Ask a new question

Unable to install updates due to "open or in use" ntoskrnl.exe

After failed automatic updates, I have downloaded the following patches:

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB2393802)

Neither will install, and they both fail with the same error, "The file c:\windows\system32\ntoskrnl.exe is open or in use by another application."

This is a laptop with Windows XP Home Version 2002, SP3.

Any thoughts?

Manually download and save both of the updates:

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB2393802)

Next, disconnect the system from it's internet connection as the updates are already downloaded.

Then configure the system to Clean boot - How to configure Windows XP to start in a "clean boot" state

With the system restarted to the Clean boot state, click Start > Run . If Run is not available on the Start Menu, press theWindows key and the R keysimultaneously

Clilck the Browse button and navigate to where KB956572 (WindowsXP-KB956572-x86-ENU.exe) is located, then click once on it to highlight it, then click the Open button.

In the Open: line you need to add a space and then/o ( the letter o, not the number 0 ) to theend of the command line shown.

EX: If the updates were download to a Download folder on C:\, the run line will appear as

"C:\Download\WindowsXP-KB956572-x86-ENU.exe" /o

If the updates were downloaded to the Desktop

"C:\Documents and Settings\<UserAccountName>\Desktop\WindowsXP-KB956572-x86-ENU.exe" /o

Then click OK or press Enter. Restart afterwards.
Then do the same for KB2393802 and restart once again.

Undo the Clean boot configuration steps, restart one more time.
Reconnect the system to the internet now.

If the updates still fails to install them either post the contents of the KB956572.log and the KB2393802.log, which are located in Windows or, visit the Microsoft Virus Solution and Security Center for resources and tools to keep your PC safe and healthy. If you are having issues with installing the update itself, visit Support for Microsoft Update for resources and tools to keep your PC updated with the latest updates. 

 

MowGreen

*-343 FDNY -*
Never Forgotten

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thanks for the info. 

I have tried this and the updates still fail. I have posted the most recent entries in these files in this posting. The whole files are posted here: http://www.briceg.com/updates/.

These don't display very well here...

