What is causing this event 486 ESSENT error?

Hi All,

We keep getting multiple occurances of this in our event viewer application log (LOTS of times a day).  We have tried a few things without success of supressing them.  Can anyone shed some light on it?  A lot of the common sources online seem to have little information on the error.  Hesitant to manually do anything to the file just yet.  

Doing a malware scan now just to be sure, but it seems to be clean.  Exact event below.  

Thanks!
Event Type:	Error
Event Source:	ESENT
Event Category:	General 
Event ID:	486
Date:		11/21/2010
Time:		1:37:37 AM
User:		N/A
Computer:	UserB
Description:
SearchIndexer (3008) An attempt to move the file "C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS00D04.log" to "C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSStmp.log" failed with system error 5 (0x00000005): "Access is denied. ".  The move file operation will fail with error -1032 (0xfffffbf8).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Open in new window

JsmplyAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Rommel SultanConnect With a Mentor Commented:
According to Doctor Google.

This could be an Indecing issue.
Can you try disabling indexing.
Also try to uninstall/reinstall Desktop Search if you have one.
-------------------------------------------------------------------
Disable the Indexing Service in Windows XP

1.Open “Control Panel”, select “Administrator Tools”, and open Services applet. Alternatively, type services.msc in the Rn text box from Start menu, and then hit Enter.
2.Scroll down and locate Indexing Service service, and then double click on it.
3.Click on Stop button to immediately stop the indexing service if the service status shows “Running.
4.Under the “Startup Type”, select Disabled to permanently disable the indexing service so that it won’t run again.
5.Click OK.
0
 
ShareefHuddleCommented:
Do you have a GPO that redirects the AppData folder?
0
 
JsmplyAuthor Commented:
Nope, this machine is not on a domain.
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
MtnNtwksCommented:
From eventid.net

"Can be related to event IDs 413, 428, 429 and 482 (related to low disk space or file corruption)."

You've already ruled out malware.  ESSENT has to do with wonky windows update.
0
 
JsmplyAuthor Commented:
Thanks.  When clicking on the Indexing Service under services.msc, we get

"Configuration manager: the specified device instance handle does not correspond to a present device."  

Startup type is set to manual and attempting to start the service gives the same pop-up message.
0
 
JsmplyAuthor Commented:
Went ahead and disabled the service anyway and right clicked on both C and D drive in My Computer and went to properties and unchecked the tickbox to index the drive.  Does anything depend on the indexing service besides Windows search?  

Also, any idea why we got the message in the above post?

Haven't seen the event in the event log yet, will give it 24 hours and check again.
0
 
Wes MillerInfromation Technology SupportCommented:
Here is Microsoft Technicla Brief on Indexing:
http://msdn.microsoft.com/en-us/library/ee805985(VS.85).aspx
Note  Indexing Service is obsolete as of Windows XP. Instead it uses Windows Search.

Check the regidtry for proper entries,
 See: http://msdn.microsoft.com/en-us/library/ms692084(v=VS.85).aspx
As per that site © 2010 Microsoft Corporation. All rights reserved
Indexing Service registry entries group by functionality into the following categories.

Main Registry Entries. This group includes the majority of the entries. With the exception of the DefaultColumnFile entry, they are found under the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ ContentIndex.
The DefaultColumnFile entry is found under the key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ ContentIndexCommon.
Catalog, Property, and Scope Registry Entries. This group includes entries that define the catalog directories and scopes that determine what gets indexed for each catalog and cached properties. These registry entries are found under the key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex\Catalogs
and its subkeys, one for each catalog.
Language-Specific Registry Entries. This group includes entries that control the parts of the indexing and query processes that are language-specific. These registry entries can be found under the key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex\Language.

Wes

0
 
JsmplyAuthor Commented:
Thanks. Would that explain the pop-up?  Either way, can indexing on XP be effectively disabled by going to the drive properties and uncheck the indexing?  It seems to have stopped the event log messages thus far.
0
 
Rommel SultanConnect With a Mentor Commented:
Disble indexing completely.

You are quite right. Disabling the service itself from startup by setting the startup type to "disabled" will stop the indexing regardless of any other settings.

However, if you want to get rid of it so that it can't be started again, simply go to control panel>add/remove programs

Select add/remove windows components
remove the check from "indexing Service"

That will stop it fully without messing with the service.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_24442443.html?sfQueryTermInfo=1+10+30+disabl+index
0
 
JsmplyAuthor Commented:
Thanks. Any idea if any third party programs rely on windows indexing?  Just curious, on this machine its pretty standard.
0
 
Rommel SultanCommented:
I know Outlook was notorius user of this indexing thingy.
There was a way to rebuild index search in 2010.
I forgot how.
0
 
JsmplyAuthor Commented:
Thx, error has not reoccured since dropping indexing.
0
All Courses

From novice to tech pro — start learning today.