| Event Id | 64001 |
| Source | Windows File Protection |
| Description | File replacement was attempted on the protected system file c:\winnt\system32\file_name. This file was restored to the original version to maintain system stability. The file version of the system file is x.x:x.x. |
| Event Information | According To CItrix: To replace a Windows 2000 system file: Boot Windows 2000 into Safe mode. Rename the file you want to replace in all the following sub directories (ensure that Windows Explorer is set to show hidden files and folders): %systemroot%\system32\(all subdirectories) %systemroot%\system32\dllcache (dllcache is a hidden folder) Copy the updated file into the locations where the files originally existed above. Reboot into normal mode. Note: Windows 2000 will try to locate the original file from the installation source, so make sure there is no CD inserted or network connection to the Windows 2000 distribution files. |
| Reference Links | Event ID: 64001 when installing Internet Explorer 6 Service Pack 1 with Installation Manager |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.