Windows File Protection window appears after XP loads up

About mid-August after running Microsoft Update successfully, I re-booted
after all the updates were installed. When XP booted up, a window appeared
with a "Windows File Protection" titlebar, and gave a message, "Please wait
while Windows verifies that all protected Windows files are intact and in
their original versions." Following this a second window appears asking for
the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
"Cancel" buttons. If you select "Cancel", a third window appears with the
message, "If you cancel, Windows might require you to insert a CD later. Are
you sure you want to skip this file" and shows "Yes" & "No" buttons.
If you click on the "Close" on the first window, the above is terminated
till the next re-boot. I never had this appearing till this update had been
done. It is a bit of a nuisance. Any info on how to get rid of this.

It 'sounds' like an attempt to replace a system file on the reboot got
'stuck' and Windows File Protection detected said system file is missing
and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
system file that was replaced or has been corrupted .

The second window is the System File checker attempting to rectify this
issue. Have you tried inserting the CD ?
That may resolve this issue but ... if the update involved is trying to
replace a system file [EX: explorer.exe], said update will not be
installed properly.

The usual culprits for this issue would be either the installed
antivirus/security suite, other 3rd party security software
[EX: Spybot], or 3rd party Windows themes or skins.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


auberge wrote:

> About mid-August after running Microsoft Update successfully, I re-booted
> after all the updates were installed. When XP booted up, a window appeared
> with a "Windows File Protection" titlebar, and gave a message, "Please wait
> while Windows verifies that all protected Windows files are intact and in
> their original versions." Following this a second window appears asking for
> the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
> "Cancel" buttons. If you select "Cancel", a third window appears with the
> message, "If you cancel, Windows might require you to insert a CD later. Are
> you sure you want to skip this file" and shows "Yes" & "No" buttons.
> If you click on the "Close" on the first window, the above is terminated
> till the next re-boot. I never had this appearing till this update had been
> done. It is a bit of a nuisance. Any info on how to get rid of this.

Many thanks for your input.
I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
boot-up. I have set up the other 2 not to lad on boot-up.
However Mowgreen, there is a file definitely missing, as you say, b'cos a
message appears on a blue screen just after the XP splash screen completes
its load up. Totally forgot to add this in when I had initially posted the
thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
not found. Skipping Autochk."
Could this be the cause of the problem? How could it be resolved?


"MowGreen [MVP]" wrote:

> It 'sounds' like an attempt to replace a system file on the reboot got
> 'stuck' and Windows File Protection detected said system file is missing
> and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
> system file that was replaced or has been corrupted .
>
> The second window is the System File checker attempting to rectify this
> issue. Have you tried inserting the CD ?
> That may resolve this issue but ... if the update involved is trying to
> replace a system file [EX: explorer.exe], said update will not be
> installed properly.
>
> The usual culprits for this issue would be either the installed
> antivirus/security suite, other 3rd party security software
> [EX: Spybot], or 3rd party Windows themes or skins.
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> auberge wrote:
>
> > About mid-August after running Microsoft Update successfully, I re-booted
> > after all the updates were installed. When XP booted up, a window appeared
> > with a "Windows File Protection" titlebar, and gave a message, "Please wait
> > while Windows verifies that all protected Windows files are intact and in
> > their original versions." Following this a second window appears asking for
> > the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
> > "Cancel" buttons. If you select "Cancel", a third window appears with the
> > message, "If you cancel, Windows might require you to insert a CD later. Are
> > you sure you want to skip this file" and shows "Yes" & "No" buttons.
> > If you click on the "Close" on the first window, the above is terminated
> > till the next re-boot. I never had this appearing till this update had been
> > done. It is a bit of a nuisance. Any info on how to get rid of this.
>

Have you run a chkdsk lately ? IF not *suggest* you do that *first* to
see if that stops the autochk.exe message.

Chkdsk.exe or Autochk.exe starts when you try to shut down or restart
your computer
http://support.microsoft.com/kb/831426

Manually resetting AUTOCHK.EXE for a drive
http://searchwinit.techtarget.com/ti...990696,00.html

http://www.kellys-korner-xp.com/regs...echeckdisk.reg


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


auberge wrote:

> Many thanks for your input.
> I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
> boot-up. I have set up the other 2 not to lad on boot-up.
> However Mowgreen, there is a file definitely missing, as you say, b'cos a
> message appears on a blue screen just after the XP splash screen completes
> its load up. Totally forgot to add this in when I had initially posted the
> thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
> not found. Skipping Autochk."
> Could this be the cause of the problem? How could it be resolved?
>
>
> "MowGreen [MVP]" wrote:
>
>
>>It 'sounds' like an attempt to replace a system file on the reboot got
>>'stuck' and Windows File Protection detected said system file is missing
>>and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
>>system file that was replaced or has been corrupted .
>>
>>The second window is the System File checker attempting to rectify this
>>issue. Have you tried inserting the CD ?
>>That may resolve this issue but ... if the update involved is trying to
>>replace a system file [EX: explorer.exe], said update will not be
>>installed properly.
>>
>>The usual culprits for this issue would be either the installed
>>antivirus/security suite, other 3rd party security software
>>[EX: Spybot], or 3rd party Windows themes or skins.
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>auberge wrote:
>>
>>
>>>About mid-August after running Microsoft Update successfully, I re-booted
>>>after all the updates were installed. When XP booted up, a window appeared
>>>with a "Windows File Protection" titlebar, and gave a message, "Please wait
>>>while Windows verifies that all protected Windows files are intact and in
>>>their original versions." Following this a second window appears asking for
>>>the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
>>>"Cancel" buttons. If you select "Cancel", a third window appears with the
>>>message, "If you cancel, Windows might require you to insert a CD later. Are
>>>you sure you want to skip this file" and shows "Yes" & "No" buttons.
>>>If you click on the "Close" on the first window, the above is terminated
>>>till the next re-boot. I never had this appearing till this update had been
>>>done. It is a bit of a nuisance. Any info on how to get rid of this.
>>

Fr the "chkdsk" should it be run as is or run with a "/f"

==================

"MowGreen [MVP]" wrote:

> Have you run a chkdsk lately ? IF not *suggest* you do that *first* to
> see if that stops the autochk.exe message.
>
> Chkdsk.exe or Autochk.exe starts when you try to shut down or restart
> your computer
> http://support.microsoft.com/kb/831426
>
> Manually resetting AUTOCHK.EXE for a drive
> http://searchwinit.techtarget.com/ti...990696,00.html
>
> http://www.kellys-korner-xp.com/regs...echeckdisk.reg
>
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> auberge wrote:
>
> > Many thanks for your input.
> > I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
> > boot-up. I have set up the other 2 not to lad on boot-up.
> > However Mowgreen, there is a file definitely missing, as you say, b'cos a
> > message appears on a blue screen just after the XP splash screen completes
> > its load up. Totally forgot to add this in when I had initially posted the
> > thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
> > not found. Skipping Autochk."
> > Could this be the cause of the problem? How could it be resolved?
> >
> >
> > "MowGreen [MVP]" wrote:
> >
> >
> >>It 'sounds' like an attempt to replace a system file on the reboot got
> >>'stuck' and Windows File Protection detected said system file is missing
> >>and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
> >>system file that was replaced or has been corrupted .
> >>
> >>The second window is the System File checker attempting to rectify this
> >>issue. Have you tried inserting the CD ?
> >>That may resolve this issue but ... if the update involved is trying to
> >>replace a system file [EX: explorer.exe], said update will not be
> >>installed properly.
> >>
> >>The usual culprits for this issue would be either the installed
> >>antivirus/security suite, other 3rd party security software
> >>[EX: Spybot], or 3rd party Windows themes or skins.
> >>
> >>MowGreen [MVP 2003-2007]
> >>===============
> >> *-343-* FDNY
> >>Never Forgotten
> >>===============
> >>
> >>
> >>auberge wrote:
> >>
> >>
> >>>About mid-August after running Microsoft Update successfully, I re-booted
> >>>after all the updates were installed. When XP booted up, a window appeared
> >>>with a "Windows File Protection" titlebar, and gave a message, "Please wait
> >>>while Windows verifies that all protected Windows files are intact and in
> >>>their original versions." Following this a second window appears asking for
> >>>the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
> >>>"Cancel" buttons. If you select "Cancel", a third window appears with the
> >>>message, "If you cancel, Windows might require you to insert a CD later. Are
> >>>you sure you want to skip this file" and shows "Yes" & "No" buttons.
> >>>If you click on the "Close" on the first window, the above is terminated
> >>>till the next re-boot. I never had this appearing till this update had been
> >>>done. It is a bit of a nuisance. Any info on how to get rid of this.
> >>
>

http://support.microsoft.com/kb/315265

See : Manual steps to run Chkdsk at the command prompt
Suggest you run chkdsk /r

Also, if there is an issue getting chkdsk to run, see:

Error message when you try to start a Windows XP-based computer:
"Autocheck program not found"
http://support.microsoft.com/kb/913502

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


auberge wrote:

> Fr the "chkdsk" should it be run as is or run with a "/f"
>
> ==================
>
> "MowGreen [MVP]" wrote:
>
>
>>Have you run a chkdsk lately ? IF not *suggest* you do that *first* to
>>see if that stops the autochk.exe message.
>>
>>Chkdsk.exe or Autochk.exe starts when you try to shut down or restart
>>your computer
>>http://support.microsoft.com/kb/831426
>>
>>Manually resetting AUTOCHK.EXE for a drive
>>http://searchwinit.techtarget.com/ti...990696,00.html
>>
>>http://www.kellys-korner-xp.com/regs...echeckdisk.reg
>>
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>auberge wrote:
>>
>>
>>>Many thanks for your input.
>>>I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
>>>boot-up. I have set up the other 2 not to lad on boot-up.
>>>However Mowgreen, there is a file definitely missing, as you say, b'cos a
>>>message appears on a blue screen just after the XP splash screen completes
>>>its load up. Totally forgot to add this in when I had initially posted the
>>>thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
>>>not found. Skipping Autochk."
>>>Could this be the cause of the problem? How could it be resolved?
>>>
>>>
>>>"MowGreen [MVP]" wrote:
>>>
>>>
>>>
>>>>It 'sounds' like an attempt to replace a system file on the reboot got
>>>>'stuck' and Windows File Protection detected said system file is missing
>>>>and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
>>>>system file that was replaced or has been corrupted .
>>>>
>>>>The second window is the System File checker attempting to rectify this
>>>>issue. Have you tried inserting the CD ?
>>>>That may resolve this issue but ... if the update involved is trying to
>>>>replace a system file [EX: explorer.exe], said update will not be
>>>>installed properly.
>>>>
>>>>The usual culprits for this issue would be either the installed
>>>>antivirus/security suite, other 3rd party security software
>>>>[EX: Spybot], or 3rd party Windows themes or skins.
>>>>
>>>>MowGreen [MVP 2003-2007]
>>>>===============
>>>> *-343-* FDNY
>>>>Never Forgotten
>>>>===============
>>>>
>>>>
>>>>auberge wrote:
>>>>
>>>>
>>>>
>>>>>About mid-August after running Microsoft Update successfully, I re-booted
>>>>>after all the updates were installed. When XP booted up, a window appeared
>>>>>with a "Windows File Protection" titlebar, and gave a message, "Please wait
>>>>>while Windows verifies that all protected Windows files are intact and in
>>>>>their original versions." Following this a second window appears asking for
>>>>>the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
>>>>>"Cancel" buttons. If you select "Cancel", a third window appears with the
>>>>>message, "If you cancel, Windows might require you to insert a CD later. Are
>>>>>you sure you want to skip this file" and shows "Yes" & "No" buttons.
>>>>>If you click on the "Close" on the first window, the above is terminated
>>>>>till the next re-boot. I never had this appearing till this update had been
>>>>>done. It is a bit of a nuisance. Any info on how to get rid of this.
>>>>

I ran a "chkdsk/f". There was a message that it would run at re-boot. The
plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
the XP splash screen. All 3 stages were seen as OK. Still the file
protection window on boot-up. Ran "regedit" on the path
"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contr ol\Session
Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
between the 2 words ,and one without any space between the 2 words. At
BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.

Accessed "http://support.microsoft.com/kb/913502" and carried out the
procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
come up, but the Windows File Protection Window still came up. Again ran a
"chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
Windows File Protection Window was still there when windows loaded up. Again
accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.


Should I do modification of the "Session Manager Registry" as given in
KB831426? Keeping all registry stuff for the absolute last.

Thanks for your help so far.


"MowGreen [MVP]" wrote:

> http://support.microsoft.com/kb/315265
>
> See : Manual steps to run Chkdsk at the command prompt
> Suggest you run chkdsk /r
>
> Also, if there is an issue getting chkdsk to run, see:
>
> Error message when you try to start a Windows XP-based computer:
> "Autocheck program not found"
> http://support.microsoft.com/kb/913502
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> auberge wrote:
>
> > Fr the "chkdsk" should it be run as is or run with a "/f"
> >
> > ==================
> >
> > "MowGreen [MVP]" wrote:
> >
> >
> >>Have you run a chkdsk lately ? IF not *suggest* you do that *first* to
> >>see if that stops the autochk.exe message.
> >>
> >>Chkdsk.exe or Autochk.exe starts when you try to shut down or restart
> >>your computer
> >>http://support.microsoft.com/kb/831426
> >>
> >>Manually resetting AUTOCHK.EXE for a drive
> >>http://searchwinit.techtarget.com/ti...990696,00.html
> >>
> >>http://www.kellys-korner-xp.com/regs...echeckdisk.reg
> >>
> >>
> >>MowGreen [MVP 2003-2007]
> >>===============
> >> *-343-* FDNY
> >>Never Forgotten
> >>===============
> >>
> >>
> >>auberge wrote:
> >>
> >>
> >>>Many thanks for your input.
> >>>I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
> >>>boot-up. I have set up the other 2 not to lad on boot-up.
> >>>However Mowgreen, there is a file definitely missing, as you say, b'cos a
> >>>message appears on a blue screen just after the XP splash screen completes
> >>>its load up. Totally forgot to add this in when I had initially posted the
> >>>thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
> >>>not found. Skipping Autochk."
> >>>Could this be the cause of the problem? How could it be resolved?
> >>>
> >>>
> >>>"MowGreen [MVP]" wrote:
> >>>
> >>>
> >>>
> >>>>It 'sounds' like an attempt to replace a system file on the reboot got
> >>>>'stuck' and Windows File Protection detected said system file is missing
> >>>>and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
> >>>>system file that was replaced or has been corrupted .
> >>>>
> >>>>The second window is the System File checker attempting to rectify this
> >>>>issue. Have you tried inserting the CD ?
> >>>>That may resolve this issue but ... if the update involved is trying to
> >>>>replace a system file [EX: explorer.exe], said update will not be
> >>>>installed properly.
> >>>>
> >>>>The usual culprits for this issue would be either the installed
> >>>>antivirus/security suite, other 3rd party security software
> >>>>[EX: Spybot], or 3rd party Windows themes or skins.
> >>>>
> >>>>MowGreen [MVP 2003-2007]
> >>>>===============
> >>>> *-343-* FDNY
> >>>>Never Forgotten
> >>>>===============
> >>>>
> >>>>
> >>>>auberge wrote:
> >>>>
> >>>>
> >>>>
> >>>>>About mid-August after running Microsoft Update successfully, I re-booted
> >>>>>after all the updates were installed. When XP booted up, a window appeared
> >>>>>with a "Windows File Protection" titlebar, and gave a message, "Please wait
> >>>>>while Windows verifies that all protected Windows files are intact and in
> >>>>>their original versions." Following this a second window appears asking for
> >>>>>the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
> >>>>>"Cancel" buttons. If you select "Cancel", a third window appears with the
> >>>>>message, "If you cancel, Windows might require you to insert a CD later. Are
> >>>>>you sure you want to skip this file" and shows "Yes" & "No" buttons.
> >>>>>If you click on the "Close" on the first window, the above is terminated
> >>>>>till the next re-boot. I never had this appearing till this update had been
> >>>>>done. It is a bit of a nuisance. Any info on how to get rid of this.
> >>>>
>

auberge wrote:

> I ran a "chkdsk/f". There was a message that it would run at re-boot. The
> plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
> the XP splash screen. All 3 stages were seen as OK. Still the file
> protection window on boot-up. Ran "regedit" on the path
> "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contr ol\Session
> Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
> between the 2 words ,and one without any space between the 2 words. At
> BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.
>
> Accessed "http://support.microsoft.com/kb/913502" and carried out the
> procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
> Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
> come up, but the Windows File Protection Window still came up. Again ran a
> "chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
> Windows File Protection Window was still there when windows loaded up. Again
> accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.
>
>
> Should I do modification of the "Session Manager Registry" as given in
> KB831426? Keeping all registry stuff for the absolute last.
>
> Thanks for your help so far.
>
>

You're mowst welcome. Yes, the Data for BootExecute is wrong/corrupted.
This is what it should look like and be set to -

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Session
Manager\BootExecute

Name Type Data
BootExecute REG_MULTI_SZ autocheck autochk*

Perhaps a 3rd party disk tool caused the corruption ?

STRONLY suggest you back up the Session Manager subkey by right
clicking it and choosing Export prior to editing BootExecute, auberge.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Modified the registry and re-booted the laptop. After the XP splash screen a
blue screen appeared showing the message, "autochk* - file not found.
Skipping Autocheck.exe". After windows loaded, the Windows File Protection
window came up again. Checked thru Windows explorer and noted that there was
a "autochk.exe" in C:\WINDOWS\system32, with the file properties as mentioned
yesterday.

Manually copied the "autochk.exe" file from the XP cd to another directory.
This file showed different properties from those of the one in system32. The
system32 file (which had been copied from the CD) showed a version of
5.1.2600.2180, while the file that i had manually copied from the CD showed a
version of 5.1.2600.1106 and a size of 552KB.

I deleted the file from system32, but it would just come back in a couple of
seconds. I could not manually copy the "autochk.exe" file to system32. Kept
showing file exists.

Updated Mcafee, Ad-aware, and Spybot and ran all of them along with Windows
Defender - at the same time. No Viruses, trojans, etc. were found. But
Spybot popped up a security threat as "Microsoft.Windows.Security.Internet
Explorer".
Cleaned out this with Spybot and re-ran Spybot - nothing found.

So the situation still persists - any more suggestions.

"MowGreen [MVP]" wrote:

> auberge wrote:
>
> > I ran a "chkdsk/f". There was a message that it would run at re-boot. The
> > plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
> > the XP splash screen. All 3 stages were seen as OK. Still the file
> > protection window on boot-up. Ran "regedit" on the path
> > "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contr ol\Session
> > Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
> > between the 2 words ,and one without any space between the 2 words. At
> > BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.
> >
> > Accessed "http://support.microsoft.com/kb/913502" and carried out the
> > procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
> > Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
> > come up, but the Windows File Protection Window still came up. Again ran a
> > "chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
> > Windows File Protection Window was still there when windows loaded up. Again
> > accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.
> >
> >
> > Should I do modification of the "Session Manager Registry" as given in
> > KB831426? Keeping all registry stuff for the absolute last.
> >
> > Thanks for your help so far.
> >
> >
>
> You're mowst welcome. Yes, the Data for BootExecute is wrong/corrupted.
> This is what it should look like and be set to -
>
> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Session
> Manager\BootExecute
>
> Name Type Data
> BootExecute REG_MULTI_SZ autocheck autochk*
>
> Perhaps a 3rd party disk tool caused the corruption ?
>
> STRONLY suggest you back up the Session Manager subkey by right
> clicking it and choosing Export prior to editing BootExecute, auberge.
>
> MowGreen [MVP 2003-2007]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
>
>

There is a space between autocheck and autochk* for the
Value in the registry. Did you include that space ?

Every time you attempt to delete autochk.exe WFP will replace it
from WINDOWS\system32\dllcache
Did you check the copy of autochk.exe in there ?

If you're not replacing the file from a Command Prompt you're going to
keep going 'round in circles.

Both copies of autochk.exe should now be at Version 5.1.2600.2180
Please reread: http://support.microsoft.com/kb/913502

Also, suggest you run chkdsk/r as it will attempt to reparir or move
files from a bad sector. HIGHLY recommend that you create a Restore
Point prior to doing so in case you then have another issue.
That way you can boot to Safe Mode and run either Last Known Good
Configuration or Sys Restore from a Command Prompt.

How to start the System Restore tool at a command prompt in Windows XP
http://support.microsoft.com/kb/304449

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


auberge wrote:

> Modified the registry and re-booted the laptop. After the XP splash screen a
> blue screen appeared showing the message, "autochk* - file not found.
> Skipping Autocheck.exe". After windows loaded, the Windows File Protection
> window came up again. Checked thru Windows explorer and noted that there was
> a "autochk.exe" in C:\WINDOWS\system32, with the file properties as mentioned
> yesterday.
>
> Manually copied the "autochk.exe" file from the XP cd to another directory.
> This file showed different properties from those of the one in system32. The
> system32 file (which had been copied from the CD) showed a version of
> 5.1.2600.2180, while the file that i had manually copied from the CD showed a
> version of 5.1.2600.1106 and a size of 552KB.
>
> I deleted the file from system32, but it would just come back in a couple of
> seconds. I could not manually copy the "autochk.exe" file to system32. Kept
> showing file exists.
>
> Updated Mcafee, Ad-aware, and Spybot and ran all of them along with Windows
> Defender - at the same time. No Viruses, trojans, etc. were found. But
> Spybot popped up a security threat as "Microsoft.Windows.Security.Internet
> Explorer".
> Cleaned out this with Spybot and re-ran Spybot - nothing found.
>
> So the situation still persists - any more suggestions.
>
> "MowGreen [MVP]" wrote:
>
>
>>auberge wrote:
>>
>>
>>>I ran a "chkdsk/f". There was a message that it would run at re-boot. The
>>>plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
>>>the XP splash screen. All 3 stages were seen as OK. Still the file
>>>protection window on boot-up. Ran "regedit" on the path
>>>"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Co ntrol\Session
>>>Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
>>>between the 2 words ,and one without any space between the 2 words. At
>>>BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.
>>>
>>>Accessed "http://support.microsoft.com/kb/913502" and carried out the
>>>procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
>>>Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
>>>come up, but the Windows File Protection Window still came up. Again ran a
>>>"chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
>>>Windows File Protection Window was still there when windows loaded up. Again
>>>accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.
>>>
>>>
>>>Should I do modification of the "Session Manager Registry" as given in
>>>KB831426? Keeping all registry stuff for the absolute last.
>>>
>>>Thanks for your help so far.
>>>
>>>
>>
>>You're mowst welcome. Yes, the Data for BootExecute is wrong/corrupted.
>>This is what it should look like and be set to -
>>
>>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Cont rol\Session
>>Manager\BootExecute
>>
>>Name Type Data
>>BootExecute REG_MULTI_SZ autocheck autochk*
>>
>>Perhaps a 3rd party disk tool caused the corruption ?
>>
>>STRONLY suggest you back up the Session Manager subkey by right
>>clicking it and choosing Export prior to editing BootExecute, auberge.
>>
>>MowGreen [MVP 2003-2007]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>
>>