Ошибка esent 474 кэширование страниц базы данных

• Remove From My Forums

• Question

• I have a Dell Studio XPS 9100 computer with Windows 7 Prof, with 12gb of ram, and two internal HDs. The computer normally operates without any major errors noted in computer management event viewer. However, ESENT errors appear shortly after I complete the
  monthly MS security updates, and I will see mulitiple ESENT entries. I would appreciate any help in resolving this problem. Thanks Sam.

  The following is an example of one of the entries:

  Log Name: Application

  Source: ESENT

  Date: 11/01/2012 6:59:42 AM

  Event ID: 474

  Task Category: Database Page Cache

  Level: Error

  Keywords: Classic

  User: N/A

  Computer:

  Description:

  Catalog Database (1196) Catalog Database: The database page read from the file «C:Windowssystem32CatRoot2{F750E6C3-38EE-11D1-85E5-00C04FC295EE}catdb» at offset 17862656 (0x0000000001109000) (database page 4360 (0x1108)) for 4096 (0x00001000) bytes failed
  verification due to a page checksum mismatch. The expected checksum was [77547754d6bb9432] and the actual checksum was [77567756d6bb9492]. The read operation will fail with error -1018 (0xfffffc06). If this condition persists then please restore the database
  from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

  Event Xml

In the event viewer there are a very large number or ESENT problems.

Event ID# 447 Database Corruption

Event ID #467 Database Corruption

Event ID #474 Database Page Cache

Event ID #544 Database Page Cache

.

.

.

Event[386]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:25.875
  Event ID: 544
  Task: Database Page Cache
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
Catalog Database (3424) Catalog Database: The database page read from the file «C:Windowssystem32CatRoot2{F750E6C3-38EE-11D1-85E5-00C04FC295EE}catdb» at offset 24940544 (0x00000000017c9000) (database page 6088 (0x17C8)) for 4096 (0x00001000)
bytes failed verification due to a persisted lost flush detection timestamp mismatch. The read operation will fail with error -1119 (0xfffffba1).

The flush state on database page 6088 (0x17C8) was 1 while the flush state on flush map page 0 (0x0) was 3.

If this condition persists, restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

.

.

.

Event[385]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:25.834
  Event ID: 544
  Task: Database Page Cache
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
Catalog Database (3424) Catalog Database: The database page read from the file «C:Windowssystem32CatRoot2{F750E6C3-38EE-11D1-85E5-00C04FC295EE}catdb» at offset 21790720 (0x00000000014c8000) (database page 5319 (0x14C7)) for 4096 (0x00001000)
bytes failed verification due to a persisted lost flush detection timestamp mismatch. The read operation will fail with error -1119 (0xfffffba1).

The flush state on database page 5319 (0x14C7) was 3 while the flush state on flush map page 0 (0x0) was 2.

If this condition persists, restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

.

.

.

Event[384]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:00.872
  Event ID: 474
  Task: Database Page Cache
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
svchost (3160) SRUJet: The database page read from the file «C:Windowssystem32SRUSRUDB.dat» at offset 6578176 (0x0000000000646000) (database page 1605 (0x645)) for 4096 (0x00001000) bytes failed verification due to a page checksum mismatch. 
The stored checksum was [44bf19b1bb40e64e] and the computed checksum was [00000645c440ae80].  The read operation will fail with error -1018 (0xfffffc06).  If this condition persists then please restore the database from a previous backup.  This
problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

.

.

.

Event[383]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:00.543
  Event ID: 467
  Task: Database Corruption
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
svchost (3160) SRUJet: Database C:Windowssystem32SRUSRUDB.dat: Index UserIdTimeStamp of table {973F5D5C-1D90-4944-BE8E-24B94231A174} is corrupted (0).

.

.

.

Event[382]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:00.395
  Event ID: 447
  Task: Database Corruption
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
svchost (3160) SRUJet: A bad page link (error -327) has been detected in a B-Tree (ObjectId: 24, PgnoRoot: 176) of database C:Windowssystem32SRUSRUDB.dat (5550 => 2900, 4070).

.

.

.

Event[381]:
  Log Name: Application
  Source: ESENT
  Date: 2018-09-14T18:57:00.165
  Event ID: 447
  Task: Database Corruption
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Description:
svchost (3160) SRUJet: A bad page link (error -327) has been detected in a B-Tree (ObjectId: 26, PgnoRoot: 160) of database C:Windowssystem32SRUSRUDB.dat (1522 => 288, 909).

.

.

.

The computer has a HD that is in RAID 0 with a flash cache.

The drive is 750 GB and the flash cache is 32 GB.

A chkdsk /r had been run on the drive.  After logon the computer crashed and was unbootable.

A reset with save files had failed.  There is a log file.

There were multiple automatic repairs and somehow the last automatic repair fixed failure to boot.

The plan is to make a backup image using third party software then clean install Windows 10 1803.

The third party software requires the VSS problems to be fixed before a backup image is made.

.

.

.

Event ID# 447 Database Corruption

Event ID #467 Database Corruption

Event ID #474 Database Page Cache

Event ID #544 Database Page Cache

.

.

.

For each of these ESENT event viewer ID # please indicate how they are troubleshooted.

Are they troubleshooted differently or the same?

• Edited by

  Sunday, September 16, 2018 2:04 AM

1. Windows 10 ESENT 474 event corrupted local datafiles WebCache, Catalog, etc .. + strange…

   Hi,

   I’ve been searching desperatly for a solution or at least to locate the issue, because recently I built up a new PC :

   • Motherboard Asus ROG Strix z390-e Gaming
   • CPU Intel Core CoffeeLake 9700k
   • GPU Asus NVIDIA RTX2070 SUPER
   • 2×8 Go Corsair RGB RAM 3200MHz
   • 2x 1 To Samsung 970Evo Plus M.2 SSD

   I installed with the Windows image tool creation from by previous PC, a Windows 10 Professional. Have a paid and valid license, activated it.

   And after like few days of use without any problem, it began. The curse came in.

   I started to have apps randomly crashing, some queries over HTTPS TLS failing Firefox says : SSL_ERROR_BAD_MAC_READ, Edge works better, but I still have issues on some websites, … In the Windows Events Viewer I can see a lot of error ESENT types, picking you some examples :

   — ESENT event 474 : WebCacheV01.dat : READ failed, checksum issue.

   — ESENT event 474 : UnistoreDBstore.vol : Same, READ failed, checksum issue.

   — ESENT event 474 : DataStore.edb : same

   It leads to other ESENT errors because process fail after trying to read the db/file. A wild guess here, is it have something to do with checksums calculations being wrong because of my issue even local certificate signature cheking for reading in these databases probably failing ?

   NOW, here is the long list of what I tried :

   — Reinstall a fresh Windows 10 from the Recover tool in Windows 10 : Nothing changes

   — Updated all my drivers from the official Motherboard ASUS website

   — Updated BIOS and checked time sync : OS and BIOS time OK.

   — Tried various SCAN Tools Rootkit tool, RAM/HDD/CPU/ checker MemTest, CHKDSK, Gmer, CCleaner, HDScan, … : Appears to have no problem : wow

   — Tried ANOTHER connection, sharing my 4G mobile internet via USB : still have the issues. So issue in local.

   — Tried to BOOT on Linux Mint or Ubuntu USB key live : each time I have a RIP error or Segmentation Fault, I can’t boot up on Linux. Strange as well, have to dig more here.

   — Tried to enable/disable different TLS/SSL versions in Internet Options

   — Tried to check for bad certificates in my local certificate store : all seems to be pretty by default.

   — Wanted to disabled EMS or change Cipher priority order for Windows, : on this one I’m not sure I did the things right, I ‘ve seen no change.

   — Tried to run DISM and SFC Windows integrity repair Tools, these detected Nothing wrong and completed to 100%

   — Tried to disable Windows Defender/Firewall

   — Tried to stop one by one, stoppable Services, to see if one was tampering my TLS/SSL encryption operation.

   — I’m sure I did try other things, but I’m tired and I will add these when I remember.

   now I found a subject of a fellow, who apparently have the same symptoms :

   Windows 10 — Strange TLS / SSL Errors , Very Stuck
   by u/DannyRCDW in techsupport

   The post ends with no solution, but a lot of search, and I could test some things based on that. Like DannyRCDW said, I’m also willing to pay a Bounty at this point. It’s totally insane.

   Please, if you read me, have you any idea of what’s could going on here ? I’m out of idea.

   Thanks,

   Alex

   

2. My PC keeps freezing for ~1 min and I keep getting Event 533, 510, 508(ESENT) and 129(iaStorA)

   Alright, i did some more tests.

   Disabling Google Drive didn’t solve the issue.

   Clean installed Windows 10 twice diretly to Anniversary Update.

   The first time, i have installed all my softwares. Issue persisted.

   The second time, i have installed only the basics and blocked further updates from Octomber 10 (becouse i didn’t notice this issue on that date). Issue persisted.

   Most of the time its about an SO read/write delay in these files:

   ESENT 533: %userprofile%AppDataLocalMicrosoftWindowsWebCacheWebCacheV01.jfm

   ESENT 533: %userprofile%AppDataLocalMicrosoftWindowsWebCacheV01.log

   ESENT 508: %userprofile%AppDataLocalMicrosoftWindowsWebCacheV01.log

   ESENT 508: %userprofile%AppDataLocalMicrosoftWindowsWebCacheWebCacheV01.jfm

   ESENT 508: %userprofile%AppDataLocalPackagesMicrosoft.Windows.Cortana_cw5n1h2txyewyAppDataIndexed DBIndexedDB.jfm

   ESENT 508: %userprofile%AppDataLocalTileDataLayerDatabaseEDB.log

   ESENT 508: %userprofile%AppDataLocalTileDataLayerDatabasevedatamodel.jfm

   ESENT 510: %userprofile%AppDataLocalMicrosoftWindowsWebCacheV01.log

   ESENT 510: %userprofile%AppDataLocalMicrosoftWindowsWebCacheWebCacheV01.jfm

   Sometimes this file also appears in the logs:

   %userprofile%AppDataLocalCommsUnistoreDBstore.vol

   Its too much coincidence to be a faulty SSD. My last attempt will be replacing it with my old one.

   After some digging on the internet, i couldn’t find much about it. Whats going on? Its just me and the OP?

3. ESENT Events 454 and 517…

   Hi,

   Event ID: 454 Source: ESENT

   Related Thread

   ESENT Event IDs

   517 Event ID — no information

   Related 517 Event ID thread

   — «Generally error 517 is caused that there is no enough storage space for saving the backup. Please first check if there is enough free space on target location.»

   Windows Security Log Events

   Hope this helps.

4. Windows 10 ESENT 474 event corrupted local datafiles WebCache, Catalog, etc .. + strange…

   Two ESENT event errors happening several times a day?? After doing a bit of research it appears that the WebCache is being corrupted. You might want to scan your PC with Malewarebytes Free to see if you’ve picked up a PUP. Here is where I found some info although you’ve probably already looked here:
   Eventvwr reporting Webcache problems Solved — Windows 7 Help Forums