Windows File Protection acts up whenever a USB device is plugged in

[mf_2]

Hello,

I successfully completed my Unattended DVD of Windows XP Professional. However on each new PC which was set up using that DVD, I get a warning from the Windows File Protection that Windows files have been modified whenever I plug in a USB stick. How can I make that go away without disabling the file protection (which I would only consider the last option)? What is causing this behavior?

Best regards,

mf_2

[gosh]

SFC logs to setupapi.log, and i suspect you have corrupt inf's. This is what happens in SFC:

1 - SFC is loaded by winlogon at startup

2 - SFC monitors files from the catalog (.cat) files

3 - When SFC sees a file is missing, it prompts for the file name, and uses layout.inf in the windows\inf directory to see where to extract to. it logs what it does to setupapi.log

therefore, i would be looking at the inf folder, the catalogs, layout.inf. Delete setupapi.log, add the usb device, and post your setupapi.log located in the windows dir.

-gosh

[mf_2]

Here is the part of my setupapi.log, which is describing the problems I think:

[2007/08/16 13:16:01 504.3 Driver Install]

#-019 Searching for hardware ID(s): usb\vid_0457&pid_0151&rev_0100,usb\vid_0457&pid_0151

#-018 Searching for compatible ID(s): usb\class_08&subclass_06&prot_50,usb\class_08&subclass_06,usb\class_08

#-198 Command line processed: C:\WINDOWS\system32\services.exe

#I022 Found "USB\Class_08&SubClass_06&Prot_50" in C:\WINDOWS\inf\usbstor.inf; Device: "USB Mass Storage Device"; Driver: "USB Mass Storage Device"; Provider: "Microsoft"; Mfg: "Compatible USB storage device"; Section name: "USBSTOR_BULK".

#I023 Actual install section: [uSBSTOR_BULK.NT]. Rank: 0x00002000. Effective driver date: 07/01/2001.

#-166 Device install function: DIF_SELECTBESTCOMPATDRV.

#I063 Selected driver installs from section [uSBSTOR_BULK] in "c:\windows\inf\usbstor.inf".

#I320 Class GUID of device remains: {36FC9E60-C465-11CF-8056-444553540000}.

#I060 Set selected driver.

#I058 Selected best compatible driver.

#-166 Device install function: DIF_INSTALLDEVICEFILES.

#I124 Doing copy-only install of "USB\VID_0457&PID_015100000000002F2".

#-166 Device install function: DIF_REGISTER_COINSTALLERS.

#I056 Coinstallers registered.

#-166 Device install function: DIF_INSTALLINTERFACES.

#-011 Installing section [uSBSTOR_BULK.NT.Interfaces] from "c:\windows\inf\usbstor.inf".

#I054 Interfaces installed.

#-166 Device install function: DIF_INSTALLDEVICE.

#I123 Doing full install of "USB\VID_0457&PID_015100000000002F2".

#I121 Device install of "USB\VID_0457&PID_015100000000002F2" finished successfully.

[2007/08/16 13:16:05 504.8 Driver Install]

#-019 Searching for hardware ID(s): usbstor\diskut161___usb2flashstorage0.00,usbstor\diskut161___usb2flashstorage,usbstor\diskut161___,usbstor\ut161___usb2flashstorage0,ut161___usb2flashstorage0,usbstor\gendisk,gendisk

#-018 Searching for compatible ID(s): usbstor\disk,usbstor\raw

#-198 Command line processed: C:\WINDOWS\system32\services.exe

#I022 Found "GenDisk" in C:\WINDOWS\inf\disk.inf; Device: "Disk drive"; Driver: "Disk drive"; Provider: "Microsoft"; Mfg: "(Standard disk drives)"; Section name: "disk_install".

#I023 Actual install section: [disk_install.NT]. Rank: 0x00000006. Effective driver date: 07/01/2001.

#-166 Device install function: DIF_SELECTBESTCOMPATDRV.

#I063 Selected driver installs from section [disk_install] in "c:\windows\inf\disk.inf".

#I320 Class GUID of device remains: {4D36E967-E325-11CE-BFC1-08002BE10318}.

#I060 Set selected driver.

