TDirectory - file lock out on Win 10 LTSC

[Kas Ob. 126]

2 minutes ago, Roger Cigol said:

@Kas Ob.   My actual app is a 32 bit exe - will the 64bit WinObjEx64 still be ok to help us (you!) get to the bottom of this ?

 

 

It doesn't matter, and yes it will help if no object with that name exist then the problem is in the middle between use mode and user-mode driver.

[Kas Ob. 126]

Expanding a little on drivers and services, internally all drivers are called services and they configured and launched from one location in the registry 

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Except the OS kernel itself which loaded and hardcoded to load at very first step of boot, all are defined there.

 

So when an error says service it could be a driver.

[Roger Cigol 114]

Just now, Kas Ob. said:

It doesn't matter, and yes it will help if no object with that name exist then the problem is in the middle between use mode and user-mode driver.

Thank you, Kas. I have downloaded WinObjEx (exe) and run it. I click on the search (magnifier glass) icon and then enter MyMutex1 and click on Find. It says no objects found. I get the same result if repeat but with search only for "Mutant" in the drop down.

[Kas Ob. 126]

Just now, Roger Cigol said:

Thank you, Kas. I have downloaded WinObjEx (exe) and run it. I click on the search (magnifier glass) icon and then enter MyMutex1 and click on Find. It says no objects found. I get the same result if repeat but with search only for "Mutant" in the drop down.

Well this means, it is definitely a broken driver, and again such driver is there to perform a job, it could be attached to another service like (just as example) System Restore or it might have its own configuration/policy like security and its access.

 

So what i suggest is to go back to my first post in this thread, and run SFC, yes as dumb as it sound, also check if compatibility service is running and the application doesn't have any, also check the target file path (location and upper directory(s)) have security, see i know it work sometimes but, is there something had changed it dynamically ? like at this moment causing such resource to be wrongly handled, 

 

Handles are stored in kernel in tables and cloned there, but it could depend on filters on the way (in and out), and that what you want to pin point if a buggy driver (yes it is a driver or filter driver) caused this and depleted its own resources.

[Roger Cigol 114]

 

7 minutes ago, Kas Ob. said:

it is definitely a broken driver, and again such driver is there to perform a job,

So is this suspect driver related to file handling ? or could it be any driver on the machine ? 

[Kas Ob. 126]

Just now, Roger Cigol said:

this suspect driver related to file handling

This is it a driver running out resource, either by being a buggy/outdated or it does belong to bigger software like an antivirus but the rest of the software is not there to continue processing something, it could be uninstalled software that had a driver leftover, running rouge.

 

I can say something around 100% sure.

 

for more testing please Run (As Administrator) AutoRuns https://learn.microsoft.com/en-us/sysinternals/downloads/autoruns with 

Then see what reside in the both sections Services and Drivers, easy to check the Provider/Publisher.

[Roger Cigol 114]

9 minutes ago, Kas Ob. said:

and run SFC, yes as dumb as it sound

Running SFC did not sound dumb to me (either at the time you posted it, or now).

This was done at end of January, after we had done a full "check for updates" iteration round a few times (until it said "all up to date").

[Roger Cigol 114]

Auto run: If I look for coloured entries - which are the ones with "not verified".....

 

In Services I see one:

 

Sense    Windows Defender Advanced Threat Protection Service: Windows Defender Advanced Threat Protection service helps protect against advanced threats by monitoring and reporting security events that happen on the computer.    (Not Verified) Microsoft Corporation    C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe    Mon Feb 10 16:31:35 2025

 

In Drivers I see three:

 

BthA2dp    Microsoft Bluetooth A2dp driver: Bluetooth A2DP Driver    (Not Verified) Microsoft Corporation    C:\Windows\System32\drivers\BthA2dp.sys    Sat Dec  7 09:07:47 2019    

BthHFEnum    Microsoft Bluetooth Hands-Free Profile driver: Bluetooth Hands-Free Audio and Call Control HID Enumerator    (Not Verified) Microsoft Corporation    C:\Windows\System32\drivers\bthhfenum.sys    Sat Dec  7 09:07:47 2019    

 

Adobe Type Manager            File not found: atmfd.dll        

 

The first two are in subcategory:  HKLM\System\CurrentControlSet\Services

The last one is in subcategory: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font drivers

 

 

[Roger Cigol 114]

Why would this kind of problem mean that only my application is affected? When the problem happens it is still possible to read and write files to the directories using windows explorer (eg right click and create a new text file).