IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Cache.db-journal is corrupted

Cache.db-journal is corrupted

Version

7.x

 

Issue

cache.db-journal is corrupted

 

Symptoms

Windows Event log shows:

 

Event ID: 55

Source: NTFS

 

"A corruption was discovered in the file system structure on volume ??.

 

The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x9f000000004561. The name of the file is "\ProgramData\Bit9\Parity Agent\cache.db-journal". "

 

Cause

Sector on the disk or the file itself could be corrupted or damaged.

 

Solution

Run chkdsk. If it comes back ok, follow the steps below to deleted the corrupted file

  1. Open a command prompt and change directory to program files\bit9\parity agent
  2. Run the following commands in order:
    dascli password <CLI password here>
    dascli tamperprotect 0
    net stop parity
    fltmc unload paritydriver
    del /f c:\programdata\bit9\parity agent\cache.db-journal
    fltmc load parity driver
    net start parity
    dascli status (verify that tamper protect is showing as Enabled)
  3. Verify that a new cache.db-journal is created
Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-16-2015
Views:
1150
Contributors