FAQWindows-Expert.com Forum Index  •   FAQFAQ  •  SearchSearch
Windows-Expert.com
Find Windows Problems and Solutions
 
Seem to have lost Calc.exe in Win XP
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Windows-Expert.com Forum Index -> Windows XP General Goto page 1, 2  Next
View previous topic :: View next topic  
Author Message
EW_Zuki
Guest





PostPosted: Tue Sep 01, 2009 4:52 am    Post subject: Seem to have lost Calc.exe in Win XP Reply with quote

How can I get another copy?
Back to top
Guest
Guest



Posts
Location

PostPosted: Tue Sep 01, 2009 4:52 am    Post subject: Google Ads Reply with quote

Back to top
Pegasus [MVP]
Guest





PostPosted: Tue Sep 01, 2009 5:04 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:9962D05F-54C2-4FC3-B644-72485D6ED8B0@microsoft.com...
Quote:
How can I get another copy?

Here are a few options:
- Get a copy from a friend
- Expand it from your WinXP installation CD
- Copy it from c:\windows\system32\dllcache back to the System32 folder.
Back to top
db
Guest





PostPosted: Tue Sep 01, 2009 11:41 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

in addition to the suggestion
above,

you can download a powertoy
such as a calculator from
microsoft.com

--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com

"share the nirvana mann" - dbZen

~~~~~~~~~~~~~~~
Quote:



"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:9962D05F-54C2-4FC3-B644-72485D6ED8B0@microsoft.com...
> How can I get another copy?
Back to top
Ken Blake, MVP
Guest





PostPosted: Tue Sep 01, 2009 12:47 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Mon, 31 Aug 2009 23:52:02 -0700, EW_Zuki
<EWZuki@discussions.microsoft.com> wrote:

Quote:
How can I get another copy?


How do you know? Are you sure you didn't just lose the shortcut to it?

If you haven't already done so, press the Windows key + R, and type
calc there. If calc starts, you have just lost a shortcut to it, and
it can be easily restored.


--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup
Back to top
Bob
Guest





PostPosted: Tue Sep 01, 2009 1:17 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

Microsoft Calculator Plus
http://www.microsoft.com/downloads/details.aspx?familyid=32b0d059-b53a-4dc9-8265-da47f157c091&displaylang=en


"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:9962D05F-54C2-4FC3-B644-72485D6ED8B0@microsoft.com...
> How can I get another copy?
Back to top
EW_Zuki
Guest





PostPosted: Fri Sep 04, 2009 8:49 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Ken Blake, MVP" wrote:

Quote:
On Mon, 31 Aug 2009 23:52:02 -0700, EW_Zuki
EWZuki@discussions.microsoft.com> wrote:

How can I get another copy?


How do you know? Are you sure you didn't just lose the shortcut to it?

If you haven't already done so, press the Windows key + R, and type
calc there. If calc starts, you have just lost a shortcut to it, and
it can be easily restored.


--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

I did try what you suggest before posting.

Pegasus found it for me, in c:\windows\system32\dllcache.
Back to top
EW_Zuki
Guest





PostPosted: Fri Sep 04, 2009 10:04 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

Back to top
Jose
Guest





PostPosted: Fri Sep 04, 2009 11:43 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Sep 4, 5:49 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
Quote:
"Ken Blake, MVP" wrote:
On Mon, 31 Aug 2009 23:52:02 -0700, EW_Zuki
EWZ...@discussions.microsoft.com> wrote:

How can I get another copy?

How do you know? Are you sure you didn't just lose the shortcut to it?

If you haven't already done so, press the Windows key + R, and type
calc there. If calc starts, you have just lost a shortcut to it, and
it can be easily restored.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

I did try what you suggest before posting.

Pegasus found it for me, in c:\windows\system32\dllcache.

Was there no calc.exe in system32?

If calc.exe was missing from system32 (but still in dllcache where it
should be), you need to look at your Windows File Protection
situation.

The calc.exe is one of the files Windows "protects" so even if you
delete it manually or accidentally from system32, WFP should replace
it from the copy in dllcache - and do it quickly and silenty.

There are other consideration that could cause it to not be replaced,
but you should make sure nothing else is wrong.

Delete it from system32 - does it show back up?
Back to top
EW_Zuki
Guest





PostPosted: Tue Sep 08, 2009 7:19 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Jose" wrote:

Quote:
On Sep 4, 5:49 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Ken Blake, MVP" wrote:
On Mon, 31 Aug 2009 23:52:02 -0700, EW_Zuki
EWZ...@discussions.microsoft.com> wrote:

How can I get another copy?

How do you know? Are you sure you didn't just lose the shortcut to it?

If you haven't already done so, press the Windows key + R, and type
calc there. If calc starts, you have just lost a shortcut to it, and
it can be easily restored.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

I did try what you suggest before posting.

Pegasus found it for me, in c:\windows\system32\dllcache.

Was there no calc.exe in system32?

No.

Quote:
If calc.exe was missing from system32 (but still in dllcache where it
should be), you need to look at your Windows File Protection
situation.

The calc.exe is one of the files Windows "protects" so even if you
delete it manually or accidentally from system32, WFP should replace
it from the copy in dllcache - and do it quickly and silenty.

There are other consideration that could cause it to not be replaced,
but you should make sure nothing else is wrong.

Delete it from system32 - does it show back up?

I deleted it from system32 and rebooted. It didn't show back up.
Back to top
Jose
Guest





PostPosted: Tue Sep 08, 2009 2:39 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Sep 8, 4:19 am, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
Quote:
"Jose" wrote:
On Sep 4, 5:49 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Ken Blake, MVP" wrote:
On Mon, 31 Aug 2009 23:52:02 -0700, EW_Zuki
EWZ...@discussions.microsoft.com> wrote:

How can I get another copy?

How do you know? Are you sure you didn't just lose the shortcut to it?

If you haven't already done so, press the Windows key + R, and type
calc there. If calc starts, you have just lost a shortcut to it, and
it can be easily restored.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

I did try what you suggest before posting.

Pegasus found it for me, in c:\windows\system32\dllcache.

Was there no calc.exe in system32?

No.

If calc.exe was missing from system32 (but still in dllcache where it
should be), you need to look at your Windows File Protection
situation.

The calc.exe is one of the files Windows "protects" so even if you
delete it manually or accidentally from system32, WFP should replace
it from the copy in dllcache - and do it quickly and silenty.

There are other consideration that could cause it to not be replaced,
but you should make sure nothing else is wrong.

Delete it from system32 - does it show back up?

I deleted it from system32 and rebooted. It didn't show back up.

There is no reboot required.

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.
Back to top
EW_Zuki
Guest





PostPosted: Wed Sep 09, 2009 11:47 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Jose" wrote:
Quote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.
Back to top
Bob
Guest





PostPosted: Thu Sep 10, 2009 12:46 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

As a workaround replace it with Microsoft Calculator Plus.

http://www.microsoft.com/downloads/details.aspx?FamilyID=32b0d059-b53a-4dc9-8265-da47f157c091&displaylang=en


"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:30A26EB1-1B41-44C8-963F-8D3C7E731B0C@microsoft.com...
Quote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out
and
fixing it.
Back to top
EW_Zuki
Guest





PostPosted: Thu Sep 10, 2009 5:43 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Bob" wrote:

Quote:
As a workaround replace it with Microsoft Calculator Plus.

Yes, see your earlier post and my reply.

I meant I need help in fixing Windows File Protection.

Quote:

http://www.microsoft.com/downloads/details.aspx?FamilyID=32b0d059-b53a-4dc9-8265-da47f157c091&displaylang=en


"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:30A26EB1-1B41-44C8-963F-8D3C7E731B0C@microsoft.com...
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out
and
fixing it.

Back to top
Jose
Guest





PostPosted: Thu Sep 10, 2009 3:06 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
Quote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.

You can fix or you can work around it. I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache. If
it was missing from dllcache, XP would ask you for a CD. It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running and set to Automatic
and your boot drive is being monitored, if not make it so. Reboot to
make sure everything is still running after making any changes.

Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

A successful message resembles:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Description:
File replacement was attempted on the protected system file c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.
Back to top
EW_Zuki
Guest





PostPosted: Thu Sep 10, 2009 3:43 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Jose" wrote:

Quote:
On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.

You can fix or you can work around it. I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache. If
it was missing from dllcache, XP would ask you for a CD. It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running

It's running, monitoring both of my hard drives.

Quote:
and set to Automatic

I see no setting for Automatic, but restore points ARE being made that I
didn't initiate manually.

Quote:
and your boot drive is being monitored, if not make it so.

It's being monitored.

Quote:
Reboot to
make sure everything is still running after making any changes.

I made no changes.

Quote:
Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

Where is the System Event Log?

Quote:
A successful message resembles:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Description:
File replacement was attempted on the protected system file c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.

Thanks
Back to top
EW_Zuki
Guest





PostPosted: Fri Sep 11, 2009 12:17 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Jose" wrote:

Quote:
On Sep 10, 12:43 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:
On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.

You can fix or you can work around it. I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache. If
it was missing from dllcache, XP would ask you for a CD. It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running

It's running, monitoring both of my hard drives.

and set to Automatic

I see no setting for Automatic, but restore points ARE being made that I
didn't initiate manually.

and your boot drive is being monitored, if not make it so.

It's being monitored.

Reboot to
make sure everything is still running after making any changes.

I made no changes.

Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

Where is the System Event Log?

A successful message resembles:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Description:
File replacement was attempted on the protected system file c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.

Thanks

You can click Start, Settings, Control Panel, Admnistrative Tools,
Event Viewer for the various logs. The log of interest for this issue
is the System log - look at the events from WFP.

A popular shortcut is Start, Run and in the box enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK for the same effect.

Find your WFP events or complaints, double click the event to open
it. Pay attention to the time stamp.

Under the up/down arrow buttons is a third button that looks like two
pages. Click it to copy the event to your clipboard, then paste it
back here.


Here you go:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64004
Date: 9/10/2009
Time: 10:57:07 AM
User: N/A
Computer: DICK
Description:
The protected system file calc.exe could not be restored to its original,
valid version. The file version of the bad file is 5.1.2600.0 The specific
error code is 0x00000490 [Element not found.
].

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Back to top
Jose
Guest





PostPosted: Fri Sep 11, 2009 12:31 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Sep 10, 12:43 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
Quote:
"Jose" wrote:
On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.

You can fix or you can work around it.  I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache.  If
it was missing from dllcache, XP would ask you for a CD.  It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running

It's running, monitoring both of my hard drives.

and set to Automatic

I see no setting for Automatic, but restore points ARE being made that I
didn't initiate manually.

and your boot drive is being monitored, if not make it so.

It's being monitored.

Reboot to
make sure everything is still running after making any changes.

I made no changes.

Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

Where is the System Event Log?

A successful message resembles:

Event Type:        Information
Event Source:      Windows File Protection
Event Category:    None
Event ID:  64002
Description:
File replacement was attempted on the protected system file c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.

Thanks

You can click Start, Settings, Control Panel, Admnistrative Tools,
Event Viewer for the various logs. The log of interest for this issue
is the System log - look at the events from WFP.

A popular shortcut is Start, Run and in the box enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK for the same effect.

Find your WFP events or complaints, double click the event to open
it. Pay attention to the time stamp.

Under the up/down arrow buttons is a third button that looks like two
pages. Click it to copy the event to your clipboard, then paste it
back here.
Back to top
Richard
Guest





PostPosted: Sat Sep 19, 2009 11:41 am    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

Quote:
"EW_Zuki" <EWZuki@discussions.microsoft.com> wrote in message
news:7DE0CC55-53D0-4E51-95A4-0D7ED3102D0D@microsoft.com...


"Jose" wrote:

On Sep 10, 12:43 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:
On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection
feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it
out and
fixing it.

You can fix or you can work around it. I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache. If
it was missing from dllcache, XP would ask you for a CD. It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running

It's running, monitoring both of my hard drives.

and set to Automatic

I see no setting for Automatic, but restore points ARE being made that
I
didn't initiate manually.

and your boot drive is being monitored, if not make it so.

It's being monitored.

Reboot to
make sure everything is still running after making any changes.

I made no changes.

Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

Where is the System Event Log?

A successful message resembles:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Description:
File replacement was attempted on the protected system file
c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.

Thanks

You can click Start, Settings, Control Panel, Admnistrative Tools,
Event Viewer for the various logs. The log of interest for this issue
is the System log - look at the events from WFP.

A popular shortcut is Start, Run and in the box enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK for the same effect.

Find your WFP events or complaints, double click the event to open
it. Pay attention to the time stamp.

Under the up/down arrow buttons is a third button that looks like two
pages. Click it to copy the event to your clipboard, then paste it
back here.


Here you go:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64004
Date: 9/10/2009
Time: 10:57:07 AM
User: N/A
Computer: DICK
Description:
The protected system file calc.exe could not be restored to its original,
valid version. The file version of the bad file is 5.1.2600.0 The
specific
error code is 0x00000490 [Element not found. ].


You might try un-installing, and re-installing calc.exe -->
Control Panel> Add/Remove Programs> Add/Remove Windows Components
In Components window, Click Accessories and Utilities,
click Details button
In next window, click Accessories, click Details button
In next window, Un-check Calculator, click OK, OK, Next.
After it is uninstalled, repeat above, except:
Instead of Un-check --> Checkmark Calculator, OK, OK, Next.

See if you have an i386 folder with CALC.EX_

Try running System File Checker. (Takes about 25 minutes or so.)
Click Start, click Run, type or paste next line and press Enter:
sfc /scannow

(Hope This Helps. Smile
--Richard
Back to top
EW_Zuki
Guest





PostPosted: Sun Sep 20, 2009 1:06 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

"Richard" wrote:


Quote:
You might try un-installing, and re-installing calc.exe --
Control Panel> Add/Remove Programs> Add/Remove Windows Components
In Components window, Click Accessories and Utilities,
click Details button
In next window, click Accessories, click Details button
In next window, Un-check Calculator, click OK, OK, Next.
After it is uninstalled, repeat above, except:
Instead of Un-check --> Checkmark Calculator, OK, OK, Next.

Despite your detailed instructions, and my careful following of them, they
didn't work as described.

Quote:
See if you have an i386 folder with CALC.EX_

Try running System File Checker. (Takes about 25 minutes or so.)
Click Start, click Run, type or paste next line and press Enter:
sfc /scannow

I did this, and System File Checker finished and closed without a comment.
Does that mean OK?
Back to top
Jose
Guest





PostPosted: Sun Sep 20, 2009 1:36 pm    Post subject: Re: Seem to have lost Calc.exe in Win XP Reply with quote

On Sep 10, 10:17 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
Quote:
"Jose" wrote:
On Sep 10, 12:43 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:
On Sep 9, 8:47 pm, EW_Zuki <EWZ...@discussions.microsoft.com> wrote:
"Jose" wrote:

I would say you have an issue with the Windows File Protection feature
(could be disabled), and/or malware.

You can live with it or you can figure it out and fix it.

I'd sure appreciate a hint or two as to how to go about figuring it out and
fixing it.

You can fix or you can work around it.  I prefer to fix.

Right now, you only know about this problem with calc.exe - what else
is missing that you don't know about?

If XP wanted to replace the file it should copy it from dllcache.  If
it was missing from dllcache, XP would ask you for a CD.  It sounds
like none of that is happening as it should.

Be sure your System Restore Service is running

It's running, monitoring both of my hard drives.

and set to Automatic

I see no setting for Automatic, but restore points ARE being made that I
didn't initiate manually.

and your boot drive is being monitored, if not make it so.

It's being monitored.

Reboot to
make sure everything is still running after making any changes.

I made no changes.

Since you know how to "fix" calc.exe by copying in the replacement
file, delete it now, wait a short time (seconds) for it to be
replaced, then check in the System Event Log for a message from
Windows File Protection of a successful replacement or error
message.

Where is the System Event Log?

A successful message resembles:

Event Type:        Information
Event Source:      Windows File Protection
Event Category:    None
Event ID:  64002
Description:
File replacement was attempted on the protected system file c:\windows
\system32\calc.exe. This file was restored to the original version to
maintain system stability. The file version of the system file is
5.1.2600.5512.

Thanks

You can click Start, Settings, Control Panel, Admnistrative Tools,
Event Viewer for the various logs.  The log of interest for this issue
is the System log - look at the events from WFP.

A popular shortcut is Start, Run and in the box enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK for the same effect.

Find your WFP events or complaints, double click the event to open
it.  Pay attention to the time stamp.

Under the up/down arrow buttons is a third button that looks like two
pages. Click it to copy the event to your clipboard, then paste it
back here.

Here you go:

Event Type:     Information
Event Source:   Windows File Protection
Event Category: None
Event ID:       64004
Date:           9/10/2009
Time:           10:57:07 AM
User:           N/A
Computer:       DICK
Description:
The protected system file calc.exe could not be restored to its original,
valid version. The file version of the bad file is 5.1.2600.0  The specific
error code is 0x00000490 [Element not found.
].

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

You can try uninstalling and reinstalling calc. If that doesn't work:

Then I would say that that error has been happening all along and you
never noticed it (it is silent). Calc.exe was deleted somehow and the
Windows thinks the copy is suspicious and won't replace it - it tried
at least!

If calc.exe (a protected file) is deleted from c\:windows\system32,
and WFP is working, it will copy a replacement from c:\windows
\system32\dllcache. If it is not there, WFP will ask for an XP
installation CD.

I would say it has been trying to copy it but unable since it doesn't
look like what WFP thinks it should.

That could mean the the one in dllcache is wrong (as far as XP is
concerned), so that is the cacl.exe that is now a suspect.

If you have an XP installation CD, delete it from dllcache (make a
copy first), then delete it from system32. WFP will ask you for the
CD and it will replace both (that is what it does) from the hopefully
untampered with copy from the CD (since CDs are read only).

After both are replaced from the CD, remove the CD and delete it from
system32 and see if it is replaced (in seconds) by the one in
dllcache, or you still get the same error.

Malware scans won't hurt anything:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

These can be uninstalled later if desired.
Back to top
Display posts from previous:   
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Windows-Expert.com Forum Index -> Windows XP General All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Topic Links: syslog
Powered by phpBB © 2001, 2005 phpBB Group