There's a strange problem with my PC since yesterday, whenever I log on, I keep getting this message "One of the protected files has been replaced by unknown version, insert WIN 2000 CD to replace by original version". When I insert the CD, it copies lot of files to WINNT and system32 dir. Then copying stops for 4/5 mins, again the message starts poping up, and if I take the CD out, the message keeps poping up all the time. The machine is not connected to the internet, it must have got this virus by a floppy disk or so. Couldn't find any such threat mentioned on Symantec siteas well, any help??? Thanks, - Manish

Try taking the HD out and putting it in a clean machine, with latest possible update of virus defenition, and do an offline scan that way, to be sure... Super Dude ICQ: 285145

That's not feasible for me, any other reason why this could be happening besides virus? - Manish

Try booting to a floppy or to safe mode and run a virus scan from there. It sounds like a virus to me and the virus is replacing or corupting files at the same time windows is trying to fix them. You will need to disable the virus first to put the clean files back.

Hmmmm, I guess, I'll give it try, but as that machine is not connected to the internet the anti-virus (norton) is quite dated. Besides, I have noticed that the system has replaced lot of files with "old" win2k files, instead of the files from service pack 2. Now when I try to run the service pack, it says corrupt files w/o listing those files. looks like, I'lll need to reformat the HD. :(( Can I at least know which virus is doing this?? Any one of those know viruses? Also, I noticed that System32 dir has one new modified file dated 12 June 2002, called 401COMUPD.EXE??? Also, there's no unknown entry in HKLM/Software/Microsoft/Windows/Current Version/Run key. What else can I do? - Manish

Suck it up, update the virus soft and run a freakin scan already. Thats the only way you will know if it is a virus or some other problem. This is also the only way you will know how to solve the problem, ie disinfect your system,reinstall or some other fix. You need to give more info on your problem if you expect any help. You update anything recently, maybe from a floppy, or burned CD, mabe they were infected or installed something that corrupted a system file. What is this "unknown" run key? You mention it but don't say what it is, how vague is that? Try listing all the running processes in task manager, and possibly all the current services you are running. Try running a program called StartupCPL and remove all the clutter and crap that likes to start up when you boot but that you don't need.