GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Unable to synchronize a message! (Error: 0x8004011b MAPI_E_CORRUPT_DATA)
Unable to synchronize a message! [message #115161] Tue, 29 July 2014 05:47 Go to next message
jonelli is currently offline  jonelli
Messages: 36
Registered: July 2011
Location: HB, CA
Hi All,
I have a user that is occasionally getting SPAM messages that get corrupted within Kerio and are generating this error to the user:

From: Kerio Outlook Connector
Sent: None
Subject: Unable to synchronize a message!
Importance: High

Kerio Outlook Connector hasn't been able to deliver the message

We are sorry, but an error occurred while synchronizing the Inbox/0000a84a message from the server to your Outlook account. This is usually caused by an error in the message, but there may be a bug in the product too.
The original message can be found in the Failed Message.eml attachment and you may succeed in opening it. You can also use Kerio WebMail to access the message.
Details for administrator:

Error: 0x8004011b MAPI_E_CORRUPT_DATA
Message: [SID=xxxx<_at_>xxxxxx.xxx/ffc9b05e-ceb2-4956-8580-215783dbccf6/0000a84a,
ID={A70C5C55-BB6E-44EF-6F4B-38CEEF0967AB},
Folder: Inbox ]

The message has also been copied to the __keriomapi__STORE/Failed_Conversions folder in the user's store.
Please send the content of this error report (including both attachments) to Kerio Technologies.
[26/06/2014 16:12:57.089] (16008) {err}{convertor}
In MapiConvertor\MapiConvertor.cpp:185 (mimeToMapi)
Exception of class HResultException: MapiConvertor\GroupwareBaseConvert.cpp(514), toMapi::GroupwareBaseConvertHelper::findAndLoadGroupwareBody :
0x8004011b MAPI_E_CORRUPT_DATA: Failed to read groupware body. Groupware body is probably malformed.
Conversion has failed.


[26/06/2014 16:12:57.089] (16008) {err}{scp-worker}
In SCProvider\ConvertorHelper.cpp:183 (ConvertorHelper::convertMimeMessage)
Exception of class HResultException: SCProvider\ConvertorHelper.cpp(176), ConvertorHelper::convertMimeMessage:
0x8004011b MAPI_E_CORRUPT_DATA
HRESULT: 0x8004011b MAPI_E_CORRUPT_DATA


My server is WIN2K3, with Symantec Endpoint Protection SBE v12, and the Program Files\Kerio folder is excluded from all scans on the server, and is also disabled on the client for scanning email.

Kerio support agrees with what I believe is happening that the message is getting deleted/blocked/or quarantined at some point causing the sync error.

Their suggestion was to delete the user's mailbox journal.db and
specguid.fld files, and to rebuild his client side profile in Outlook.
And to also disable the anti-virus for testing.

It only happens a couple times every couple weeks, and I have a feeling that the problem will not be fixed by rebuilding his profile.
I'm looking for a more direct/specific cause and solution if possible. Has anybody else run into this?

The only other additional info I have is that this user who is the only user experiencing this, has two other computers, each with a profile accessing the same Kerio accounts.

Is it possible that the multi-computer access is more likely the cause than an anti-virus behavior? I have attached the original message file with the end-user's email deleted.
Re: Unable to synchronize a message! [message #115219 is a reply to message #115161] Wed, 30 July 2014 20:19 Go to previous messageGo to next message
gbalbach is currently offline  gbalbach
Messages: 18
Registered: September 2006
Location: West Chester ,PA
I have a user that has the some thing happen - theirs is also a specific type of spam email that they get every day or two. The problem is something in the client can't decode the message properly. The message displays fine on their iPhone 5s though. Anyone have any suggestions?
Re: Unable to synchronize a message! [message #115310 is a reply to message #115161] Wed, 06 August 2014 18:43 Go to previous messageGo to next message
krokodiliukas is currently offline  krokodiliukas
Messages: 2
Registered: June 2010
I have exactly the same issue once a week with 2 user accounts.
Re: Unable to synchronize a message! [message #115311 is a reply to message #115310] Wed, 06 August 2014 19:46 Go to previous messageGo to next message
jonelli is currently offline  jonelli
Messages: 36
Registered: July 2011
Location: HB, CA
I'm running a test where the user will never have outlook open on more than one machine. If I get him through 3 weeks without the error, then I feel confident that's the problem.

Krododiliukai...labas!
Re: Unable to synchronize a message! [message #115932 is a reply to message #115311] Fri, 05 September 2014 09:59 Go to previous message
jonelli is currently offline  jonelli
Messages: 36
Registered: July 2011
Location: HB, CA
Okay, I have new information:
Recap - User has 3 different PC's, Two with Outlook 2010, one with 2003.
When more than one machine has outlook open, we get sync errors.
The sync errors seem to be related to SPAM messages only.

We tried making sure only one PC had Outlook opened at a time and the sync errors were non existent from what we could tell.
Then one day they forgot the office machine (PC1) had outlook open and concurrently opened outlook on the laptop (PC2). Sync errors immediately followed. But, some of the error-ed messages were dated from weeks prior...meaning that PC1 must have either already processed that message or was already gone from the server, then PC2 came online and the sync error happened. But, I don't understand how if PC1 already processed the message(deleted/junked) or the server deleted/junked it two weeks ago, how it would still be intact enough to show me the entire message?

Here is the header/footer of one of the messages:

Return-Path: <jpeterson<_at_>wziaorgmkt.com>
X-Spam-Status: No, hits=2.5 required=3.9
tests=BAYES_50: 1.567,FROM_EXCESS_BASE64: 0.979,HTML_MESSAGE: 0.001,
T_REMOTE_IMAGE: 0.01,TOTAL_SCORE: 2.557,autolearn=no
X-Spam-Level: **
Received: from wziaorgmkt.com ([91.218.126.164])
by mail.ourserver.net
for user<_at_>ourserver.net;
Wed, 20 Aug 2014 08:35:31 -0700
Subject: =?UTF-8?B?R2V0IFRheCBGcmVlIENhc2g6IEZIQSBSZXZlcnNlIE1vcnRnYW dlcw==?=
Message-ID: <1408544398-616e647940616e64746563682e6e6574<_at_>wziaorgmkt.com >
Date: Wed, 20 Aug 2014 10:19:58 -0400
From: "=?UTF-8?B?cmV2ZXJzZSBtb3J0Z2FnZSBvbiBiZWhhbGYgb2YgQUFH?=" <jpeterson<_at_>wziaorgmkt.com>
To: user<_at_>ourserver.net
MIME-version: 1.0;
Content-Type: multipart/alternative; boundary="--_616e647940616e64746563682e6e6574_"

----_616e647940616e64746563682e6e6574_
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64

[DATA OMITTED]
----_616e647940616e64746563682e6e6574_
Content-class: urn:content-classes:calendarmessage
Content-Type: text/calendar;
charset="UTF-8";
component="VEVENT";
name="meeting.ics"
Content-Transfer-Encoding: base64


----_616e647940616e64746563682e6e6574_--

Previous Topic: Renaming domain and calendar events
Next Topic: SMTP relay settings violated?
Goto Forum:
  


Current Time: Thu Jun 01 08:31:05 CEST 2023

Total time taken to generate the page: 0.07503 seconds