Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Data Collector Notes and Troubleshooting
  3. Data Collector Troubleshooting
  4. Identifying Windows file system access errors (File Analytics)
IT Analytics Data Collector Notes and Troubleshooting

Identifying Windows file system access errors (File Analytics)

While profiling the Windows primary file table and file systems, a number of error messages may appear in the MFT.Aptare_File_Inventory.log file

These errors actually may require no follow-up actions. Typically, the errors are legitimate, such as a file being locked for exclusive use. Therefore, some files in the C:\Windows\System32 directory will not be profiled.

Example of a Log Error Message:

Unable To Access File C:\Windows\System32\Boot. Error 2. Skipping!!!

The following table lists System Errors with descriptions.

Table: Windows file system errors and its description

System Error

Description

2

System cannot find the file specified; This error occurs when accessing certain files in: C:\Windows\System32. On a Windows 64-bit OS, access is redirected by the filesystem to a 64-bit directory where the files in question do not exist.

3

System cannot find the path specified; This system error occurs when accessing certain files in: C:\Windows\System32. On a Windows 64-bit OS, access is redirected by the filesystem to a 64-bit directory where the files in question do not exist.

5

Access Denied; The file is accessible only to SYSTEM; for example, C:\Windows\System32\LogFiles\WMI\RtBackup

32

Another process has the file opened in exclusive mode; for example, database files used by the SQL server

Feedback

Was this page helpful?
Previous

Configure sudoWithPassword

Next

Collect from remote shares (File Analytics)

Feedback

Was this page helpful?