Re: problem with Windows File Protection (WFP)
- From: "Wesley Vogel" <123WVogel955@xxxxxxxxxxx>
- Date: Mon, 5 Mar 2007 19:00:14 -0700
Why Windows File Protection allows to replace files, and
show this alert only after files already has been replaced? WFP must
alert before application attempt to replace files, to prevent this
replacing.
How would WFP know if something was going to happen before it did happen?
WFP is not a crystal ball. Most people know where there Windows XP CD is.
Also, if there is an I386 folder on the drive, WFP can use that instead of
the CD.
How to find what file(s) has been replaced, and restore
original?
Open the Event Viewer...
Start | Run | Type: eventvwr | Click OK
In the Event Viewer under System, listed as Information; Windows File
Protection and look for items similar to this...
Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 23-Aug-06
Time: 12:39:06 PM
User: N/A
Computer: MYPENTIUM450
Description:
File replacement was attempted on the protected system file
c:\windows\system32\clipbrd.exe. This file was restored to the original
version to maintain system stability. The file version of the system file is
5.1.2600.1106.
Normally %windir%\system32\dllcache is used by Windows File Protection for
replacing files. If %windir%\ServicePackFiles\i386 exists, it's used
instead. %windir%\ServicePackFiles\i386 contains the most recently updated
service pack files.
HOW TO Verify That Windows File Protection Is Running
http://support.microsoft.com/kb/814597
Description of the Windows File Protection Feature
http://support.microsoft.com/kb/222193
Explains a whole bunch about sfc.exe.
scannow sfc (sfc.exe)
http://www.updatexp.com/scannow-sfc.html
Description of Windows XP and Windows Server 2003 System File Checker
(Sfc.exe)
http://support.microsoft.com/kb/310747
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:%23OQR3hwXHHA.1244@xxxxxxxxxxxxxxxxxxxx,
Luminore <luminore@xxxxxxxxxxxxxxxxxxxx> hunted and pecked:
I tried some application, just to make some work. I've installed it, and
after work was done, uninstalled. Then, I got alert from Windows File
Protection (WFP) service that some system files has been replaced by
unknown version of that files, and prompt do I want allow replacing
files, or cancel. Sure, I've select 'Cancel', but windows asked for
installation CD distributive, to restore files from CD. Since I have not
the CD near, I has been forced to accept this replacement, to close the
modal dialog. Why Windows File Protection allows to replace files, and
show this alert only after files already has been replaced? WFP must
alert before application attempt to replace files, to prevent this
replacing. How to find what file(s) has been replaced, and restore
original?
regards.
.
- Follow-Ups:
- Re: problem with Windows File Protection (WFP)
- From: Luminore
- Re: problem with Windows File Protection (WFP)
- References:
- problem with Windows File Protection (WFP)
- From: Luminore
- problem with Windows File Protection (WFP)
- Prev by Date: Re: Sort problem
- Next by Date: Re: Change resolution on LCD and use whole screen
- Previous by thread: problem with Windows File Protection (WFP)
- Next by thread: Re: problem with Windows File Protection (WFP)
- Index(es):
Relevant Pages
|
Loading
