Recent update and System Restore

Has anyone tried using "System Restore" since this latest security update
that everyone is having trouble with. I'm running XP SP2 and it used to work
perfectly then since this update - if I try to run it, when windows restarts
-the message given is that it cant restore to the point I've chosen ... in
fact I get the same response no matter what restore point I choose and it
wont let me go back to any previous month as it worked in the past ? ? ? Any
Suggestions ? ? ?

Joe

I've heard of one specific case ( not saying that there are not others.)
Did you try "disabling" your antivirus (using MSCONFIG) before attempting System Restore. If not, please do that.

This update had some especially significant updates to core files of the operating system.
Some anitivirus (possibly some security suites) are very sensitive & over-aggressive about versions of system files or changes to system files.

If that still does not work, Use Windows Explorer, find, and look at contents of file KB908531.log
If found, attach a copy of it in a reply here.

This log file should be in your Windows folder (usually C:\WINNT or C:\Windows )

After your done with System Restore, re-enable your antivirus.
--
Maurice N
MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
-----

"jw14225" wrote in message news:FCDB91CC-54D6-4560-AC95-...
> Has anyone tried using "System Restore" since this latest security update
> that everyone is having trouble with. I'm running XP SP2 and it used to work
> perfectly then since this update - if I try to run it, when windows restarts
> -the message given is that it cant restore to the point I've chosen .... in
> fact I get the same response no matter what restore point I choose and it
> wont let me go back to any previous month as it worked in the past ? ? ? Any
> Suggestions ? ? ?
>
> Joe

