Share via

replacing missing or corrupt system files

Anonymous
2011-08-13T01:56:01+00:00

I have had issues with my computer running slow, no error messages until I went to add remove programs and attempted to add or remove windows components hoping to fix any problems that may be causing a slow machine.  Anyway, this is the message I receive when add or remove windows components appears.  Some windows system files are missing or corrupt and have been replaced by unknown versions.  Please insert windows cd#2 to replace bad files.  My problem is this is an OS install and there is no Windows CD, only a recovery partition on the hard drive.  The options are retry, cancel and more information which has no real information.  There is no option to look on the hard drive for these files and maybe it wouldnt work if it could look in the recovery partiion.  Does microsoft have a utility that will scan for corrupt system files and  replace these as needed or is there a utility somewhere that will find these corrupt files and replace them?  What can I do?

Windows for home | Windows 11 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2011-08-15T00:59:42+00:00

    thanks for the ideas.  The problem still goes back to the fact that HP doesn't supply windows disks.  Everything is on a restore partition on the hard drive and windows gives me now way to get there, even if I could get to an individual file.  NO matter what, will I have to purchase a windows xp disk from HP, or can I get the original window xp disks I have, that was purchased for another computer that I intended to build at one time, to work?  Here are some of the files that are logged as a problem:

    Event Type:    Information

    Event Source:    Windows File Protection

    Event Category:    None

    Event ID:    64005

    Date:        8/12/2011

    Time:        9:28:16 PM

    User:        N/A

    Computer:    HP

    Description:

    The protected system file ehepgdat.dll was not restored to its original, valid version because the Windows File Protection restoration process was cancelled by user interaction, user name is HP_Administrator.  The file version of the bad file is 5.1.2710.2732.

    there is also wmpband.dll, mpvis.dll, medctrro.exe, ehrecobj.dll, ehividctl.dll, ehiuserxp.dll, ehiproxy.dll, ehiplay.dll, ehiextens.dll, ehglid.dll, ehcommon.dll, ehcm.dll,

    and

    Event Type:    Information

    Event Source:    Windows File Protection

    Event Category:    None

    Event ID:    64001

    Date:        8/12/2011

    Time:        9:04:32 PM

    User:        N/A

    Computer:    HP

    Description:

    File replacement was attempted on the protected system file c:\windows\ehome\ehjpnime.dll. This file was restored to the original version to maintain system stability. The file version of the bad file is 5.1.2710.2732, the version of the system file is 5.1.2700.2180.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    I don't know if any of these files are interesting, or extremely important.  I would like to restore these files, but the xp disk I have isnt accepted by windows.

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2011-08-13T20:36:55+00:00

    ...that's an improvement, Divya R, and I am proud of you, but still not quite right...

    Y'all need my Special High Intensity Training:

    (agenda recently adjusted by request)

    If Microsoft Support Engineers need training on Microsoft XP issues, I am available.

    My rates and rider are very reasonable:

    All expenses paid round trip first class to Redmond, WA or the location of your choice (5 star accommodations), plus $2000 USD American per day ($250 per hour).  I have passports, credentials, ID and currencies for most civilized and some uncivilized countries.  I can converse in 5 languages fluently and be polite (and rude) in 10 languages.

    The usual training agenda:

    Day one:

    8-9 AM:  Breakfast and networking social

    9-11 AM:  How to create a bootable XP Recovery Console CD when no XP media is available

    11-12 AM:  Basic Recovery Console navigation

    12-1 PM:  Catered lunch

    1-4 PM: How to troubleshoot and resolve the most common XP startup issues without using an XP CD-ROM or reinstalling XP, such as:

        hal.dll missing or corrupt

        ntldr missing or corrupt

        ntoskrnl.exe missing or corrupt

        system32\config\system missing or corrupt

        just about any other thing that is missing or corrupt

        other common startup error messages as requested

    4-6 PM: Learn how sfc /scannow works, what it does, what it does not do and when to use

           and when it is a waste of time to suggest it

    Day two:

    8-9 AM:  Breakfast and networking social

    9-11 AM;  Audience requests for any additional non booting XP scenarios

    11-12 AM:  Install Windows Debugging tools

    12-1 AM  Catered lunch

    1-3 PM: How to troubleshoot a Blue Screen of Death, system lockups, hang ups, freezes.

    3-5 PM:  How to troubleshoot and resolve XP performance issues

    5-6 PM: Audience participation and questions

    0 comments
  3. Anonymous
    2011-08-13T20:34:36+00:00

    Heaven help us all...

    When you see a message like this:

    Windows File Protection

    Files that are required for Windows to run properly have been replaced by unrecognized versions.  To maintain system stability, Windows must restore the original versions of these files.

    Hopefully, you are curious to know what the file is and when you know that, you can decide what to do about it.

    You should click Cancel, then click Yes to keep the file, then you will have an event to look at that will tell you what the problem file is.

    Look in the Event Viewer System log to see what the file name is, then decide what to do.

    When in the Event Viewer System log, click the 'Source' column heading to sort the events alphabetically by the Source name.  The 'Windows File Protection' events should be near the bottom of the list (since they start with 'W').

    The event will look something like this example:

    Event Type:    Information

    Event Source:    Windows File Protection

    Event Category:    None

    Event ID:    64005

    Date:        1/10/2011

    Time:        2:41:56 PM

    Description:

    The protected system file taskmgr.exe was not restored to its original, valid version because the Windows File Protection restoration process was cancelled by user interaction, user name is Jose.  The file version of the bad file is unknown.

    When you know what the file is, you can decide what to do about it.  There may already be other copies of the file(s) on your system or you can get the file(s) from another source - someone can upload the file(s) you need to their SkyDrive and you can download and replace the file(s) one at a time.  First you must figure out what the file is that XP thinks it needs.

    A shortcut to Event Viewer is to click Start, Run and in the box enter:

    eventvwr.msc

    Click OK to launch the Event Viewer.

    Check your Event Viewer System log and look for an event sourced by Windows File Protection.

    When in the Event Viewer System log, click the 'Source' column heading to sort the events alphabetically by the Source name.  The 'Windows File Protection' events should be near the bottom of the list (since they start with 'W').

    If you double click an event, it will open a Properties window with more information.  On the right are black up and down arrow buttons to scroll through the open events. The third button that looks like two pages on top of each other is used to copy the event details to your Windows clipboard.

    When you find an interesting event that occurred around the time of your issue, click the third button under the up and down arrows to copy the details and then you can paste the details (right click, Paste or CTRL-V) the detail text back here for analysis.  Remove any personal information from your information after pasting if you are compelled to do so.

    It could also be that your antivirus/antimalware program is out of data and has quarantined (effectively deleted) the files.

    Describe your current antivirus and anti malware situation:  McAfee, Symantec, Norton, Spybot, AVG, Avira!, MSE, Panda, Trend Micro, CA, Defender, ZoneAlarm, PC Tools, Comodo, etc.

    In the Event Viewer System log you will see a message like this:

    Event Type:    Information

    Event Source:    Windows File Protection

    Event Category:    None

    Event ID:    64002

    Description:

    File replacement was attempted on the protected system file c:\windows\system32\taskmgr.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    If you click the Retry box, and see a message like this:

    Windows File Protection

    The CD you provided is the wrong CD.

    Please insert the Windows XP Professional Service Pack 3 CD into your CD-ROM drive.

    If you click the Cancel box, in the Event Viewer System log you will see a message like this:

    Windows File Protection

    You chose not to restore the original versions of the files.  This may affect Windows stability.

    Are you sure you want to keep the unrecognized file versions?

    If you click Yes to skip the message (which doe not fix the problem) in the Event Viewer System log you will see a message like this:

    Event Type:    Information

    Event Source:    Windows File Protection

    Event Category:    None

    Event ID:    64005

    Description:

    The protected system file taskmgr.exe was not restored to its original, valid version because the Windows File Protection restoration process was cancelled by user interaction, user name is Jose.  The file version of the bad file is unknown.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    0 comments
  4. Anonymous
    2011-08-13T19:08:56+00:00

    Hi RobAmburgey,

    • What's the exact verbatim of the error message that you receive?

    Use the System File Checker (SFC) tool. But you will require Windows XP CD to do the same. Contact manufacturer to obtain the same. 

    System File Checker gives an administrator the ability to scan all protected files to verify their versions. If System File Checker discovers that a protected file has been overwritten, it retrieves the correct version of the file from the cache folder (%Systemroot%\System32\Dllcache) or the Windows installation source files, and then replaces the incorrect file. System File Checker also checks and repopulates the cache folder. You must be logged on as an administrator or as a member of the Administrators group to run System File Checker. 

    Refer to this link to do the same:http://support.microsoft.com/kb/310747

    **Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe)**

    0 comments