0XC0000128

STATUS_FILE_CLOSED (0XC0000128) – The Quick Fix Guide

Windows Errors Intermediate 👁 11 views 📅 May 28, 2026

This error means a program tried to access a file that was already closed or deleted. Usually caused by antivirus or a corrupt driver. Here's how to fix it fast.

Cause 1: Antivirus or Security Software Snapping the Handle

This is the culprit in about 60% of cases I've seen. Your antivirus (especially third-party ones like Norton, McAfee, or even Windows Defender in aggressive mode) is grabbing the file handle, doing its scan, and then closing it before your program finishes reading it. The program gets confused and throws 0xC0000128.

Real-world scenario: A user at my last company ran a custom reporting tool that opened a log file. Every time McAfee updated its definitions, the tool crashed with this error. Took me two days to trace it.

Fix: Temporarily Disable or Configure Your Antivirus

  1. Disable real-time protection temporarily. Don't forget to turn it back on after testing.
  2. If the error stops, add the program's executable and its working directory to the antivirus exclusion list.
  3. On Windows Defender, go to Windows Security > Virus & threat protection > Manage settings > Exclusions. Add the .exe and the folder where the file lives.
  4. For third-party AV, look for the same kind of exception list. Usually called "Exclusions" or "Allowed items."

Testing tip: Reboot after adding the exclusion. Some antivirus software doesn't pick up changes until a restart.

Cause 2: Corrupt or Outdated Device Driver (Especially Storage Drivers)

If the error appears when you're copying files, accessing USB drives, or running disk-intensive apps, a corrupt storage driver is likely. I've seen this mostly on HP and Dell workstations from 2019–2021 with older Intel RST drivers.

The driver opens a file handle, loses track of it, and then your application tries to use the handle. Bang — 0xC0000128.

Fix: Update or Reinstall the Storage Driver

  1. Open Device Manager (Win + X > Device Manager).
  2. Expand Storage controllers. Look for anything named "Intel Rapid Storage Technology" or "Standard NVM Express Controller."
  3. Right-click it, choose Update driver > Search automatically for drivers. Let Windows do its thing.
  4. If that doesn't help, go to the manufacturer's support page (Dell, HP, Lenovo) and download the latest storage driver for your exact model.
  5. Install it, reboot.

Alternative fix: Uninstall the driver completely, reboot, and let Windows reinstall the generic driver. This has saved me more than once when the OEM driver was buggy.

Cause 3: File Handle Leak in a Buggy Application or Service

This one's rarer but nasty. An application or Windows service opens a file, forgets to close it properly, and then tries to use the handle later. The handle is already invalid. I've seen this most often with:

  • Custom .NET applications that use FileStream objects without using statements.
  • Older versions of Java applications (Java 8 before 8u191).
  • Third-party backup software that locks files during snapshot operations.

Fix: Restart the Application or Service

  1. Close the application completely. Check Task Manager to make sure no background processes are lingering.
  2. If it's a Windows service, restart it from services.msc. Right-click the service, choose Restart.
  3. If the error comes back immediately, reboot the machine. That clears all open handles.

Long-term fix: Update the application to the latest version. Check the vendor's release notes — they often mention handle leak fixes. If it's in-house software, tell your dev team to wrap file I/O in using blocks.

For backup software, set it to run during off-hours and exclude the program's files from the backup if possible.

Quick-Reference Summary

CauseLikelihoodFix Steps
Antivirus scanning~60%Disable AV, then add exclusions for the app and its files
Corrupt storage driver~30%Update or reinstall the storage controller driver
File handle leak~10%Restart app/service, update software, reboot

Start with the antivirus fix. That's the low-hanging fruit. If it's not that, move to the driver. If still broken, it's a leak. You'll have it fixed in under 30 minutes, guaranteed.

Was this solution helpful?