Tried your suggestion no and no change . . . will try to attach requested file
[KB908531.log]
2.083:
================================================== ==============================
2.083: 2006/04/17 19:08:50.174 (local)
2.093:
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\43d9eaa0035350527947c80002b5f2e3\update\update. exe (version 6.2.29.0)
2.093: Hotfix started with following command line: /si
/ParentInfo:43b2f5a8fb547242b3e89aabbe510efb
3.204: DoInstallation: CleanPFR failed: 0x2
3.224: SetProductTypes: InfProductBuildType=BuildType.IC
3.224: SetAltOsLoaderPath: No section uses DirId 65701; done.
3.284: CreateUninstall = 1,Directory = C:\WINDOWS\$NtUninstallKB908531$
3.284: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
3.314: ref tag c:\windows\system32\sp4.cab does not exist
3.314: ref tag c:\windows\system32\sp3.cab does not exist
3.314: ref tag c:\windows\system32\sp2.cab does not exist
3.314: ref tag c:\windows\system32\sp1.cab does not exist
3.314: ref tag c:\windows\system32\driver.cab does not exist
3.314: ref tag c:\windows\system32\fp40ext.cab does not exist
3.314: ref tag c:\windows\system32\fp40ext1.cab does not exist
3.324: ref tag c:\windows\system32\wms4.cab does not exist
3.324: ref tag c:\windows\system32\wms41.cab does not exist
3.324: ref tag c:\windows\system32\ims.cab does not exist
3.324: ref tag c:\windows\system32\ims1.cab does not exist
3.324: ref tag c:\windows\system32\ins.cab does not exist
3.324: ref tag c:\windows\system32\ins1.cab does not exist
3.324: Starting AnalyzeComponents
3.324: AnalyzePhaseZero used 0 ticks
3.324: No c:\windows\INF\updtblk.inf file.
3.324: OEM file scan used 0 ticks
3.335: AnalyzePhaseOne: used 11 ticks
3.335: AnalyzeComponents: Hotpatch analysis disabled; skipping.
3.335: AnalyzeComponents: Hotpatching is disabled.
3.335: FindFirstFile c:\windows\$hf_mig$\*.*
3.465: KB908531 Setup encountered an error: The update.ver file is not
correct.
3.465: KB908531 Setup encountered an error: The update.ver file is not
correct.
3.465: KB908531 Setup encountered an error: The update.ver file is not
correct.
3.655: AnalyzeForBranching used 190 ticks.
3.745: AnalyzePhaseTwo used 90 ticks
3.745: AnalyzePhaseThree used 0 ticks
4.005: AnalyzePhaseFive used 260 ticks
4.005: AnalyzePhaseSix used 0 ticks
4.005: AnalyzeComponents used 681 ticks
4.005: Downloading 10 files
4.005: bPatchMode = TRUE
4.005: Inventory complete: ReturnStatus=0, 721 ticks
4.005: Num Ticks for invent : 721
4.216: [dumpDownloadTask] Update.exe posting request file to download a
total of 817599 bytes (373700 bytes in patches and 443899 bytes in fallbacks)
4.216: dumpDownloadTask returned 0xf200 (more files to download)
4.426: KB908531 installation did not complete.
4.426: Update.exe extended error code = 0xf200
2.053:
================================================== ==============================
2.053: 2006/04/17 19:09:20.908 (local)
2.063:
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\43d9eaa0035350527947c80002b5f2e3\update\update. exe (version 6.2.29.0)
2.063: Hotfix started with following command line: /si
/ParentInfo:831fb10a80d3954db953b13ee5ba2a91
3.064: DoInstallation: CleanPFR failed: 0x2
3.074: SetProductTypes: InfProductBuildType=BuildType.IC
3.074: SetAltOsLoaderPath: No section uses DirId 65701; done.
3.144: Express: 817,599 bytes were downloaded.
5.348: [PatchFilesFromResponseBlob] returning STATUS_READY_TO_INSTALL
5.428: KB908531 installation did not complete.
5.428: Update.exe extended error code = 0xf201
4.456:
================================================== ==============================
4.456: 2006/04/18 03:04:01.170 (local)
4.486:
C:\WINDOWS\SoftwareDistribution\Download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.exe (version 6.2.29.0)
4.486: Failed To Enable SE_SHUTDOWN_PRIVILEGE
4.607: Hotfix started with following command line: -q -z -er
/ParentInfo:55af9d64d383a54f85960c2a78a5e498
7.190: ---- Old Information In The Registry ------
7.200: Source:C:\WINDOWS\system32\_000046_.tmp.dll (6.0.2600.0)
7.200: Destination:
7.220: Source:C:\WINDOWS\system32\SET6D.tmp (6.0.2900.2861)
7.230: Destination:C:\WINDOWS\system32\wininet.dll (6.0.2900.2781)
7.250: Source:C:\WINDOWS\system32\SET6E.tmp (6.0.2900.2870)
7.260: Destination:C:\WINDOWS\system32\urlmon.dll (6.0.2900.2790)
7.290: Source:C:\WINDOWS\system32\SET6F.tmp (6.0.2900.2861)
7.300: Destination:C:\WINDOWS\system32\shlwapi.dll (6.0.2900.2781)
7.330: Source:C:\WINDOWS\system32\SET70.tmp (6.0.2900.2877)
7.361: Destination:C:\WINDOWS\system32\shdocvw.dll (6.0.2900.2805)
7.391: Source:C:\WINDOWS\system32\SET74.tmp (6.0.2900.2861)
7.401: Destination:C:\WINDOWS\system32\mshtmled.dll (6.0.2900.2781)
7.421: Source:C:\WINDOWS\system32\SET75.tmp (6.0.2900.2873)
7.431: Destination:C:\WINDOWS\system32\mshtml.dll (6.0.2900.2802)
7.451: Source:C:\WINDOWS\system32\SET77.tmp (6.0.2900.2861)
7.461: Destination:C:\WINDOWS\system32\iepeers.dll (6.0.2900.2781)