#I058 Selected best compatible driver.

#-166 Device install function: DIF_INSTALLDEVICEFILES.

#I124 Doing copy-only install of "USBSTOR\DISK&VEN_UT161&PROD_USB2FLASHSTORAGE&REV_0.0000000000002F2&0".

#-166 Device install function: DIF_REGISTER_COINSTALLERS.

#I056 Coinstallers registered.

#-166 Device install function: DIF_INSTALLINTERFACES.

#-011 Installing section [disk_install.NT.Interfaces] from "c:\windows\inf\disk.inf".

#I054 Interfaces installed.

#-166 Device install function: DIF_INSTALLDEVICE.

#I123 Doing full install of "USBSTOR\DISK&VEN_UT161&PROD_USB2FLASHSTORAGE&REV_0.0000000000002F2&0".

#W100 Query-removal during install of "USBSTOR\DISK&VEN_UT161&PROD_USB2FLASHSTORAGE&REV_0.0000000000002F2&0" was vetoed by "STORAGE\RemovableMedia\7&68b3565&0&RM" (veto type 5: PNP_VetoOutstandingOpen).

#W104 Device "USBSTOR\DISK&VEN_UT161&PROD_USB2FLASHSTORAGE&REV_0.0000000000002F2&0" required reboot: Query remove failed (install) CfgMgr32 returned: 0x17: CR_REMOVE_VETOED.

#I121 Device install of "USBSTOR\DISK&VEN_UT161&PROD_USB2FLASHSTORAGE&REV_0.0000000000002F2&0" finished successfully.

[2007/08/16 13:16:13 504.12 Driver Install]

#-019 Searching for hardware ID(s): storage\volume

#-018 Searching for compatible ID(s): storage\volume

#-198 Command line processed: C:\WINDOWS\system32\services.exe

#I022 Found "STORAGE\Volume" in C:\WINDOWS\inf\volume.inf; Device: "Generic volume"; Driver: "Generic volume"; Provider: "Microsoft"; Mfg: "Microsoft"; Section name: "volume_install".

#I023 Actual install section: [volume_install]. Rank: 0x00000000. Effective driver date: 07/01/2001.

#-166 Device install function: DIF_SELECTBESTCOMPATDRV.

#I063 Selected driver installs from section [volume_install] in "c:\windows\inf\volume.inf".

#I320 Class GUID of device remains: {71A27CDD-812A-11D0-BEC7-08002BE2092F}.

#I060 Set selected driver.

#I058 Selected best compatible driver.

#-166 Device install function: DIF_INSTALLDEVICEFILES.

#I124 Doing copy-only install of "STORAGE\REMOVABLEMEDIA\7&68B3565&0&RM".

#-166 Device install function: DIF_REGISTER_COINSTALLERS.

#I056 Coinstallers registered.

#-166 Device install function: DIF_INSTALLINTERFACES.

#-011 Installing section [volume_install.Interfaces] from "c:\windows\inf\volume.inf".

#I054 Interfaces installed.

#-166 Device install function: DIF_INSTALLDEVICE.

#I123 Doing full install of "STORAGE\REMOVABLEMEDIA\7&68B3565&0&RM".

#I121 Device install of "STORAGE\REMOVABLEMEDIA\7&68B3565&0&RM" finished successfully.

[2007/08/16 13:16:03 460.3]

#-199 Executing "\??\C:\WINDOWS\system32\winlogon.exe" with command line: winlogon.exe

#-167 SPFILENOTIFY_NEEDMEDIA: Tag = "\win51ip.sp2", Description= "Windows XP Professional Service Pack 2 CD", SourcePath = "D:\i386", SourceFile = "syssetup.inf", Flags = 0x00000000.

#E169 SPFILENOTIFY_NEEDMEDIA: returned FILEOP_ABORT. Error 1223: Der Vorgang wurde durch den Benutzer abgebrochen.

#W187 Install failed, attempting to restore original files.

Can somebiody tell me what is going wrong and how to fix it (quickly :-) )?

The problem is that I will be moving and switching employers after today and nobody else really knows all the details of this Unattended Windows DVD (which is used to install all PCs) that needs to be modified.

Best regards,

mf_2