
Received: from wziaorgmkt.com ([91.218.126.164])
by mail.ourserver.net
for user<_at_>ourserver.net;
Wed, 20 Aug 2014 08:35:31 -0700
Subject: =?UTF-8?B?R2V0IFRheCBGcmVlIENhc2g6IEZIQSBSZXZlcnNlIE1vcnRnYW dlcw==?=
Message-ID: <1408544398-616e647940616e64746563682e6e6574<_at_>wziaorgmkt.com >
Date: Wed, 20 Aug 2014 10:19:58 -0400
From: "=?UTF-8?B?cmV2ZXJzZSBtb3J0Z2FnZSBvbiBiZWhhbGYgb2YgQUFH?=" <jpeterson<_at_>wziaorgmkt.com>
To: user<_at_>ourserver.net
MIME-version: 1.0;
Content-Type: multipart/alternative; boundary="--_616e647940616e64746563682e6e6574_"

----_616e647940616e64746563682e6e6574_
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64

[DATA OMITTED]
----_616e647940616e64746563682e6e6574_
Content-class: urn:content-classes:calendarmessage
Content-Type: text/calendar;
charset="UTF-8";
component="VEVENT";
name="meeting.ics"
Content-Transfer-Encoding: base64


----_616e647940616e64746563682e6e6574_--

Previous Topic: Renaming domain and calendar events
Next Topic: SMTP relay settings violated?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Jan 21 07:16:06 CET 2017

Total time taken to generate the page: 0.00937 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.