7.481: Source:C:\WINDOWS\system32\SET7B.tmp (6.0.2900.2861)
7.491: Destination:C:\WINDOWS\system32\browseui.dll (6.0.2900.2802)
7.511: Source:C:\WINDOWS\system32\SET7D.tmp (5.1.2600.2877)
7.521: Destination:C:\WINDOWS\system32\xpsp3res.dll (5.1.2600.2678)
7.541: Source:C:\Program Files\Common Files\System\MSADC\SET92.tmp
(2.81.1124.0)
7.551: Destination:C:\Program Files\Common Files\System\MSADC\msadco.dll
(2.81.1117.0)
7.551: ---- New Information In The Registry ------
7.551: Source:C:\WINDOWS\system32\_000046_.tmp.dll (6.0.2600.0)
7.551: Destination:
7.551: Source:C:\WINDOWS\system32\SET6D.tmp (6.0.2900.2861)
7.591: Destination:C:\WINDOWS\system32\wininet.dll (6.0.2900.2781)
7.601: Source:C:\WINDOWS\system32\SET6E.tmp (6.0.2900.2870)
7.611: Destination:C:\WINDOWS\system32\urlmon.dll (6.0.2900.2790)
7.611: Source:C:\WINDOWS\system32\SET6F.tmp (6.0.2900.2861)
7.621: Destination:C:\WINDOWS\system32\shlwapi.dll (6.0.2900.2781)
7.631: Source:C:\WINDOWS\system32\SET70.tmp (6.0.2900.2877)
7.641: Destination:C:\WINDOWS\system32\shdocvw.dll (6.0.2900.2805)
7.641: Source:C:\WINDOWS\system32\SET74.tmp (6.0.2900.2861)
7.651: Destination:C:\WINDOWS\system32\mshtmled.dll (6.0.2900.2781)
7.661: Source:C:\WINDOWS\system32\SET75.tmp (6.0.2900.2873)
7.671: Destination:C:\WINDOWS\system32\mshtml.dll (6.0.2900.2802)
7.671: Source:C:\WINDOWS\system32\SET77.tmp (6.0.2900.2861)
7.681: Destination:C:\WINDOWS\system32\iepeers.dll (6.0.2900.2781)
7.691: Source:C:\WINDOWS\system32\SET7B.tmp (6.0.2900.2861)
7.701: Destination:C:\WINDOWS\system32\browseui.dll (6.0.2900.2802)
7.701: Source:C:\WINDOWS\system32\SET7D.tmp (5.1.2600.2877)
7.711: Destination:C:\WINDOWS\system32\xpsp3res.dll (5.1.2600.2678)
7.721: Source:C:\Program Files\Common Files\System\MSADC\SET92.tmp
(2.81.1124.0)
7.731: Destination:C:\Program Files\Common Files\System\MSADC\msadco.dll
(2.81.1117.0)
7.751: SetProductTypes: InfProductBuildType=BuildType.IC
7.751: SetAltOsLoaderPath: No section uses DirId 65701; done.
7.891: CreateUninstall = 1,Directory = C:\WINDOWS\$NtUninstallKB908531$
7.901: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
7.911: ref tag c:\windows\system32\sp4.cab does not exist
7.911: ref tag c:\windows\system32\sp3.cab does not exist
7.911: ref tag c:\windows\system32\sp2.cab does not exist
7.911: ref tag c:\windows\system32\sp1.cab does not exist
7.911: ref tag c:\windows\system32\driver.cab does not exist
7.911: ref tag c:\windows\system32\fp40ext.cab does not exist
7.921: ref tag c:\windows\system32\fp40ext1.cab does not exist
7.921: ref tag c:\windows\system32\wms4.cab does not exist
7.921: ref tag c:\windows\system32\wms41.cab does not exist
7.921: ref tag c:\windows\system32\ims.cab does not exist
7.921: ref tag c:\windows\system32\ims1.cab does not exist
7.921: ref tag c:\windows\system32\ins.cab does not exist
7.921: ref tag c:\windows\system32\ins1.cab does not exist
7.931: Starting AnalyzeComponents
7.931: AnalyzePhaseZero used 0 ticks
7.931: No c:\windows\INF\updtblk.inf file.
7.931: OEM file scan used 0 ticks
7.951: AnalyzePhaseOne: used 20 ticks
7.951: AnalyzeComponents: Hotpatch analysis disabled; skipping.
7.951: AnalyzeComponents: Hotpatching is disabled.
7.951: FindFirstFile c:\windows\$hf_mig$\*.*
8.622: AnalyzeForBranching used 470 ticks.
8.873: AnalyzePhaseTwo used 251 ticks
8.873: AnalyzePhaseThree used 0 ticks
8.873: AnalyzePhaseFive used 0 ticks
8.873: AnalyzePhaseSix used 0 ticks
8.873: AnalyzeComponents used 942 ticks
8.873: Downloading 0 files
8.873: bPatchMode = TRUE
8.873: Inventory complete: ReturnStatus=0, 982 ticks
8.873: Num Ticks for invent : 982
8.903: VerifyTargetFileSize: Unable to verify size as Source = NULL for file
c:\windows\inf\HFX94.tmp
8.903: Copied file: c:\windows\inf\branches.inf
8.903: Allocation size of drive C: is 32768 bytes, free space = 64354942976
bytes
9.023: AnalyzeDiskUsage: Skipping EstimateDiskUsageForUninstall.
9.023: Drive C: free 61373MB req: 37MB w/uninstall: NOT CALCULATED.
9.023: CabinetBuild complete
9.023: Num Ticks for Cabinet build : 150
9.023: DynamicStrings section not defined or empty.
9.063: FileInUse:: Detection disabled.
10.064: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
10.485: Num Ticks for Backup : 1462
11.016: Num Ticks for creating uninst inf : 531
11.316: Registering Uninstall Program for -> KB908531, KB908531 , 0x0
11.316: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
11.356: System Restore Point set.
11.476: Copied file: C:\WINDOWS\system32\spmsg.dll
11.506: PFE2: Not avoiding Per File Exceptions.
11.577: GetCatVersion: Failed to retrieve version information from
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908531.cat with error 0x57
12.077: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update_SP2QFE.inf -> c:\windows\$hf_mig$\KB908531\update\update_SP2QFE. inf.
12.117: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\spuninst.exe -> c:\windows\$hf_mig$\KB908531\spuninst.exe.
