[scout1]

Guys,

Before I kick this over to malware, got a question. Posted a couple of items (thanks for the replies) where I have an install that just won't quit, Can't load anything right now. Waiting for me to finish the never ending install first. Taking some advise here, decided to do a system restore. Unfortunately, can't shut windows done completely. Gets to the last screen ("shutting down windows") and freezes. So can't do a system restore either. Can't say for sure that both problems cropped up at the same time or independently.

Ad-Aware, Spybot, TrendMicro and Spyblaster all say that the system is clean,
with a kaviot, there are some files that (MicroTrend in particular) are not accessible, access denied. The grouping that caught my eye is shown below.
This particular file is an example. The entire folder and sub-folders gives the same error message. Set to read-only. I tried changing and it won't let me.

2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\$shtdwn$.req": Access is denied.

Question is, is this a valid Windows update thing or am I off to the malware section ? If it is valid, why is it sitting up on C; and not buried down in c:\windows
?

[Advertisements]

Do you have automatic updating on? What service pack is this? I think you may have an windows update in progress...that may also be a backup for an update....

what is in that folder? How large is it?

[gerryf]

Do you have automatic updating on? What service pack is this? I think you may have an windows update in progress...that may also be a backup for an update....

what is in that folder? How large is it?

[wannabe1]

gerryf...I hope you don't mind me dropping a quick note in here...I think you are right on the mark.

Hi scout1...

There is a Windows Update that installs at shutdown and seems to take forever...meanwhile, the machine appears to be hung on the shutdown screen. I had this update take over 40 minutes to install on an HP, but it did eventually shut down and all was well with the world again. Could this be happening to you?

I have since noticed that when this update is ready to install a "red shield" icon will appear on the "Turn Off" button in the shut down dialog box.

wannabe1

[scout1]

>> Do you have automatic updating on? What service pack is this? I think you
>> may have an windows update in progress...that may also be a backup for an >> update....

>> what is in that folder? How large is it?

Folder is :

C:\1846ac5a7991fc959b

I've included a screendump of the contents in a word doc. Couldn't figure out how to paste it directly. The files though all list an Oct 04 date stamp Seems old.
Could not set file for reading on "C:\1846ac5a7991fc959b\$shtdwn$.req": Access is denied.
sysclean log shows the contents .....

2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\spmsg.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\spuninst.exe": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2gdr\browseui.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2gdr\mshtml.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2gdr\shdocvw.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2gdr\urlmon.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2gdr\wininet.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2qfe\browseui.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2qfe\mshtml.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2qfe\shdocvw.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2qfe\urlmon.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\sp2qfe\wininet.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\branches.inf": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\eula.txt": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\KB834707.CAT": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\spcustom.dll": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\update.exe": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\update.ver": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\updatebr.inf": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\update_SP2GDR.inf": Access is denied.
2005-03-08, 21:17:38, Could not set file for reading on "C:\1846ac5a7991fc959b\update\update_SP2QFE.inf": Access is denied.


As too how large is the folder, I'd love to know how you check size of individual folders. The "old" windows told you this and was helpful. Never could figure out how to do this in XP.

I'm running SP2. Had it since it came out.

OS:Microsoft Windows XP Home Edition Service Pack 2 (Build 2600)

Yes, I am running with automatic updates. And yes, it is an HP. Never had a long install that I;m aware of yet, but I'll give it a go and let it sit upon logout out to see if it ever quits.

As a matter of fact, this is an HP.

Will let you know how it goes ......

Attached Files

•  screendump.doc   267KB   20 downloads

[scout1]

Well, I began a shutdown at ~8PM. Cycled through to the Windows XP window "Windows is shutting down..." and froze there. It's now 10:47pm and no activity. I may let it go the night just for grins, but things don't look to good.

Any further suggestions ? Need to make changes to fix the "can't shutdown", but need to be able to shutdown to invoke the changes. Kinda of a Catch 22.

[scout1]

Gave up on shutting down after I woke up the next morning. Sat for nearly 10 hours in this frozen state.

Suggestions ?

[wannabe1]

Hi scout1...

Regarding the shutdown problem...does your BIOS support APM (Advanced Power Management)? There are some issues regarding this on the Microsoft Support Page
http://support.micro...d=1173&sid=1192

This issue occurs on a computer that supports Advanced Power Management (APM). By default, this feature is not enabled in Windows XP. If the BIOS on your computer is set for APM, and you upgrade to Windows XP, you receive this message when you shutdown the computer, and then the computer stops responding.

There are also some issues discussed there involving two or more programs trying to shut down or restart Windows.
http://support.micro...d=1173&sid=1192

If multiple programs call the ExitWindowsEx function to shut down or restart Windows at almost the same time, one of the shutdown messages may be discarded incorrectly. When this occurs, the shutdown process does not complete.

Shut down hangs can also be caused by device drivers, hardware conflicts, and software conflicts. Check the Microsoft links above and see if they help with the problem. Microsoft also offers free support via e-mail which has helped resolve a few problems I have had on various machines.

Keep us posted on your progress...

wannabe1

Edited by wannabe1, 25 July 2005 - 06:39 PM.

[scout1]

Guys,

Thanks for the help thus far. You asked to keep you posted so here it is.....

1) Problem remains
2) Posted on the Malware section on the 26th. No responses. Guessing that they
a) are really busy
b) don't think it's malware
c) ????
3) Found an HP help site (HP pc) that had 4-5 causes listed with corrective action
listed. Nopper.
4) Went to the MS website and had an interesting discovery. Looked arounf the site
some, but when I clinked the link on the left side of the main screen (Windows
Update), that window froze. Didn't freeze my machine, but that window was
toast. EVERYTIME I did this. Repeated. This wasn't a request to download anything, but merely to go to that section....
5) Decided to go to the MS forum and search there. This is the one where you have to go through about 6+ choices, the first being language, then Operating system (I think), etc .... until you get to where you want to go. Oddly enough every single clink I made to select a choice resulted in my pop up window
"Windows Preparing to Install" appear. Which it then disappeared. This pop up
was never this active. Only on this site .....
6) Tried a safe mode boot. This in fact shutdown normally. However, went through the entire system restore sequence only to be told, nopper .....

Bottomline ..... Still confused.
Personally, I think this is a windows update that terminated abnormally (for whateveer reason (the misexec.exe in the active process list is a hint (maybe)).
Killed msiexe.exe and still no shutdown. Back in active processes on next start.

Opinions ......

[Muscatel]

Looks to me like a botched svpk 2 install
you could do an inplace reinstall
or try reinstalling svpk 2 again. Either way you would have to reinstall all/or most of the updates.

If you try the reinstall of svpk 2 stop or turn off all most of unnecessary the services you are running, virus protection and kill any processess that shouldn't be there "misexec.exe" before running it. Also download or obtain a full version of it and copy it either to a backside partition or run it off a cd. Earlier updates of svpk2 from updates services did not take very well, if your regisitry corrupted or invalid entries not all of the sp was downloaded and installed.