?? Event ID 64004

K

-ks

I've been getting this annoying event recently and cannot figure out what
caused it. The only thing I can think of is, I had a problem shutting the
system down a few days ago, the system would not shut down, the icons on
the desktop disappeared and it just sat there. I needed to hit the reset
switch to bring it back to life. It was after that I started noticing the
following:


Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64004
Date: 6-26-2006
Time: 6:27:18 PM
User: N/A
Computer: HOMER
Description:
The protected system file net.exe could not be restored to its original,
valid version. The file version of the bad file is 5.0.2160.1 The specific
error code is 0x800b0003 [The form specified for the subject is not one
supported or known by the specified trust provider.
].


How do I fix this?

Keith Huff
 
D

Dave Patrick

From a command prompt;
sfc /scannow

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| I've been getting this annoying event recently and cannot figure out what
| caused it. The only thing I can think of is, I had a problem shutting the
| system down a few days ago, the system would not shut down, the icons on
| the desktop disappeared and it just sat there. I needed to hit the reset
| switch to bring it back to life. It was after that I started noticing the
| following:
|
|
| Event Type: Information
| Event Source: Windows File Protection
| Event Category: None
| Event ID: 64004
| Date: 6-26-2006
| Time: 6:27:18 PM
| User: N/A
| Computer: HOMER
| Description:
| The protected system file net.exe could not be restored to its original,
| valid version. The file version of the bad file is 5.0.2160.1 The
specific
| error code is 0x800b0003 [The form specified for the subject is not one
| supported or known by the specified trust provider.
| ].
|
|
| How do I fix this?
|
| Keith Huff
|
|
 
K

-ks

From a command prompt;
sfc /scannow

Didn't do it. I got a gazillion event ID's about copying protected file
***.*** to dll cache, then another ID stating that file ***.*** could not
be changed.

Cleared the log, rebooted, same 64004 event ID popped up

-ks
 
D

Dave Patrick

Are you logged on as local administrator? If so you might give this a go.

How to Restore the Default NTFS Permissions for Windows 2000
http://support.microsoft.com/?id=266118


Then after restart;

SFC /PURGECACHE
followed by
SFC /SCANNOW

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Didn't do it. I got a gazillion event ID's about copying protected file
| ***.*** to dll cache, then another ID stating that file ***.*** could not
| be changed.
|
| Cleared the log, rebooted, same 64004 event ID popped up
|
| -ks
 
K

-ks

Are you logged on as local administrator? If so you might give this a go.

How to Restore the Default NTFS Permissions for Windows 2000
http://support.microsoft.com/?id=266118


Then after restart;

SFC /PURGECACHE
followed by
SFC /SCANNOW

I'm not logged in as administrator, but I have admin privileges. Will
/purgecache get rid of all the files in the /dllcache directory?

-ks
 
D

Dave Patrick

Yes, this will purge the dllcache folder forcing a rebuild and scan.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| I'm not logged in as administrator, but I have admin privileges. Will
| /purgecache get rid of all the files in the /dllcache directory?
|
| -ks
 
K

-ks

Yes, this will purge the dllcache folder forcing a rebuild and scan.

Yes it did exactly that, all but three files are now in the directory:

nt5.cat
nt5inf.cat
sfc.dll

Cleared all the logs, did a reboot, same three files in the /dllcache
directory, same 64004 event ID in the system log

?????????
 
D

Dave Patrick

Some permissions (or other) may be corrupt. These articles may help.

How to Perform an In-Place Upgrade of Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;[LN];292175

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change
http://support.microsoft.com/default.aspx?scid=kb;[LN];306952

Be sure to apply SP4 and these two below to your repair install before
connecting to any network. Internet included. (sasser, msblast)
http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

Then

Rollup 1 for Microsoft Windows 2000 Service Pack 4
http://www.microsoft.com/downloads/...CF-8850-4531-B52B-BF28B324C662&displaylang=en


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Yes it did exactly that, all but three files are now in the directory:
|
| nt5.cat
| nt5inf.cat
| sfc.dll
|
| Cleared all the logs, did a reboot, same three files in the /dllcache
| directory, same 64004 event ID in the system log
|
| ?????????
|
|
|
|
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top