Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 490 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 490
Event Source: ESENT
Event Type: Error
Event Description: svchost (1332) A(z) „C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb” fájl olvasásra és írásra történő megnyitása a(z) 32 (0x00000020) rendszerhiba miatt nem sikerült: „A folyamat nem fér hozzá a fájlhoz mert azt egy másik folyamat használja. ”.  A fájlmegnyitási művelet a következő hiba miatt fog leállni: -1032 (0xfffffbf8).

Comment: I just install the Avast 5 at last. And then appear it.
Event ID: 490
Event Source: ESSENT
Event Type: Error
Event Description: svchost (1520) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).
Comment:
Event ID: 490
Event Source: ESENT
Event Type: Error
Event Description:
Event Type: Error

Event Source: ESENT
Event Category: General
Event ID: 490
Date: 7/4/2010
Time: 11:54:58 AM
User: N/A
Computer: CERVANTES
Description:
svchost (1448) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Comment: I have a WinXPPro SP3 machine and this error shows up in my application events log every 1-2 minutes or so.  I've tried rebuilding the CatRoot2 folder by renaming it to CatRoot2Old in Safe Mode and restarting the computer.  Windows will automatically rebuild the folder but the catdb error persists.

I also have a file in the CatRoot2 directory called "dberr.txt" with the entry below repeated over and over again every few minutes so by the frequency of appearance seems related the this ESENT/catdb error.

---- dberr.txt -----
CatalogDB: 11:59:03 AM 7/4/2010: File #1 at line #5629 encountered error 0x8e5e0408
CatalogDB: 11:59:03 AM 7/4/2010: File #1 at line #2789 encountered error 0x8e5e0408
CatalogDB: 11:59:03 AM 7/4/2010: File #1 at line #1687 encountered error 0x8e5e0408
CatalogDB: 11:59:03 AM 7/4/2010: File #3 at line #274 encountered error 0x8e5e0408
CatalogDB: 11:59:03 AM 7/4/2010: File #2 at line #2371 encountered error 0x8e5e0408
CatalogDB: 11:59:03 AM 7/4/2010: File #2 at line #1057 encountered error 0x8e5e0408
---------------------

Anyone know how to fix this error
Event ID: 490
Event Source:  
Event Type: -
Event Description: -
Comment: was a fix to this ever determined/ resolved? Index: 0
Event ID: 490
Event Source:  
Event Type: -
Event Description: -
Comment: was a fix to this ever determined/ resolved? Index: 0
Event ID: 490
Event Source: ESENT
Event Type: -
Event Description: -
Comment:
Event Type: Error

Event Source: ESENT
Event Category: General
Event ID: 490
Date: 28/02/2011
Time: 3:08:32 PM
User: N/A
Computer: OFFICE03
Description:
svchost (1120) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------

This was on a windows XP workstation, occurring about 20 times every 30-50 minutes.

it was resolved by removing a piece of malware called "Registry Reviver"
Index: 3643

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...