This is a reply to EW_Zuki's Tue, 22 Sep 2009 10:50:01 -0700 message
and to EW_Zuki's Tue, 22 Sep 2009 20:31:01 -0700 message
Your "Showing_Calc_is_not_installed_in_Accessories.jpg" screenshot indicates
that Calculator is not the only thing missing. I didn't see Paint or WordPad
there either. (There was an extra Notepad.) Your Programs menu panel, in
alphabetical order, only went as far as "eCleaner", so I couldn't see if you
had the "Games" sub-folder there. That was another thing in the Windows
Components dialog that was not checkmarked. In fact, I didn't see any
checkmarks except the 1 you added to Calculator, that didn't work.
Was there a time when you did have Calculator? or Was your winXP a custom
installation without optional components from the start?
:
I seem to not have a i386 folder. And a search within the Windows
folder (plus subfolders) didn't find CALC.EX_ .
OK. Not all installations have a copy of the i386 folder from the CD.
Is your computer 32-bit? or 64-bit?
:
Wow! I found maybe 2000 WPF events for just today! See
<
http://www.rcblue.com/Misc/Event_Viewer__System.jpg> (an 18.72 MB file)
Oh Boy! ... ("We're going to need bigger GUNS!"
I counted 966 WFP items, only 50 of which were dated 22Sep2009, and 6 were
dated 21Sep2009, the remaining 910 items were dated 20Sep2009. (Your picture
spoke more than 2000 words though. I'll let you count the words...
That monster file was more than a half hour download on my slow dialup
connection. My graphics viewer displayed it without groaning much. There
was a lot of blank white space down the right side. After loading it into
Windows Paint, with no changes, and SaveAs (other filename).JPG, the size
was reduced to 7.54MB, even without cropping the right side. You might want
to check the JPEG compression setting on your graphics program. I got the
filesize down to 2.49MB as 16-color GIF.
(Where did you get the 32 feet tall monitor to take that screen shot?
The picture did not show the message text of any of the items, so it was of
limited value. It did show 5 different WFP event id's - 64016 (start), 64001
(file restored), 64004 (invalid version - could not restore), 64020 (bad
signature - restore to original), 64021 (could not be copied into DLL
cache). I did not see a 64017 (scan completed successfully) event.
The only 64001 (file restored) was dated 9/20/2009 7:10:25 AM. It was all
downhill after that. Most were pairs of 64020 and 64004 entries. Apparently
the attempts to restore to original, resulted in a could not restore because
of invalid version. Apparently all attempts to copy files to dllcache failed
also. Obviously something is seriously very bad wrong with a lot of files.
See my other message this date for suggestions on correcting things.
By the way, instead of a screen shot, in Event Viewer, you could have
clicked System on the left, and then click Action on the menu bar, and Save
Log File As, and choose File Type: Text. That file would be less than .5 MB
in size. If you want to archive the current log for viewing later in Event
Viewer, use the "evt" file type. Also, while "System" is selected on the
left, click Action, click Properties, and change Maximum log size to 1024.
On 22 Sept when you made the picture, the log only went back to 15 Sept. We
can't look back at events around the time calc grew legs and walked off.
Also, since you only have one Computer name, click View on the menu bar,
click Add/Remove Columns, click Computer, click <-Remove, click OK.
Also, if you need to send someone a copy of a log, use the "evt" file type,
which includes additional error code information that the text format does
not include, and ZIP it (with 7-Zip or WinZip) before attaching to EMAIL.
You can send me a copy, so I can see which files are messed - there may be
some sort of common thread back to a single cause. (No promises.
:
As I said above I seems to have no i386. But I ran both of your expand
commands anyway. The command line window opened but closed so quickly that
I could even see if it said anything.
The two messages that flashed "quickly" on the screen were probably:
Can't open input file: c:\i386\calc.ex_.
Can't open input file: c:\WINDOWS\i386\calc.ex_.
(I should have had you use Command Prompt, where you can see stuff.
I haven't seen a "report" on SAS here yet.
:
Kaspersky Internet Security 2009.
OK. That's one of the good ones. Make sure it has fully up to date
definitions when you do a full scan of your system32 folder.
Did you find those 2 help files in C:\Windows\Help?
(See also my other reply to you this date for further.

--Richard