12.137: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\spmsg.dll -> c:\windows\$hf_mig$\KB908531\spmsg.dll.
12.147: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\spcustom.dll -> c:\windows\$hf_mig$\KB908531\update\spcustom.dll.
12.187: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\KB908531.CAT -> c:\windows\$hf_mig$\KB908531\update\KB908531.CAT.
12.238: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.exe -> c:\windows\$hf_mig$\KB908531\update\update.exe.
12.248: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\updspapi.dll -> c:\windows\$hf_mig$\KB908531\update\updspapi.dll.
12.268: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.ver -> c:\windows\$hf_mig$\KB908531\update\update.ver.
12.268: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\updatebr.inf -> c:\windows\$hf_mig$\KB908531\update\updatebr.inf.
12.278: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\eula.txt -> c:\windows\$hf_mig$\KB908531\update\eula.txt.
12.278: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\branches.inf -> c:\windows\$hf_mig$\KB908531\update\branches.inf.
12.328: Copied file: C:\WINDOWS\system32\shell32.dll
13.489: Copied file (delayed): C:\WINDOWS\system32\SET95.tmp
13.489: Copied file: C:\WINDOWS\system32\verclsid.exe
13.640: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll
13.750: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\verclsid.exe
13.880: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\shell32.dll
14.601: DoInstallation: Installing assemblies with source root path:
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\
14.601: Num Ticks for Copying files : 3585
14.611: Num Ticks for Reg update and deleting 0 size files : 10
14.611: ---- Old Information In The Registry ------
14.621: Source:C:\WINDOWS\system32\_000046_.tmp.dll (6.0.2600.0)
14.621: Destination:
14.641: Source:C:\WINDOWS\system32\SET6D.tmp (6.0.2900.2861)
14.641: Destination:C:\WINDOWS\system32\wininet.dll (6.0.2900.2781)
14.671: Source:C:\WINDOWS\system32\SET6E.tmp (6.0.2900.2870)
14.681: Destination:C:\WINDOWS\system32\urlmon.dll (6.0.2900.2790)
14.701: Source:C:\WINDOWS\system32\SET6F.tmp (6.0.2900.2861)
14.701: Destination:C:\WINDOWS\system32\shlwapi.dll (6.0.2900.2781)
14.731: Source:C:\WINDOWS\system32\SET70.tmp (6.0.2900.2877)
14.731: Destination:C:\WINDOWS\system32\shdocvw.dll (6.0.2900.2805)
14.761: Source:C:\WINDOWS\system32\SET74.tmp (6.0.2900.2861)
14.761: Destination:C:\WINDOWS\system32\mshtmled.dll (6.0.2900.2781)
14.821: Source:C:\WINDOWS\system32\SET75.tmp (6.0.2900.2873)
14.831: Destination:C:\WINDOWS\system32\mshtml.dll (6.0.2900.2802)
14.851: Source:C:\WINDOWS\system32\SET77.tmp (6.0.2900.2861)
14.861: Destination:C:\WINDOWS\system32\iepeers.dll (6.0.2900.2781)
14.881: Source:C:\WINDOWS\system32\SET7B.tmp (6.0.2900.2861)
14.891: Destination:C:\WINDOWS\system32\browseui.dll (6.0.2900.2802)
14.921: Source:C:\WINDOWS\system32\SET7D.tmp (5.1.2600.2877)
14.921: Destination:C:\WINDOWS\system32\xpsp3res.dll (5.1.2600.2678)
14.951: Source:C:\Program Files\Common Files\System\MSADC\SET92.tmp
(2.81.1124.0)
14.951: Destination:C:\Program Files\Common Files\System\MSADC\msadco.dll
(2.81.1117.0)
15.052: Source:C:\WINDOWS\system32\SET95.tmp (6.0.2900.2869)
15.062: Destination:C:\WINDOWS\system32\shell32.dll (6.0.2900.2763)
15.062: ---- New Information In The Registry ------
15.062: Source:C:\WINDOWS\system32\_000046_.tmp.dll (6.0.2600.0)
15.062: Destination:
15.072: Source:C:\WINDOWS\system32\SET6D.tmp (6.0.2900.2861)
15.072: Destination:C:\WINDOWS\system32\wininet.dll (6.0.2900.2781)
15.082: Source:C:\WINDOWS\system32\SET6E.tmp (6.0.2900.2870)
15.092: Destination:C:\WINDOWS\system32\urlmon.dll (6.0.2900.2790)
15.092: Source:C:\WINDOWS\system32\SET6F.tmp (6.0.2900.2861)
15.112: Destination:C:\WINDOWS\system32\shlwapi.dll (6.0.2900.2781)
15.112: Source:C:\WINDOWS\system32\SET70.tmp (6.0.2900.2877)
15.122: Destination:C:\WINDOWS\system32\shdocvw.dll (6.0.2900.2805)
15.132: Source:C:\WINDOWS\system32\SET74.tmp (6.0.2900.2861)
15.142: Destination:C:\WINDOWS\system32\mshtmled.dll (6.0.2900.2781)
15.142: Source:C:\WINDOWS\system32\SET75.tmp (6.0.2900.2873)
15.152: Destination:C:\WINDOWS\system32\mshtml.dll (6.0.2900.2802)
15.162: Source:C:\WINDOWS\system32\SET77.tmp (6.0.2900.2861)
15.172: Destination:C:\WINDOWS\system32\iepeers.dll (6.0.2900.2781)
15.172: Source:C:\WINDOWS\system32\SET7B.tmp (6.0.2900.2861)
15.182: Destination:C:\WINDOWS\system32\browseui.dll (6.0.2900.2802)
15.192: Source:C:\WINDOWS\system32\SET7D.tmp (5.1.2600.2877)
15.192: Destination:C:\WINDOWS\system32\xpsp3res.dll (5.1.2600.2678)
15.202: Source:C:\Program Files\Common Files\System\MSADC\SET92.tmp
(2.81.1124.0)
15.212: Destination:C:\Program Files\Common Files\System\MSADC\msadco.dll
(2.81.1117.0)
15.222: Source:C:\WINDOWS\system32\SET95.tmp (6.0.2900.2869)
15.222: Destination:C:\WINDOWS\system32\shell32.dll (6.0.2900.2763)
