Original title: svchost (1020)Event Type: ErrorEvent Source: ESENTEvent Category: General Event ID: 490Date: 19/10/2010Time: 2:51:34 PMUser: N/AComputer: ROBDescription:svchost (1020) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Hi Robrw, 1. When exactly are you getting this error?2. Did you make any changes to the computer prior to this issue? You may try to rename catroot2 folder and check if it helps.Step 1:a. Click Start and in run type C:\windows\system32 and click okb. Check for Catroot2 folder. Right Click on Catroot2 and rename it as Catroot2.oldIf you are not able to do it from normal mode, try booting in Safe mode and rename itRefer the below link for more details on starting your computer in safe mode:http://support.microsoft.com/kb/315222 Step 2:If you are unable to access catroot2 folder, then try to change the permissions on the folders and check if it helps.Refer the KB article:How to take ownership of a file or a folder in Windows XPhttp://support.microsoft.com/kb/308421 Step 3:You may also try to temporarily disable the third party Security Software and firewalls and check what happens.Note: Enable the security software back after resolving the issue.Hope this information is helpful. Praseetha KMicrosoft Answers Support EngineerVisit our Microsoft Answers Feedback Forum and let us know what you think.If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.

Hi Praseetha and thank you for a comprehensive response. The error message seems to occur while I am accessing the internet through my web browser (v7 of IE) but I have'nt determined which sites cause the error. The only thing that has recently changed on my PC was to upgrade my security system to trend micro v3 as a subscriptn renewal by removing the older version and installing the new one as per trend micro's instructions. I have followed your instructions and was able to rename the catroot2 folder via a safe mode boot and permission change. On rebooting again in normal mode another catroot2 folder was created with almost identical files inside. I deleted the catroot2.old folder ok. To date I have'nt seen the error in event viewer so am hoping it may have gone. It is not a consistent error - rather it seems intermittent. Hope this helps. Rob RW.