Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: Windows File Protection|
Windows File Protection could not be initialized. The specific error code is 0xc000000f.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the Windows File Protection?
As per Microsoft: "This behavior may occur because of an infection by VX2 malicious program variants". See ME904677 for more information about this issue.
See the link to "Information about VX2 Adware" for details about VX2.
For generic information about the 0xc000000f code, see the link to the Error code 0xc000000f.
This problem seems to crop up frequently after installing Norton AntiVirus on Windows 2000, any version. If the AV is scheduled to run a scan, after the scan is finished, you may find several 64004's in the Event Viewer and Windows may also have a popup window requiring you to enter your installation media. Norton appears to recognize that this is a problem. Norton's recommended fix is contained in Microsoft Knowledge Base Article - ME296241.
|Private comment: Subscribers only. See example of private comment|
|Links: ME296241, ME904677, Error code 0xC000000F, Information about VX2 Adware|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated