problem with Windows File Protection (WFP)

[Luminore]

I tried some application, just to make some work. I've installed it, and
after work was done, uninstalled. Then, I got alert from Windows File
Protection (WFP) service that some system files has been replaced by unknown
version of that files, and prompt do I want allow replacing files, or
cancel. Sure, I've select 'Cancel', but windows asked for installation CD
distributive, to restore files from CD. Since I have not the CD near, I has
been forced to accept this replacement, to close the modal dialog. Why
Windows File Protection allows to replace files, and show this alert only
after files already has been replaced? WFP must alert before application
attempt to replace files, to prevent this replacing. How to find what
file(s) has been replaced, and restore original?

regards.

 

[Wesley Vogel]

Why Windows File Protection allows to replace files, and

show this alert only after files already has been replaced? WFP must
alert before application attempt to replace files, to prevent this
replacing.

How would WFP know if something was going to happen before it did happen?
WFP is not a crystal ball. Most people know where there Windows XP CD is.
Also, if there is an I386 folder on the drive, WFP can use that instead of
the CD.

How to find what file(s) has been replaced, and restore
original?

Open the Event Viewer...
Start | Run | Type: eventvwr | Click OK

In the Event Viewer under System, listed as Information; Windows File
Protection and look for items similar to this...

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 23-Aug-06
Time: 12:39:06 PM
User: N/A
Computer: MYPENTIUM450
Description:
File replacement was attempted on the protected system file
c:\windows\system32\clipbrd.exe. This file was restored to the original
version to maintain system stability. The file version of the system file is
5.1.2600.1106.

Normally %windir%\system32\dllcache is used by Windows File Protection for
replacing files. If %windir%\ServicePackFiles\i386 exists, it's used
instead. %windir%\ServicePackFiles\i386 contains the most recently updated
service pack files.

HOW TO Verify That Windows File Protection Is Running
http://support.microsoft.com/kb/814597

Description of the Windows File Protection Feature
http://support.microsoft.com/kb/222193

Explains a whole bunch about sfc.exe.
scannow sfc (sfc.exe)
http://www.updatexp.com/scannow-sfc.html

Description of Windows XP and Windows Server 2003 System File Checker
(Sfc.exe)
http://support.microsoft.com/kb/310747

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Luminore]

How would WFP know if something was going to happen before it did happen?
WFP is not a crystal ball. Most people know where there Windows XP CD is.
Also, if there is an I386 folder on the drive, WFP can use that instead of
the CD.


Open the Event Viewer...
Start | Run | Type: eventvwr | Click OK

In the Event Viewer under System, listed as Information; Windows File
Protection and look for items similar to this...

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 23-Aug-06
Time: 12:39:06 PM
User: N/A
Computer: MYPENTIUM450
Description:
File replacement was attempted on the protected system file
c:\windows\system32\clipbrd.exe. This file was restored to the original
version to maintain system stability. The file version of the system file is
5.1.2600.1106.

Normally %windir%\system32\dllcache is used by Windows File Protection for
replacing files. If %windir%\ServicePackFiles\i386 exists, it's used
instead. %windir%\ServicePackFiles\i386 contains the most recently updated
service pack files.

HOW TO Verify That Windows File Protection Is Running
http://support.microsoft.com/kb/814597

Description of the Windows File Protection Feature
http://support.microsoft.com/kb/222193

Explains a whole bunch about sfc.exe.
scannow sfc (sfc.exe)
http://www.updatexp.com/scannow-sfc.html

Description of Windows XP and Windows Server 2003 System File Checker
(Sfc.exe)
http://support.microsoft.com/kb/310747

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

-------

I find the reason, the problem is not the application. I just did disk
cleanup. C > Properties > Disk Cleanup , I did not change default settings,
the last two check boxes is 'Compress Old Files' and 'indexing'. When start
Cleanup, with this 'Compress Old Files' and 'indexing' enabled, it take a
very long time to scan the harddrive, may freeze or hangs. So I clicked
'Cancel', and right after this Windows File Protection alert box pop up. So
the reason is the canceling the Disk Cleanup operation, this is windows
bug, something wrong there.

 

[Wesley Vogel]

The Disk Cleanup Tool Stops Responding
http://support.microsoft.com/kb/823302

Disk Cleanup Tool Stops Responding While Compressing Old Files
http://support.microsoft.com/kb/812248

For an automated fix, look here:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Read instructions at the top
Scroll down to:
# 48 Right hand side
Disk Cleanup-Compress Old Files Freezes

Description of the Disk Cleanup Tool in Windows XP
http://support.microsoft.com/kb/310312

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Luminore]

The Disk Cleanup Tool Stops Responding
http://support.microsoft.com/kb/823302

Disk Cleanup Tool Stops Responding While Compressing Old Files
http://support.microsoft.com/kb/812248

For an automated fix, look here:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Read instructions at the top
Scroll down to:
# 48 Right hand side
Disk Cleanup-Compress Old Files Freezes

Description of the Disk Cleanup Tool in Windows XP
http://support.microsoft.com/kb/310312

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

--------------

Not clear, what is connection with Windows File Protection popup alert?
Main problem is this WFP alert, not disk cleanup hang up.

thanks.