17.375: UpdateSpUpdSvcInf: Source [ProcessesToRunAfterReboot] section is
empty; nothing to do.
17.375: IsRebootRequiredForFileQueue: At least one file operation was
delayed; reboot is required.
If none are listed below, check above for
delayed deletes.
17.375: IsRebootRequiredForFileQueue: c:\windows\system32\shell32.dll was
delayed; reboot is required.
17.375: DoInstallation: A reboot is required to complete the installation of
one or more files.
17.375: UpdateSpUpdSvcInf: Source
[ProcessesToRunAfterReboot.RebootNotRequired] section is empty; nothing to do.
17.405: RebootNecessary = 1,WizardInput = 1 , DontReboot = 1, ForceRestart = 0
3.084:
================================================== ==============================
3.084: 2006/04/19 00:09:28.854 (local)
3.094:
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\43d9eaa0035350527947c80002b5f2e3\update\update. exe (version 6.2.29.0)
3.114: Hotfix started with following command line: /si
/ParentInfo:8a1434b58d064341afac7bd162a60048
5.978: DoInstallation: CleanPFR failed: 0x2
6.008: SetProductTypes: InfProductBuildType=BuildType.IC
6.008: SetAltOsLoaderPath: No section uses DirId 65701; done.
6.159: CreateUninstall = 1,Directory = C:\WINDOWS\$NtUninstallKB908531$
6.169: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
6.199: ref tag c:\windows\system32\sp4.cab does not exist
6.199: ref tag c:\windows\system32\sp3.cab does not exist
6.199: ref tag c:\windows\system32\sp2.cab does not exist
6.199: ref tag c:\windows\system32\sp1.cab does not exist
6.199: ref tag c:\windows\system32\driver.cab does not exist
6.199: ref tag c:\windows\system32\fp40ext.cab does not exist
6.199: ref tag c:\windows\system32\fp40ext1.cab does not exist
6.209: ref tag c:\windows\system32\wms4.cab does not exist
6.209: ref tag c:\windows\system32\wms41.cab does not exist
6.209: ref tag c:\windows\system32\ims.cab does not exist
6.209: ref tag c:\windows\system32\ims1.cab does not exist
6.209: ref tag c:\windows\system32\ins.cab does not exist
6.209: ref tag c:\windows\system32\ins1.cab does not exist
6.209: Starting AnalyzeComponents
6.209: AnalyzePhaseZero used 0 ticks
6.209: No c:\windows\INF\updtblk.inf file.
6.209: OEM file scan used 0 ticks
6.239: AnalyzePhaseOne: used 30 ticks
6.239: AnalyzeComponents: Hotpatch analysis disabled; skipping.
6.239: AnalyzeComponents: Hotpatching is disabled.
6.239: FindFirstFile c:\windows\$hf_mig$\*.*
7.721: AnalyzeForBranching used 170 ticks.
7.771: AnalyzePhaseTwo used 50 ticks
7.771: AnalyzePhaseThree used 0 ticks
7.771: AnalyzePhaseFive used 0 ticks
7.771: AnalyzePhaseSix used 0 ticks
7.771: AnalyzeComponents used 1562 ticks
7.771: Downloading 0 files
7.771: bPatchMode = TRUE
7.771: Inventory complete: ReturnStatus=0, 1612 ticks
7.771: Num Ticks for invent : 1612
7.771: [dumpDownloadTask] We have all necessary files for the package to
install. Return STATUS_READY_TO_INSTALL
7.771: dumpDownloadTask returned 0xf201 (ready to install)
7.921: KB908531 installation did not complete.
7.921: Update.exe extended error code = 0xf201
2.233:
================================================== ==============================
2.233: 2006/04/20 12:59:01.206 (local)
2.243:
C:\WINDOWS\SoftwareDistribution\Download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.exe (version 6.2.29.0)
2.243: Failed To Enable SE_SHUTDOWN_PRIVILEGE
2.243: Hotfix started with following command line: -q -z -er
/ParentInfo:df44d4e29089ef4587b91795b9615d90
5.408: In Function TestVolatileFlag, line 11873, RegOpenKeyEx failed with
error 0x2
5.408: In Function TestVolatileFlag, line 11905, RegOpenKeyEx failed with
error 0x2
5.408: DoInstallation: CleanPFR failed: 0x2
5.438: SetProductTypes: InfProductBuildType=BuildType.IC
5.438: SetAltOsLoaderPath: No section uses DirId 65701; done.
5.598: CreateUninstall = 1,Directory = C:\WINDOWS\$NtUninstallKB908531$
5.608: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
5.638: ref tag c:\windows\system32\sp4.cab does not exist
5.638: ref tag c:\windows\system32\sp3.cab does not exist
5.638: ref tag c:\windows\system32\sp2.cab does not exist
5.638: ref tag c:\windows\system32\sp1.cab does not exist
5.638: ref tag c:\windows\system32\driver.cab does not exist
5.648: ref tag c:\windows\system32\fp40ext.cab does not exist
5.648: ref tag c:\windows\system32\fp40ext1.cab does not exist
5.648: ref tag c:\windows\system32\wms4.cab does not exist
5.648: ref tag c:\windows\system32\wms41.cab does not exist
5.648: ref tag c:\windows\system32\ims.cab does not exist
5.648: ref tag c:\windows\system32\ims1.cab does not exist
5.648: ref tag c:\windows\system32\ins.cab does not exist
5.648: ref tag c:\windows\system32\ins1.cab does not exist
5.648: Starting AnalyzeComponents
5.648: AnalyzePhaseZero used 0 ticks
5.658: No c:\windows\INF\updtblk.inf file.
5.658: OEM file scan used 0 ticks
5.708: AnalyzePhaseOne: used 60 ticks
5.708: AnalyzeComponents: Hotpatch analysis disabled; skipping.
