KB840987 causing W2K3 ES servers to hang

I have multiple W2K3 ES servers that are hanging during the
installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
and one a Dell Optiplex GX240. The machines do not blue screen as
others have seen on Win2K. After several hours I gave up on two out
of the three machines. The third is still running the patch after 24
hours. On the two machines that I power cycled to end the patching,
this is how the KB840987.log ended:

43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
Copied d:\28564f2cc1b878ed21\update\update.ver ->
c:\windows\$hf_mig$\KB840987\update\update.ver.
43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
Copied d:\28564f2cc1b878ed21\update\eula.txt ->
c:\windows\$hf_mig$\KB840987\update\eula.txt.
43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
Copied d:\28564f2cc1b878ed21\update\branches.inf ->
c:\windows\$hf_mig$\KB840987\update\branches.inf.
43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).

What could be going on here?

The same with me.
Repeated 3 times, no success.
Ludek Travnicek.

"Michael Plakus" wrote:

> I have multiple W2K3 ES servers that are hanging during the
> installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
> and one a Dell Optiplex GX240. The machines do not blue screen as
> others have seen on Win2K. After several hours I gave up on two out
> of the three machines. The third is still running the patch after 24
> hours. On the two machines that I power cycled to end the patching,
> this is how the KB840987.log ended:
>
> 43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\update.ver ->
> c:\windows\$hf_mig$\KB840987\update\update.ver.
> 43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
> c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
> 43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\eula.txt ->
> c:\windows\$hf_mig$\KB840987\update\eula.txt.
> 43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\branches.inf ->
> c:\windows\$hf_mig$\KB840987\update\branches.inf.
> 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
>
> What could be going on here?
>

The same with me.
Repeated 3 times, no success.
Ludek Travnicek.


"Michael Plakus" wrote:

> I have multiple W2K3 ES servers that are hanging during the
> installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
> and one a Dell Optiplex GX240. The machines do not blue screen as
> others have seen on Win2K. After several hours I gave up on two out
> of the three machines. The third is still running the patch after 24
> hours. On the two machines that I power cycled to end the patching,
> this is how the KB840987.log ended:
>
> 43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\update.ver ->
> c:\windows\$hf_mig$\KB840987\update\update.ver.
> 43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
> c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
> 43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\eula.txt ->
> c:\windows\$hf_mig$\KB840987\update\eula.txt.
> 43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\branches.inf ->
> c:\windows\$hf_mig$\KB840987\update\branches.inf.
> 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
>
> What could be going on here?
>

> 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
>
> What could be going on here?

Were you running any security packages (e.g. AV scanner, etc.)
which might have tried to block such replacement of system modules?


---


"Michael Plakus" <> wrote in message
news: m...
>I have multiple W2K3 ES servers that are hanging during the
> installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
> and one a Dell Optiplex GX240. The machines do not blue screen as
> others have seen on Win2K. After several hours I gave up on two out
> of the three machines. The third is still running the patch after 24
> hours. On the two machines that I power cycled to end the patching,
> this is how the KB840987.log ended:
>
> 43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\update.ver ->
> c:\windows\$hf_mig$\KB840987\update\update.ver.
> 43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
> c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
> 43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\eula.txt ->
> c:\windows\$hf_mig$\KB840987\update\eula.txt.
> 43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> Copied d:\28564f2cc1b878ed21\update\branches.inf ->
> c:\windows\$hf_mig$\KB840987\update\branches.inf.
> 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
>
> What could be going on here?

On the first attempt McAfee VirusScan 7.1 was running. On subsequent
attempts I disabled VirusScan and achieved the same result. The only
file protection on the box is MS inbred system.

"Robert Aldwinckle" <> wrote in message news:<#Xc9$>...
> > 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> > C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
> >
> > What could be going on here?
>
> Were you running any security packages (e.g. AV scanner, etc.)
> which might have tried to block such replacement of system modules?
>
>
> ---
>
>
> "Michael Plakus" <> wrote in message
> news: m...
> >I have multiple W2K3 ES servers that are hanging during the
> > installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
> > and one a Dell Optiplex GX240. The machines do not blue screen as
> > others have seen on Win2K. After several hours I gave up on two out
> > of the three machines. The third is still running the patch after 24
> > hours. On the two machines that I power cycled to end the patching,
> > this is how the KB840987.log ended:
> >
> > 43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > Copied d:\28564f2cc1b878ed21\update\update.ver ->
> > c:\windows\$hf_mig$\KB840987\update\update.ver.
> > 43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
> > c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
> > 43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > Copied d:\28564f2cc1b878ed21\update\eula.txt ->
> > c:\windows\$hf_mig$\KB840987\update\eula.txt.
> > 43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > Copied d:\28564f2cc1b878ed21\update\branches.inf ->
> > c:\windows\$hf_mig$\KB840987\update\branches.inf.
> > 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> > C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
> >
> > What could be going on here?

It appears MS is rethinking KB840987 for W2K3. It is no longer available
through Windows Update. Anyone know the official MS party line on this
problem?

"Michael Plakus" wrote:

> On the first attempt McAfee VirusScan 7.1 was running. On subsequent
> attempts I disabled VirusScan and achieved the same result. The only
> file protection on the box is MS inbred system.
>
> "Robert Aldwinckle" <> wrote in message news:<#Xc9$>...
> > > 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> > > C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
> > >
> > > What could be going on here?
> >
> > Were you running any security packages (e.g. AV scanner, etc.)
> > which might have tried to block such replacement of system modules?
> >
> >
> > ---
> >
> >
> > "Michael Plakus" <> wrote in message
> > news: m...
> > >I have multiple W2K3 ES servers that are hanging during the
> > > installation of KB840987. One is a Dell PE 2650, one a Dell PV 2400,
> > > and one a Dell Optiplex GX240. The machines do not blue screen as
> > > others have seen on Win2K. After several hours I gave up on two out
> > > of the three machines. The third is still running the patch after 24
> > > hours. On the two machines that I power cycled to end the patching,
> > > this is how the KB840987.log ended:
> > >
> > > 43.234: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > > Copied d:\28564f2cc1b878ed21\update\update.ver ->
> > > c:\windows\$hf_mig$\KB840987\update\update.ver.
> > > 43.250: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > > Copied d:\28564f2cc1b878ed21\update\updatebr.inf ->
> > > c:\windows\$hf_mig$\KB840987\update\updatebr.inf.
> > > 43.266: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > > Copied d:\28564f2cc1b878ed21\update\eula.txt ->
> > > c:\windows\$hf_mig$\KB840987\update\eula.txt.
> > > 43.281: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL:
> > > Copied d:\28564f2cc1b878ed21\update\branches.inf ->
> > > c:\windows\$hf_mig$\KB840987\update\branches.inf.
> > > 43.516: AtomicReplaceFile: Calling HpReplaceSystemModule(
> > > C:\WINDOWS\system32\ntkrnlpa.exe, HFX3126.tmp, _000005_.tmp, FALSE ).
> > >
> > > What could be going on here?
>