Guten Tag Branko Čibej,
am Mittwoch, 17. Juli 2019 um 16:04 schrieben Sie:

> I suggest you turn off your virus scanner and try again.

I've ran into a possibly related issue described more detailed at the
following places:

http://mail-archives.apache.org/mod_mbox/perl-modperl/201907.mbox/%3C1649095749.20190731190733%40am-soft.de%3E
https://bz.apache.org/bugzilla/show_bug.cgi?id=51560#c5

During my tests Windows Defender has been disabled by group policy and
the files I used in my tests weren't newly created anway as well. So I
don't think this has to do with AV-software, especially looking at my
logs of Process Monitor providing the following:

> 18:12:09,8557370      httpd.exe       20396   CreateFile      C:\Program 
> Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.14.39.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\ntmarta.dll.mui
>   SUCCESS Desired Access: Generic Read, Disposition: Open, Options: , 
> Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: 
> Opened
> 18:12:09,8557889      httpd.exe       20396   CreateFileMapping       
> C:\Program 
> Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.14.39.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\ntmarta.dll.mui
>   FILE LOCKED WITH ONLY READERS   SyncType: SyncTypeCreateSection, 
> PageProtection: PAGE_EXECUTE|PAGE_NOCACHE
> 18:12:09,8558183      httpd.exe       20396   QueryStandardInformationFile    
> C:\Program 
> Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.14.39.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\ntmarta.dll.mui
>   SUCCESS AllocationSize: 16.384, EndOfFile: 14.720, NumberOfLinks: 1, 
> DeletePending: False, Directory: False
> 18:12:09,8558750      httpd.exe       20396   CreateFileMapping       
> C:\Program 
> Files\WindowsApps\Microsoft.LanguageExperiencePackde-DE_17763.14.39.0_neutral__8wekyb3d8bbwe\Windows\System32\de-DE\ntmarta.dll.mui
>   SUCCESS SyncType: SyncTypeOther
> 18:12:09,8562021      httpd.exe       20396   CreateFile      C:\Program 
> Files\Apache Software Foundation\httpd\bin\logoncli.dll      NAME NOT FOUND  
> Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse 
> Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
> 18:12:09,8564963      httpd.exe       20396   CreateFile      
> C:\Windows\System32\logoncli.dll        SUCCESS Desired Access: Read 
> Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, 
> ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
> 18:12:09,8565506      httpd.exe       20396   QueryBasicInformationFile       
> C:\Windows\System32\logoncli.dll        SUCCESS CreationTime: 15.09.2018 
> 09:28:46, LastAccessTime: 15.09.2018 09:28:46, LastWriteTime: 15.09.2018 
> 09:28:46, ChangeTime: 18.12.2018 14:29:50, FileAttributes: A
> 18:12:09,8565821      httpd.exe       20396   CloseFile       
> C:\Windows\System32\logoncli.dll        SUCCESS 
> 18:12:09,8567588      httpd.exe       20396   CreateFile      
> C:\Windows\System32\logoncli.dll        SUCCESS Desired Access: Read 
> Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, 
> Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, 
> ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
> 18:12:09,8568147      httpd.exe       20396   CreateFileMapping       
> C:\Windows\System32\logoncli.dll        FILE LOCKED WITH ONLY READERS   
> SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE
> 18:12:09,8568718      httpd.exe       20396   CreateFileMapping       
> C:\Windows\System32\logoncli.dll        SUCCESS SyncType: SyncTypeOther
> 18:12:09,8570352      httpd.exe       20396   CloseFile       
> C:\Windows\System32\logoncli.dll        SUCCESS 
> 18:12:09,8577214      httpd.exe       20396   CreateFile      C:\Program 
> Files\Apache Software Foundation\httpd\bin\netutils.dll      NAME NOT FOUND  
> Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse 
> Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
> 18:12:09,8580361      httpd.exe       20396   CreateFile      
> C:\Windows\System32\netutils.dll        SUCCESS Desired Access: Read 
> Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, 
> ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
> 18:12:09,8581042      httpd.exe       20396   QueryBasicInformationFile       
> C:\Windows\System32\netutils.dll        SUCCESS CreationTime: 15.09.2018 
> 09:28:46, LastAccessTime: 15.09.2018 09:28:46, LastWriteTime: 15.09.2018 
> 09:28:46, ChangeTime: 18.12.2018 14:29:37, FileAttributes: A
> 18:12:09,8581470      httpd.exe       20396   CloseFile       
> C:\Windows\System32\netutils.dll        SUCCESS 
> 18:12:09,8583470      httpd.exe       20396   CreateFile      
> C:\Windows\System32\netutils.dll        SUCCESS Desired Access: Read 
> Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, 
> Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, 
> ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
> 18:12:09,8584031      httpd.exe       20396   CreateFileMapping       
> C:\Windows\System32\netutils.dll        FILE LOCKED WITH ONLY READERS   
> SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE|PAGE_NOCACHE
> 18:12:09,8584618      httpd.exe       20396   CreateFileMapping       
> C:\Windows\System32\netutils.dll        SUCCESS SyncType: SyncTypeOther
> 18:12:09,8586230      httpd.exe       20396   CloseFile       
> C:\Windows\System32\netutils.dll        SUCCESS 
> 18:12:09,8622225      httpd.exe       20396   CreateFile      
> \\VORDEFINIERT*\MAILSLOT\NET\NETLOGON   SUCCESS Desired Access: Generic 
> Write, Read Attributes, Disposition: OpenIf, Options: Synchronous IO 
> Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, 
> AllocationSize: 0, OpenResult: Superseded
> 18:12:09,8622960      httpd.exe       20396   WriteFile       
> \\VORDEFINIERT*\MAILSLOT\NET\NETLOGON   BAD NETWORK PATH        Offset: 0, 
> Length: 78, Priority: Normal
> 18:12:23,4057050      httpd.exe       20396   CloseFile       
> \\VORDEFINIERT*\MAILSLOT\NET\NETLOGON   SUCCESS 
> 18:12:23,4094073      httpd.exe       20396   CreateFile      
> \\VORDEFINIERT*\MAILSLOT\NET\NETLOGON   SUCCESS Desired Access: Generic 
> Write, Read Attributes, Disposition: OpenIf, Options: Synchronous IO 
> Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, 
> AllocationSize: 0, OpenResult: Superseded
> 18:12:23,4095101      httpd.exe       20396   WriteFile       
> \\VORDEFINIERT*\MAILSLOT\NET\NETLOGON           Offset: 0, Length: 78, 
> Priority: Normal

Mit freundlichen Grüßen,

Thorsten Schöning

-- 
Thorsten Schöning       E-Mail: thorsten.schoen...@am-soft.de
AM-SoFT IT-Systeme      http://www.AM-SoFT.de/

Telefon...........05151-  9468- 55
Fax...............05151-  9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow

Reply via email to