5.708: AnalyzeComponents: Hotpatching is disabled.
5.708: FindFirstFile c:\windows\$hf_mig$\*.*
7.521: AnalyzeForBranching used 441 ticks.
7.721: AnalyzePhaseTwo used 200 ticks
7.721: AnalyzePhaseThree used 0 ticks
7.721: AnalyzePhaseFive used 0 ticks
7.721: AnalyzePhaseSix used 0 ticks
7.721: AnalyzeComponents used 2073 ticks
7.721: Downloading 0 files
7.721: bPatchMode = TRUE
7.721: Inventory complete: ReturnStatus=0, 2123 ticks
7.731: Num Ticks for invent : 2133
7.751: VerifyTargetFileSize: Unable to verify size as Source = NULL for file
c:\windows\inf\HFX4E.tmp
7.781: Copied file: c:\windows\inf\branches.inf
7.791: Allocation size of drive C: is 32768 bytes, free space = 63929286656
bytes
7.871: AnalyzeDiskUsage: Skipping EstimateDiskUsageForUninstall.
7.871: Drive C: free 60967MB req: 37MB w/uninstall: NOT CALCULATED.
7.871: CabinetBuild complete
7.871: Num Ticks for Cabinet build : 140
7.871: DynamicStrings section not defined or empty.
7.951: FileInUse:: Detection disabled.
8.953: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
9.384: Num Ticks for Backup : 1513
9.474: Num Ticks for creating uninst inf : 90
9.484: Registering Uninstall Program for -> KB908531, KB908531 , 0x0
9.484: LoadFileQueues: UpdSpGetSourceFileLocation for halacpi.dll failed:
0xe0000102
9.524: System Restore Point set.
9.704: Copied file: C:\WINDOWS\system32\spmsg.dll
9.724: PFE2: Not avoiding Per File Exceptions.
9.804: GetCatVersion: Failed to retrieve version information from
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908531.cat with error 0x57
10.485: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update_SP2QFE.inf -> c:\windows\$hf_mig$\KB908531\update\update_SP2QFE. inf.
10.505: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\spuninst.exe -> c:\windows\$hf_mig$\KB908531\spuninst.exe.
10.515: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\spmsg.dll -> c:\windows\$hf_mig$\KB908531\spmsg.dll.
10.525: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\spcustom.dll -> c:\windows\$hf_mig$\KB908531\update\spcustom.dll.
10.535: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\KB908531.CAT -> c:\windows\$hf_mig$\KB908531\update\KB908531.CAT.
10.595: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.exe -> c:\windows\$hf_mig$\KB908531\update\update.exe.
10.615: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\updspapi.dll -> c:\windows\$hf_mig$\KB908531\update\updspapi.dll.
10.625: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\update.ver -> c:\windows\$hf_mig$\KB908531\update\update.ver.
10.625: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\updatebr.inf -> c:\windows\$hf_mig$\KB908531\update\updatebr.inf.
10.635: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\eula.txt -> c:\windows\$hf_mig$\KB908531\update\eula.txt.
10.635: ProcessSetupContentSection: PROCESS_SETUP_CONTENT_OP_INSTALL: Copied
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\update\branches.inf -> c:\windows\$hf_mig$\KB908531\update\branches.inf.
10.755: Copied file: C:\WINDOWS\system32\shell32.dll
11.947: Copied file (delayed): C:\WINDOWS\system32\SET4F.tmp
11.947: Copied file: C:\WINDOWS\system32\verclsid.exe
12.087: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll
12.208: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\verclsid.exe
12.318: Copied file: c:\windows\$hf_mig$\KB908531\SP2QFE\shell32.dll
13.059: DoInstallation: Installing assemblies with source root path:
c:\windows\softwaredistribution\download\73a765a7e bf2e1b5a6655f2bb798b30f\
13.059: Num Ticks for Copying files : 3585
13.069: Num Ticks for Reg update and deleting 0 size files : 10
13.079: ---- Old Information In The Registry ------
13.139: Source:C:\WINDOWS\system32\SET4F.tmp (6.0.2900.2869)
13.139: Destination:C:\WINDOWS\system32\shell32.dll (6.0.2900.2763)
13.139: ---- New Information In The Registry ------
13.149: Source:C:\WINDOWS\system32\SET4F.tmp (6.0.2900.2869)
13.159: Destination:C:\WINDOWS\system32\shell32.dll (6.0.2900.2763)
16.754: UpdateSpUpdSvcInf: Source [ProcessesToRunAfterReboot] section is
empty; nothing to do.
16.754: IsRebootRequiredForFileQueue: At least one file operation was
delayed; reboot is required.
If none are listed below, check above for
delayed deletes.
16.754: IsRebootRequiredForFileQueue: c:\windows\system32\shell32.dll was
delayed; reboot is required.
16.754: DoInstallation: A reboot is required to complete the installation of
one or more files.
16.754: In Function SetVolatileFlag, line 11789, RegOpenKeyEx failed with
error 0x2
16.754: In Function SetVolatileFlag, line 11806, RegOpenKeyEx failed with
error 0x2
16.754: UpdateSpUpdSvcInf: Source
[ProcessesToRunAfterReboot.RebootNotRequired] section is empty; nothing to do.
16.844: RebootNecessary = 1,WizardInput = 1 , DontReboot = 1, ForceRestart = 0
2.203:
================================================== ==============================

