Corrupted OS files?

This morning when I booted up, I got a message saying that there were system files that the computer didn't recognize and I should insert my Windows XP disk. I did so, but I couldn't find the Certificate of Authenticity (I was mistakenly using my Office COA). I cancelled the action and did a system restore.

Here's my system info: Dell Dimension 8200, XP Pro version 2002 (service pack 1), 512 MB RAM, 1.99 Ghz.

I have Norton Antivirus, which I update at least weekly (and have never had a virus).

I've had a couple of other problems, too, this week: Word file corruption and Eudora file corruption.

Any ideas? Advice? Thanks!

Anne

 

1. The message you saw was from Windows File Protection. It asked for the CD to replace unrecognized versions of files.
2. Instead of letting WFP finish, and it may have while you were doing this, you started an install of XP again. Common mistake, people see the What Do You Want To Do? menu when inserting the CD and choose Install Windows XP.


Pretty sure thats what happened.

 

Yes, it was from Windows File Protection. But it's never happened before (I've had this computer nearly 18 mos.). Why were there unrecognized files? What could have happened? Does it have anything to do with the fact that Word and Eudora crashed this week (which they'd never done before)?

Also, the WFP window wasn't fleeting; it sat there, waiting for me to do something. (I inserted the CD only because of the WFP message.) I'm not sure what you mean by "Instead of letting WFP finish."

Thank you so much for the quick answer!!!

Anne

 

Hi, Anne, and welcome to Major Geeks!
There were unrecognized files because they were corrupted by something or replaced by something. What could have happened? Well, have you installed any new software in the past two weeks? Updates to anything other than your AV? Yes, there might well be a connection between that file destruction/overwriting/corruption and the crashes. We'll try to help you get to the cause.
Oh, WFP finishes by copying files from the CD (or from a storage folder) and overwriting the bad files in the OS. If the finding, copying, overwriting process didn't finish, you still may have bad files in there.

Do you have, update, and regularly run either Ad-Aware or Spybot Search & Destroy?

(Adryn, I'm thinking of recommending an online scan, in case Norton missed a nasty. What say?)

 

Hi, WiseWiz,

::: Well, have you installed any new software in the past two weeks?:::

I did install software within the past few weeks. I got a new multifunction machine (HP OfficeJet 5510). XP didn't crash until today, though, two weeks later.

:::Oh, WFP finishes by copying files from the CD (or from a storage folder) and overwriting the bad files in the OS.:::

I never did install files from the CD, because I wasn't allowed to without the COA number. (I finally found it, on the side of the cabinet.)

:::If the finding, copying, overwriting process didn't finish, you still may have bad files in there.:::

Uh-oh, so I should copy some files from the CD (now that I've found the COA)?

::: Do you have, update, and regularly run either Ad-Aware or Spybot Search & Destroy?:::

No.

Thanks so much for your help!

Anne

 

WFP is initiating system file checker, it takes time.It is an automated process and does indeed copy files, without your intervention to a folder called dllcache. It then scans your protected files.

Its not a short process, sometimes.

Adaware and/or Spybot are your friends. Learn them, love them.

Wisewiz:

I totally agree. Anne, you should try an online virus scan. I would reccomend it whever someone gets a persistant WFP error.

 

Thanks, Adrynalyne. I'm sorry to be dense about this. The system file checker wasn't doing anything; it just prompted me with a window to insert the CD, so I didn't stop any process.

How do I do an online virus scan? (Is that the same as NAV "Live Update"? I did that, and it said I had no viruses.)

How can I overwrite corrupted files from the XP reinstallation CD, now that I'm no longer getting the error message when I boot up?

Thanks so much for all your help!

Anne

 

When was the last time you updated Norton? Do you have anything Norton OTHER THAN the AV?

Don't do anything about the CD for now. There's a great deal of chatter on the other forums currently about something (same song; second verse, IMO) that has gone badly wrong with Norton updates. I'll look around and see what I can see.

Take a look at this page:
http://news.zdnet.co.uk/internet/security/0,39020375,39118996,00.htm

And let's see whether unchecking this control in Internet Explorer's Internet Options/Advanced tab helps:
Check for publisher's certificate revocation

Let us know what your answers are and whether changing this setting and a reboot do anything for you.

 

You can get an online virus scan from http://housecall.antivirus.com

Are you feeling comfortable enough to go into your registry?

We will need to check and see what SFC (System File Checker) has for a Sourcepath(s).

 

Hi, WiseWiz,

I have Norton Internet Security. I read those links about people's problems with VeriSign and how the people now hate NAV. I have to say, though: I've been very happy with it for the past 18 mos. With my previous computer, I had McAfee, and it caused a lot of problems. (I went to Internet Options|Advanced and unchecked the "check for publisher's certification" box, as instructed.)

I updated NAV today. (I also did so after I had the Eudora crash on Wednesday.)

So far, with each reboot today, I haven't had any problems (knock wood). But then again, that might be because I did a system restore, no?

Anne

 

Hi, Adrynalyne,

I'll try the virus scan. I can go into the registry, although I would be nervous about changing things irrevocably.

Thanks!

Anne

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

What is the value on the right, of :

Sourcepath
and
ServicePackSourcepath
and

What is the letter of the cdrom drive with XP in it?

