But the transaction that xp_cmdshell did was quite small: just creating a test file. it should have taken less than a second to roll it back.

Will killing the explorer.exe from task manager help here?