I couldn't fit all of it so let me know if you want the rest ? ? ?

Joe

"Maurice N ~ MVP" wrote:

> I've heard of one specific case ( not saying that there are not others.)
> Did you try "disabling" your antivirus (using MSCONFIG) before attempting System Restore. If not, please do that.
>
> This update had some especially significant updates to core files of the operating system.
> Some anitivirus (possibly some security suites) are very sensitive & over-aggressive about versions of system files or changes to system files.
>
> If that still does not work, Use Windows Explorer, find, and look at contents of file KB908531.log
> If found, attach a copy of it in a reply here.
>
> This log file should be in your Windows folder (usually C:\WINNT or C:\Windows )
>
> After your done with System Restore, re-enable your antivirus.
> --
> Maurice N
> MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
> -----
>
> "jw14225" wrote in message news:FCDB91CC-54D6-4560-AC95-...
> > Has anyone tried using "System Restore" since this latest security update
> > that everyone is having trouble with. I'm running XP SP2 and it used to work
> > perfectly then since this update - if I try to run it, when windows restarts
> > -the message given is that it cant restore to the point I've chosen .... in
> > fact I get the same response no matter what restore point I choose and it
> > wont let me go back to any previous month as it worked in the past ? ? ? Any
> > Suggestions ? ? ?
> >
> > Joe
>

Yes I have and I have exactly same problem. Thing is I'm a computer idiot (an
elderly female) and hate to live without my System Restore. I wont try the
Antivirus suspending as another person tried it and it did not work. So WHAT
CAN WE DO NOW

"jw14225" wrote:

> Has anyone tried using "System Restore" since this latest security update
> that everyone is having trouble with. I'm running XP SP2 and it used to work
> perfectly then since this update - if I try to run it, when windows restarts
> -the message given is that it cant restore to the point I've chosen ... in
> fact I get the same response no matter what restore point I choose and it
> wont let me go back to any previous month as it worked in the past ? ? ? Any
> Suggestions ? ? ?
>
> Joe

I don't accept your statement on being an idiot. :0)

When you look at your Taskbar, at the area next to the time clock, that's called the System Notification area.
Do you see the icon for your antivirus program? (If lost, "hover" your mouse over each icon. You'll see a balloon with description.)

When your antivirus icon is found, do a RIGHT-click on it, then usually there is an option to terminate / or exit / or disable.
That's one way to do it.

If and only if you still cannot use System Restore, and you need to use it right away, consider removing KB908531 update.
To remove windows update KB908531, do the following:

Go to Control Panel, then select "Add or Remove Programs".

Be sure the "Change or Remove Programs" is active / highlighted (at top left of window).

Then look at "Show updates" checkbox (at top). Make sure it is selected (ticked).

Once the display is populated, scroll down to "Security Update for Windows XP (KB908531)". It should be near the bottom of the list.

Click on that item. You'll see a Remove button. Click on it if you wish to have it removed.

If you have any questions at all, do not hesitate to post back here.

--
Maurice N
MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
-----

"Sulamite3" wrote in message news:1A748C2A-5382-4245-B5A7-...
> Yes I have and I have exactly same problem. Thing is I'm a computer idiot (an
> elderly female) and hate to live without my System Restore. I wont try the
> Antivirus suspending as another person tried it and it did not work. So WHAT
> CAN WE DO NOW
>
> "jw14225" wrote:
>
>> Has anyone tried using "System Restore" since this latest security update
>> that everyone is having trouble with. I'm running XP SP2 and it used to work
>> perfectly then since this update - if I try to run it, when windows restarts
>> -the message given is that it cant restore to the point I've chosen .... in
>> fact I get the same response no matter what restore point I choose and it
>> wont let me go back to any previous month as it worked in the past ? ? ? Any
>> Suggestions ? ? ?
>>
>> Joe

P.S. Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY.
There is no charge for support calls that are associated with security updates.

