Knowledge Base

Error Message: Windows Service Pack 1 Has Detected That One or More Protected Core System Files on Your Computer Have Been Modified

Article ID: 327120

Article Last Modified on 9/5/2002

APPLIES TO

Microsoft Windows XP Professional
Microsoft Windows XP Home Edition

This article was previously published under Q327120

SYMPTOMS

When you install Windows XP Service Pack 1 (SP1) on your computer, you may receive the following error message:

Windows Service Pack 1 has detected that one or more protected files on your computer have been modified. The Service Pack contains updated versions of those files, which work to provide a stable environment for your programs.

If you click Yes, the updated versions will overwrite the current files and you might lose certain customizations created by third-party programs, especially those that affect the graphic displayed when your computer starts up.

If you click No, the computer might fail or stop responding.

For more information, see Knowledge Base article <Q327120> at http://support.microsoft.com.

Do you want to overwrite the files?

CAUSE

You receive this error message if the computer has a modified version of the Ntoskrnl.exe file. Windows XP SP1 contains an updated version of this file. If the SP1 installer detects a modified version of the Ntoskrnl.exe file, it generates this error message. You can then either overwrite the file or to continue installing SP1 without replacing the file. If you click No, the computer might not work correctly or might stop responding (hang).

RESOLUTION

Click OK in the error message dialog box to permit the SP1 installer to overwrite the modified Ntoskrnl.exe file with an updated version.

STATUS

This behavior is by design.

Keywords: kberrmsg kbprb KB327120

Microsoft KB Archive/327120

Contents