open files and the winlogon process

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Using Process Explorer form sysinternals, I see a bunch of directories for things that shouldn't exist on my XP in use. For instance:
program files/msn gaming zone
program files/frontpage
windows/xerox
and a bunch more.

So, since these dirs were in use when trying to delete them, and most were empty, I found winlogon.exe was using them and closed the handles and renamed the dirs out of the way. On the next boot, XP (winlogon perhaps did this?) recreated all the dirs and winlogon has them open (and empty as most were to begin with). My renamed ones still sit there too.

I searched the registry, and they weren't listed as or in keys, so they must be hard coded, right? Why does it spend time openning these (or creating them) when I have nothing from Xerox, don't use anything MSN, and never had Frontpage??

There are others too. Any idea why and how to change this behavior??
Thanks.
 
You may think they shouldn't exist, but the three folders you named are part
of the Windows XP operating system.

Rocky

skipc10 said:
Using Process Explorer form sysinternals, I see a bunch of directories for
things that shouldn't exist on my XP in use. For instance:
program files/msn gaming zone
program files/frontpage
windows/xerox
and a bunch more.

So, since these dirs were in use when trying to delete them, and most were
empty, I found winlogon.exe was using them and closed the handles and
renamed the dirs out of the way. On the next boot, XP (winlogon perhaps did
this?) recreated all the dirs and winlogon has them open (and empty as most
were to begin with). My renamed ones still sit there too.
I searched the registry, and they weren't listed as or in keys, so they
must be hard coded, right? Why does it spend time openning these (or
creating them) when I have nothing from Xerox, don't use anything MSN, and
never had Frontpage??
 
| "skipc10" <[email protected]>
| wrote in message | Using Process Explorer form sysinternals, I see a bunch of
| directories for things that shouldn't exist on my XP in use.
| For instance:
|
| program files/msn gaming zone
| program files/frontpage
| windows/xerox
| and a bunch more.
|
| So, since these dirs were in use when trying to delete them,
| and most were empty, I found winlogon.exe was using them
| and closed the handles and renamed the dirs out of the way.
| On the next boot, XP (winlogon perhaps did this?)
| recreated all the dirs and winlogon has them open (and
| empty as most were to begin with). My renamed ones still sit
| there too.
|
| I searched the registry, and they weren't listed as or in keys,
| so they must be hard coded, right? Why does it spend time
| openning these (or creating them) when I have nothing from
| Xerox, don't use anything MSN, and never had
| Frontpage??
|
| There are others too. Any idea why and how to change this
| behavior?? Thanks.

See the following Microsoft Knowledge Base Article:

KB281449 - Error Message Occurs When You Attempt to
Delete Folders
http://support.microsoft.com/default.aspx?Product=winxp&scid=kb;en-us;281449

Although Windows XP is not listed in the "applies to:" section
I am certain that the KB article actually does apply to WinXP.

As KB281449 states: "Windows File Protection (WFP) handles
the folders [ %ProgramFiles%\Microsoft FrontPage, etc.]
under the Winlogon process", so...

For an unofficial list of the files and folders protected by
WFP click the link in the following Google Groups archived
newsgroup post. BTW, since the link is to a text file it is safe.

Google Groups Link to Archived Newsgroup Post:
http://www.google.com/groups?&as_umsgid=<#[email protected]

----- Begin Original Message -----
From: "Jim Carlock" <[email protected]>
Subject: sfcfiles.txt
Date: Tue, 20 Apr 2004 23:17:22 -0400
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.windowsxp.general

List of files inside of sfcfiles.dll on Windows XP Pro.

http://www.microcosmotalk.com/tech/vb/wfp/SFCList.txt

Hope this is helpful to someone. It's just a simple text file
listing all the files contained inside of sfcfiles.dll. <SNIP>
----- End Original Message -----
 
Hi, Skip.

While I have no "inside information" on this subject, my suspicion is that
some of these - the Xerox folder, for example - may relate more to legal and
contractual issues than to Computer Science. But that's only a guess.

RC
 
Thanks, I was beginning to suspect it was part of that deal, but the msn and xerox ones are odd... The system came preinstalled, and with only a total image replacement CD, so no install CD for XP other than the i386 dir... and the dirs have been empty all along, but everything seems to be fine.

I don't see any attachment here though... I got from your post that you included one of the possible watched files (imitation) and the ListWFPFiles.exe prog, but can't see a link or anything....

Thanks.
 
There they are! I wonder how/why it seems to be getting along since the beginning without them. It's a preinstalled image. Thanks for the answer.
 
I was beginning to suspect this... What an odd bunch of files that XP seems to want to keep sacred!

I don't see any attachments to your post though... Am I missing them?

Thanks.
 
sorry for the duplicate post. the server said the first one failed, I wrote the second, then both show up!!
 
|| "David Candy" <[email protected]>
|| wrote in message || This program (ListWFPFiles.exe - new build to sort the list)
|| shows files are being monitored. <SNIP>

| "skipc10" <[email protected]>
| wrote in message | <SNIP> I don't see any attachment here though... <SNIP>

The X-Newsreader line (Microsoft CDO for Windows
2000) in the header for your newsgroup post seems to
indicate that you are posting to the Microsoft Public
Newsgroups using the Microsoft Communities Web Page. If
that is correct then you will not be able to "see any
attachment"...
 
Hi, Skip.

As Carrie said, you won't see ANY attachments when you use the Web-based
Interface to the Discussion Groups. But, if you are not prevented (by
corporate policy or firewall, for instance), you can use Outlook Express (or
a third-party newsreader of your choice) to read and participate in these
newsgroups.

Click here:
news://msnews.microsoft.com/microsoft.public.windowsxp.perform_maintain

That should open OE, create the news Account for you, subscribe you to THIS
newsgroup, and download 300 new headers for you.

Then you can find this thread and continue it. When you find David's
message, you should see a paperclip icon indicating that there is an
attachment. Clicking on the attachment probably will produce a message that
access to attachments has been denied to protect you from possibly-harmful
attachments. Click Tools | Options..., then the Security tab, and remove
the check from the box that says, "Do not allow attachments to be saved or
opened that could potentially be a virus." After downloading David's
attachment, go back and check this box again to protect against
inadvertently opening posts from other, less-benign, senders.

You might find that you like OE's method of reading these groups better than
the Web-based interface. ;<) Click Newsgroups and Reset List to get the
full list of over 2,000 newsgroups (in many languages) that are available
and subscribe to as many as you like.

RC
 
Back
Top