Skip to main content
Known Participant
July 20, 2012
Answered

flashplayer.xpt can not be written to C:\Windows\SysWOW64\Macromed\Flash

  • July 20, 2012
  • 1 reply
  • 18080 views

Windows 7 x64

Firefox 14.0.1

flash player 11.3.300.265

Hello,

installation of install_flash_player_11_plugin.exe ends with the error message that flashplayer.xpt can not be written to C:\Windows\SysWOW64\Macromed\Flash because of missing rights.

Who can help me?

This topic has been closed for replies.
Correct answer chris.campbell

Chris Campbell wrote:

Could you try downloading Process Explorer from here: http://technet.microsoft.com/en-us/sysinternals/bb896653

Run it, open Find > Find Handle or DLL… and enter flashplayer.xpt in the search bar.  Once you hit search, what process is displayed?

Answer: No process is displayed.

Chris Campbell wrote:

The next step would be to run Process Monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx), attempt to run takeown again, and save the process monitor log off.  If possible, email it to ccampbel@adobe.com.

Microsoft Windows [Version 6.1.7601]

Copyright (c) 2009 Microsoft Corporation. Alle Rechte vorbehalten.

C:\Windows\system32>z:

Z:\>cd pstools

Z:\PSTools>PsExec -s -d Z:\ProcessMonitor\Procmon.exe /AcceptEula /Quiet /BackingFile C:\Procmon.pml

PsExec v1.98 - Execute processes remotely

Copyright (C) 2001-2010 Mark Russinovich

Sysinternals - www.sysinternals.com

Z:\ProcessMonitor\Procmon.exe started on ADMIN-PC with process ID 3500.

Z:\PSTools>c:

C:\Windows\System32>cd ..

C:\Windows>cd syswow64

C:\Windows\SysWOW64>cd macromed

C:\Windows\SysWOW64\Macromed>cd flash

C:\Windows\SysWOW64\Macromed\Flash>takeown /a /f flashplayer.xpt

Fehler: Zugriff verweigert (Error: Access denied)

C:\Windows\SysWOW64\Macromed\Flash>

  Restarted Windows. After restart size of C:\Procmon.pml is 244.413 kB. I can not email this file. I could send logfile.csv as RAR-Archive (2 MB) instead. Would this be ok?


Please feel free to email it to me at ccampbel@adobe.com or post it someplace like dropbox or sendnow and send me the link.

I also received an email from another customer this weekend that had run into a similar problem.  Here's what they found and how they were able to resolve the problem:

The reason for blocking the file flashplayer.xpt was the program ThreatFire.
Although I removed the program from Autostart and no entry in the taskmanager was found a ThreatFire service was running and blocked the installing process.
After uninstalling ThreatFire completely from the computer I had no problems to install flashplayer.

1 reply

pwillener
Legend
July 21, 2012

Are you running the installer as an Administrator user?

If yes, see How do I fix Windows permission problems with Flash Player?

UQCfLM85Author
Known Participant
July 21, 2012

I am running the installer as an Administrator user.

How do I fix Windows permission problems with Flash Player?

Occasionally users can encounter the following scenarios:

  • After installing Flash Player, everything works correctly until you reboot your computer.  After rebooting, web pages ask you to install Flash Player again.  This cycle continues over and over.
  • Flash Player works fine for administrator accounts, but Flash content is not available when logging in under a standard Windows account.

I do not have these problems. Is the solution described in How do I fix Windows permission problems with Flash Player? really the solution to my problem?

chris.campbell
Community Manager
Community Manager
August 14, 2012

Yes, ThreatFire was the culprit. It was not necessary to uninstall ThreatFire competely. It was enough to delete items under tab Quarantined under tab Threat Control.

Everything is fine now.

=O====== M/11.3.300.271 2012-08-14+16-29-39.478 ========

0000 00000010 "Z:\Installation\Adobe Flash Player\11.3.300.270\install_flash_player_11_active_x.exe"

0001 00001036 Software\Macromedia\FlashPlayerActiveX/PlayerPath 2

0002 00001036 Software\Macromedia\FlashPlayerActiveX/PlayerPath 2

0003 00000020 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

0004 00000011 1

0005 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX/ 2

0006 00000013 C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_3_300_271.ocx

0007 00000015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.exe

0008 00000016 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.dll

0009 00000019 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

0010 00000021 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=X====== M/11.3.300.271 2012-08-14+16-29-54.532 ========

=O====== M/11.3.300.271 2012-08-14+16-30-02.481 ========

0000 00000010 "Z:\Installation\Adobe Flash Player\11.3.300.270\install_flash_player_11_plugin.exe"

0001 00001036 Software\Macromedia\FlashPlayerPlugin/Version 2

0002 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2

0003 00001036 Software\Macromedia\FlashPlayerPlugin/Version 2

0004 00001036 Software\Macromedia\FlashPlayerPlugin/PlayerPath 2

0005 00000020 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

0006 00000011 1

0007 00001037 SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer/ 2

0008 00001037 SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin/ 2

0009 00001036 Software\Mozilla\Firefox\extensions/Plugins 2

0010 00001036 Software\Mozilla\Mozilla Firefox\extensions/Plugins 2

0011 00001036 Software\Mozilla\Thunderbird\extensions/Plugins 2

0012 00001036 Software\Opera Software/Last CommandLine 2

0013 00001036 Software\Opera Software/Last CommandLine 2

0014 00001036 Software\Opera Software/Plugin Path 2

0015 00001036 Software\Opera Software/Plugin Path 2

0016 00000014 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll

0017 00000015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe

0018 00000017 C:\Windows\SysWOW64\Macromed\Flash

0019 00000019 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

0020 00001024 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 183

0021 00001024 C:\Windows\SysWOW64\FlashPlayerApp.exe 183

0022 00000022 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe

0023 00000021 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

0024 00001106

0025 00001106

0026 00001024 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 183

=X====== M/11.3.300.271 2012-08-14+16-30-16.693 ========


Thanks for the update and thanks a ton to the customer that sent me this info!!  I've never used Threatfire, but I'm going to give it a try and see how it runs on my system.