[KB2393802.log] 1.703: ================================================================================ 1.718: 2011/06/19 17:47:51.093 (local) 1.718: c:\645e2656ad491684f7e09f60dc\update\update.exe (version 6.3.13.0) 1.750: DoInstallation: GetProcAddress(InitializeCustomizationDLL) Returned: 0x7f 1.828: Hotfix started with following command line: /o 1.828: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2 1.937: CreateUserInterface: GetProcAddress for DefineInstallCustomUI failed: 0x7f 2.031: Return Value From MpSysCheck = 1 2.031: MpSysCheck returned 441092 2.031: Return Value From MpSysCheck = 1 2.031: MpSysCheck returned value( 0x1 ) which is Equal To 0x1 2.031: Condition succeeded for section MagicTrap.Check.Condition in Line 1 of PreRequisite 2.765: In Function TestVolatileFlag, line 11825, RegOpenKeyEx failed with error 0x2 2.765: In Function TestVolatileFlag, line 11857, RegOpenKeyEx failed with error 0x2 2.765: DoInstallation: CleanPFR failed: 0x2 2.765: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2 2.765: SetProductTypes: InfProductBuildType=BuildType.IC 2.765: SetAltOsLoaderPath: No section uses DirId 65701; done. 2.828: DoInstallation: FetchSourceURL for c:\645e2656ad491684f7e09f60dc\update\update_SP3GDR.inf failed 2.828: LoadFileQueues: UpdSpGetSourceFileLocation for halaacpi.dll failed: 0xe0000102 2.828: BuildCabinetManifest: update.url absent 2.828: Starting AnalyzeComponents 2.828: AnalyzePhaseZero used 0 ticks 2.828: No c:\windows\INF\updtblk.inf file. 2.828: User specified '-o'; ignoring any OEM driver files. 5.359: Message displayed to the user: The file c:\windows\system32\ntoskrnl.exe is open or in use by another application. Close all other applications and then click Retry. 5.359: User Input: RETRY 7.625: Message displayed to the user: The file c:\windows\system32\ntoskrnl.exe is open or in use by another application. Close all other applications and then click Retry. 7.625: User Input: CANCEL 10.062: Message displayed to the user: Are you sure you want to cancel? 10.062: User Input: YES 10.062: AnalyzePhaseOne: used 7234 ticks 10.062: GlobalErrorReturnCode set to 1359 (0x54f) 10.062: AnalyzeComponents: Cancelled 10.062: Inventory complete: ReturnStatus=1359, 7234 ticks 11.921: An internal error occurred. 13.140: Message displayed to the user: An internal error occurred. 13.140: User Input: OK 13.156: KB2393802 installation did not complete. 13.734: Message displayed to the user: KB2393802 installation did not complete. 13.734: User Input: OK 13.734: Update.exe extended error code = 0x54f 13.734: Update.exe return code was masked to 0x643 for MSI custom action compliance. [KB956572.log] 1.109: ================================================================================ 19.625: 2011/06/19 17:42:20.109 (local) 19.625: c:\84be3f3cf8824bdb87e3354c70\update\update.exe (version 6.3.13.0) 19.719: Hotfix started with following command line: /o 19.719: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2 25.484: In Function TestVolatileFlag, line 11825, RegOpenKeyEx failed with error 0x2 25.484: In Function TestVolatileFlag, line 11857, RegOpenKeyEx failed with error 0x2 25.484: DoInstallation: CleanPFR failed: 0x2 25.484: In Function GetReleaseSet, line 1240, RegQueryValueEx failed with error 0x2 25.484: SetProductTypes: InfProductBuildType=BuildType.IC 25.500: SetAltOsLoaderPath: No section uses DirId 65701; done. 26.047: DoInstallation: FetchSourceURL for c:\84be3f3cf8824bdb87e3354c70\update\update_SP3GDR.inf failed 26.047: CreateUninstall = 1,Directory = C:\WINDOWS\$NtUninstallKB956572$ 26.062: LoadFileQueues: UpdSpGetSourceFileLocation for halaacpi.dll failed: 0xe0000102 26.125: BuildCabinetManifest: update.url absent 26.125: Starting AnalyzeComponents 26.125: AnalyzePhaseZero used 0 ticks 26.125: No c:\windows\INF\updtblk.inf file. 26.125: User specified '-o'; ignoring any OEM driver files. 30.281: Message displayed to the user: The file c:\windows\system32\ntoskrnl.exe is open or in use by another application. Close all other applications and then click Retry. 30.281: User Input: RETRY 30.750: Message displayed to the user: The file c:\windows\system32\ntoskrnl.exe is open or in use by another application. Close all other applications and then click Retry. 34.422: User Input: CANCEL 38.078: Message displayed to the user: Are you sure you want to cancel? 38.078: User Input: YES 38.078: AnalyzePhaseOne: used 11953 ticks 38.078: GlobalErrorReturnCode set to 1359 (0x54f) 38.078: AnalyzeComponents: Cancelled 38.078: Inventory complete: ReturnStatus=1359, 12031 ticks 38.078: Num Ticks for invent : 12031 38.500: An internal error occurred. 39.656: Message displayed to the user: An internal error occurred. 39.656: User Input: OK 39.656: KB956572 installation did not complete. 40.312: Message displayed to the user: KB956572 installation did not complete. 40.312: User Input: OK 40.312: Update.exe extended error code = 0x54f 40.312: Update.exe return code was masked to 0x643 for MSI custom action compliance.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I had this same problem. It turned out I had a boot sector virus ("rootkit") that had managed to survive an Acer factory reset. Microsoft support fixed the problem for free.  It took about half an hour.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

[SOLVED] You are infected with a rootkit virus. Reboot computer with Windows XP CD. go into recovery console. Type Fixboot (make sure it is fixing c drive) and then do fixmbr. Now the masterboot record has been repaired and the rootkit is gone. I would download avast, update it, do a boot time scan and then do sp3 install and you are good to go.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I tried all above on my XP laptop.  Repairing the boot record seemed to do the trick.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info

Last updated May 4, 2021 Views 5,042 Applies to: