Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You receive a "Windows File Protection: Files that are required for windows to run properly have been replaced by unknown versions" error in Windows Server 2003, Windows XP, or Windows 2000

You receive a "Windows File Protection: Files that are required for windows to run properly have been replaced by unknown versions" error in Windows Server 2003, Windows XP, or Windows 2000

View products that this article applies to.

Beta Information

This article discusses a Beta release of a Microsoft product. The information in this article is provided as-is and is subject to change without notice.

No formal product support is available from Microsoft for this Beta product. For information about how to obtain support for a Beta release, see the documentation that is included with the Beta product files, or check the Web location where you downloaded the release.

↑ Back to the top

Symptoms

You may experience one or more of the following symptoms on computers that are running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000:
  • When you start Windows, you receive the following error message:

    Windows File Protection: Files that are required for windows to run properly have been replaced by unknown versions; Windows needs to restore these files to function properly.
  • An error message that is similar to the following is logged in the System event log:
  • You cannot correctly run Windows Update because trusted root certificates are missing from the certificate store.

↑ Back to the top

Cause

This behavior may occur because of an infection by VX2 malicious program variants.

↑ Back to the top

Resolution

Microsoft Windows AntiSpyware (Beta) can detect and remove many variants of the VX2 malicious program.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
892279 How to obtain Microsoft Windows AntiSpyware (Beta)

How to resolve the problem on a computer that is running Microsoft Internet Explorer 6

  1. Run Windows AntiSpyware (Beta) to remove the VX2 program variants that are detected.
  2. Register the Initpki.dll file. To do this, click Start, click
    Run, type regsvr32 initpki.dll, and then click OK.

How to resolve the problem on a computer that is not running Internet Explorer 6

  1. Register the Initpki.dll file. To do this, click Start, click
    Run, type regsvr32 initpki.dll, and then click OK.
  2. Download and install Internet Explorer 6. For more information, visit the following Microsoft Web site:
    http://www.microsoft.com/windows/ie/default.mspx
    Note If a restart is required after you install the program, you should re-register the Initpki.dll file after you restart the computer.
  3. Download and install Windows AntiSpyware (Beta).
  4. Run Windows AntiSpyware (Beta) to remove the VX2 program variants that are detected.
Note Windows AntiSpyware (Beta) is a beta product from Microsoft. There is currently no telephone support for beta products.

↑ Back to the top

More Information

The VX2 malicious program has many different variants that could change the techniques that are used for removal. Not all variants of the VX2 program will be fully addressed by the techniques that are described in this article.

For more information about spyware and malicious program removal applications, visit the following Microsoft Web site:
http://www.microsoft.com/athome/security/computer/default.mspx

↑ Back to the top

Keywords: kbtshoot, kbprb, kb

↑ Back to the top

Article Info
Article ID : 904677
Revision : 7
Created on : 4/17/2018
Published on : 4/18/2018
Exists online : False
Views : 433