 

Hi, Adrynylyne,

I don't know what I'm doing here....

Next to SourcePath it says c:\documents and settings\Anne\Local Settings\Temp\Office Jet 700\Drivers\XP\English. (Is that what you mean? I'm not sure how to find the "value." OfficeJet 700 is the printer I recently replaced with my new printer.) Next to ServicePackSourcepath it says c:\windows\ServicePackFiles\

How do I find the CD-ROM drive with XP in it. Isn't it on C? Thanks!

Anne

\

 

Well that first value is screwed up. We will need to change it.

The cdrom drive will be listed in my computer.

Look for the one that has windows xp in it.

 

Hi, Adrynalyne,

Having the OfficeJet 700 in something on regedit didn't sound right, even to me.

I still don't know where to look for XP. In My Computer, what am I looking for? In the My Computer window, I see Files Stored on This Computer (Shared Documents, Anne's Documents are the two icons under that), Hard Disk Drives (Local Disk C is under that), Devices with Removable Storage (A: and D: are under that), and Scanners and Cameras (the printer's icon is under that).

(BTW, I did an online virus scan and came up clean.) Thanks!

Anne

 

So, the XP CD isnt in the drive anymore?
Do you only have one CD rom drive?

If so, it appears to be D:

 

Hi, A.,

I'm sorry; I misunderstood you. I'll put the CD-ROM in now.

Anne

 

We're out of sync here because both Arynalyne and I have to get some other work done (darn distractions!) to eat (nuisance, but I love it!), so we're popping in and out.
Yes, that registry value is wrong. I'm going to back out and ask Adryn to tell you exactly what to do about it. (No, I'm not chicken. Just not sure what he has in mind.)
The way you find the CD-ROM drive with XP in it is ... put the XP CD into your CD drive, wait a few seconds, and then double-click My Computer and look for the line that says something about the XP disc. That's the very one.

I'll be watching this and helping if and when I can.

 

I wrote you a registry hack file to fix your problem with System File Checker, Anne. Just waiting on you to find out what your CD ROM drive letter is. Then I'll upload it so you can download it.

Then you don't have to go through editting your registry, which I'm not convinced you feel comfortable with.

But, before you use this file, you MUST, and I mean MUST feel comfortable with this, and understand that it is at your own risk.

I don't forsee any problems, but I would say, set a System Restore point, just in case.

You can get there by going to Start > All Programs > Accessories > System Tools > System Restore.

Then choose create a restore point.

 

The CD-ROM drive is D. I'll create a system restore point right now. Thanks!

A.

 

(Adryn, she may have traces of the old printer showing in the reg because she used a Restore Point. That may have taken her back to before the new printer.)

Anne, you may be perfectly confident that what Adrynalyne tells you to use here is both safe and reversible.

Just use it.

 

Thanks, WiseWiz. The System Restore I did earlier today took me to a point after I'd installed the new printer, but FWIW, I haven't yet removed the software for my old printer. It still works, and I didn't think I needed to remove it.

If you guys think I can fix my own regedit, then I'll do it!

Anne

 

K, working on uploading. My FTP site is having issues, so it may be a little bit.

 

I sent the file to Wisewiz, he will be posting it here for you Anne.

 

I got it up.

http://www.gci-net.com/~silver256/sfc.reg

Save it to your desktop, double click to import.

THIS IS AT YOUR OWN RISK.

 

Hi, Adrynalyne,

I did it. Nothing much happened, even after I rebooted. (I had the XP CD-ROM in, but I don't think drive C accessed drive D.) That's an excellent sign, right? That means it worked! Thanks so much!

Anne

 

Shouldn't be any recurrence of the WFP problem, but post again if the crashing behavior begins again/continues.

There should be no good reason for crashes or file corruption.

Oh, and be sure to get, install, update, and run the two freeware protectors that will help to keep you from getting a bad case of the nasties (spyware that not only causes unusual things to happen, but can slow your computer to a crawl, because it eats up all of your processing power):

LINKS:
Ad-Aware
Spybot S & D

 

And if it reoccurs and asks for the CD, when you put the CD in, it will actually use it

 

BTW, what Adrynalyne's file did was reset your installation disc filepath from your printer files in your Anne folder to your CD drive, where your machine will find the disc if you ever need it again. His file corrected that bad registry entry you found earlier for him

(I thought he was at lunch while I was typing that. Just saw his explanation. No, there is not an echo in here.)

 

As preventative medicine, and to make sure our changes worked,

Put in the Windows XP CD:

You can go to a command prompt:

Start >run >cmd, then click OK.

At the prompt, type sfc /scannow


Let it finish.

 

You explained it a lot better than I did (which was not at all)

 

NICE!
(applause from the newbie)

 

Thanks so much to Adrynalyne and WiseWiz. I did the scan now thing (man, it's scary, working on that black screen!), and everything seems to be fine---at least, I got no more question or notification windows!

(I also deleted normal.dot today to try to fix any Word problems.)

You guys are the best!

Anne

 

We are happy to help

 

Well, actually, sometimes ... HE is happy to help, and I'm happy to just watch a pro at work.

Glad you got it, Anne.