• International customers can receive support from their local Microsoft subsidiaries. There is no charge for support that is associated with security updates.
For more information about how to contact Microsoft for support issues, visit the International Support Web site,
http://go.microsoft.com/fwlink/?LinkId=21155


--
Maurice N
MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
-----


"Sulamite3" wrote in message news:1A748C2A-5382-4245-B5A7-...
> Yes I have and I have exactly same problem. Thing is I'm a computer idiot (an
> elderly female) and hate to live without my System Restore. I wont try the
> Antivirus suspending as another person tried it and it did not work. So WHAT
> CAN WE DO NOW
>

I am having the same problem and will try to fix now. Thanks for the step by
step information. I first heard of the problem on the Kim Komando show
yesterday so I was ready for this

"jw14225" wrote:

> Has anyone tried using "System Restore" since this latest security update
> that everyone is having trouble with. I'm running XP SP2 and it used to work
> perfectly then since this update - if I try to run it, when windows restarts
> -the message given is that it cant restore to the point I've chosen ... in
> fact I get the same response no matter what restore point I choose and it
> wont let me go back to any previous month as it worked in the past ? ? ? Any
> Suggestions ? ? ?
>
> Joe

Thank you so much for your answer. I'll remove KB908531 to start with, and
see what happens - then suspend my Norton Works. If I get a positive result
I'll report. Thanks again.
Sulamite3

"Maurice N ~ MVP" wrote:

> I don't accept your statement on being an idiot. :0)
>
> When you look at your Taskbar, at the area next to the time clock, that's called the System Notification area.
> Do you see the icon for your antivirus program? (If lost, "hover" your mouse over each icon. You'll see a balloon with description.)
>
> When your antivirus icon is found, do a RIGHT-click on it, then usually there is an option to terminate / or exit / or disable.
> That's one way to do it.
>
> If and only if you still cannot use System Restore, and you need to use it right away, consider removing KB908531 update.
> To remove windows update KB908531, do the following:
>
> Go to Control Panel, then select "Add or Remove Programs".
>
> Be sure the "Change or Remove Programs" is active / highlighted (at top left of window).
>
> Then look at "Show updates" checkbox (at top). Make sure it is selected (ticked).
>
> Once the display is populated, scroll down to "Security Update for Windows XP (KB908531)". It should be near the bottom of the list.
>
> Click on that item. You'll see a Remove button. Click on it if you wish to have it removed.
>
> If you have any questions at all, do not hesitate to post back here.
>
> --
> Maurice N
> MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
> -----
>
> "Sulamite3" wrote in message news:1A748C2A-5382-4245-B5A7-...
> > Yes I have and I have exactly same problem. Thing is I'm a computer idiot (an
> > elderly female) and hate to live without my System Restore. I wont try the
> > Antivirus suspending as another person tried it and it did not work. So WHAT
> > CAN WE DO NOW
> >
> > "jw14225" wrote:
> >
> >> Has anyone tried using "System Restore" since this latest security update
> >> that everyone is having trouble with. I'm running XP SP2 and it used to work
> >> perfectly then since this update - if I try to run it, when windows restarts
> >> -the message given is that it cant restore to the point I've chosen .... in
> >> fact I get the same response no matter what restore point I choose and it
> >> wont let me go back to any previous month as it worked in the past ? ? ? Any
> >> Suggestions ? ? ?
> >>
> >> Joe
>

Thanks MauriceN for trying to help: it did not work, even shutting down
Everything and removing KB908531 (which Microsoft now wants to re-install).
Microsoft should be "shot" for causing troble to so many people.
Sulamite3

"Maurice N ~ MVP" wrote:

> I don't accept your statement on being an idiot. :0)
>
> When you look at your Taskbar, at the area next to the time clock, that's called the System Notification area.
> Do you see the icon for your antivirus program? (If lost, "hover" your mouse over each icon. You'll see a balloon with description.)
>
> When your antivirus icon is found, do a RIGHT-click on it, then usually there is an option to terminate / or exit / or disable.
> That's one way to do it.
>
> If and only if you still cannot use System Restore, and you need to use it right away, consider removing KB908531 update.
> To remove windows update KB908531, do the following:
>
> Go to Control Panel, then select "Add or Remove Programs".
>
> Be sure the "Change or Remove Programs" is active / highlighted (at top left of window).
>
> Then look at "Show updates" checkbox (at top). Make sure it is selected (ticked).
>
> Once the display is populated, scroll down to "Security Update for Windows XP (KB908531)". It should be near the bottom of the list.
>
> Click on that item. You'll see a Remove button. Click on it if you wish to have it removed.
>
> If you have any questions at all, do not hesitate to post back here.
>
> --
> Maurice N
> MS-MVP Windows (Shell / User), Aumha.net VSOP , DTS-L
> -----
>
> "Sulamite3" wrote in message news:1A748C2A-5382-4245-B5A7-...
> > Yes I have and I have exactly same problem. Thing is I'm a computer idiot (an
> > elderly female) and hate to live without my System Restore. I wont try the
> > Antivirus suspending as another person tried it and it did not work. So WHAT
> > CAN WE DO NOW
> >
> > "jw14225" wrote:
> >
> >> Has anyone tried using "System Restore" since this latest security update
> >> that everyone is having trouble with. I'm running XP SP2 and it used to work
> >> perfectly then since this update - if I try to run it, when windows restarts
> >> -the message given is that it cant restore to the point I've chosen .... in
> >> fact I get the same response no matter what restore point I choose and it
> >> wont let me go back to any previous month as it worked in the past ? ? ? Any
> >> Suggestions ? ? ?
> >>
> >> Joe
>