Vista - vista delete files located on desktop when doing updates

I have a new laptop with installed vista. I noticed twice that vista deliberately deleted files on the desktop.
I tried to do system restore. It took its time to start and then failed.
I shall be grateful if anybody can help.
I was guessing : may be Vista is not configured correctly from the shop I bought my PC
Cheers,
monia

that sounds really wierd, check your event log under system and also under applications. and tell me any errors or warnings that come up

How do you check one's log under system /applications. I shall appreciate if you give me a hint.
Many thanks,
Monia

go to start run and type in eventvwr
or in search type in eventviewer.
What type of files are being deleted?

Hello alex,
Thank you for the eventvwr . I had to translate the error from german to english as the problem is actually on her laptop. I do not understand the system error given as follows:
===
Event filter with inquiry “SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99” could in the Namespace “/. /root/CIMV2” not be re-activated due to the error 0x80041003. Events cannot be sent by this filter, until this problem is solved
======
also the following error incurred
The event logging service recognized an error when processing a detailed event, which was published by “Microsoft Windows Security Auditing”



<Event xmlns= " http://schemas.microsoft.com/win/2004/08/events/event " >
- <System>
<Provider Name= " Microsoft Windows Servicing” Guid=” {bd12f3b8-fc40-4a61-a307-b7a013a069c1} “EventSourceName= " Microsoft Windows Servicing”/>
<EventID Qualifiers= " 32768 " >4374</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime= " 2009-09-09T16: 48: 24.000Z”/>
<EventRecordID>58890</EventRecordID>
<Correlation/>
<Execution ProcessID= " 0” ThreadID= " 0”/>
<Channel>System</Channel>
<Computer>sonnen-PC</Computer>
<Security UserID= " S-1-5-18”/>
</System>
- <UserData>
- <CbsPackageChangeState xmlns= " http://manifests.microsoft.com/win/2...setup_provider " >
<PackageIdentifier>KB971961</PackageIdentifier>
<ReleaseType>Security Update</ReleaseType>
<PackageState>Absent</PackageState>
<PackageAssembly>Package_for_KB971961_winpe~31bf3856ad364e35~x86~~6.0.10</PackageAssembly>
<Operation>Absent</Operation>
<OperationCompleted>True</OperationCompleted>
<ErrorCode>0x0</ErrorCode>
<RebootOption>False</RebootOption>
<MissingElements/>
</CbsPackageChangeState>
</UserData>
</Event>
===
Many thanks for your help
Monia

First of all, you should probably update Vista, all the KB articles and service packs.

Secondly I need to know when this happens? daily, just once, on a particular user's login, after you turn on your pc?

Hi Alex,
What is meant by KB?
The window update is done every Tuesday
Many thanks
====
I was just checking on my PC and compared with my friend PC.
I noticed that my window update is done daily at 3.00 a.m. But I still have SP 1 rather than SP 2.
Despite the update is done automatically, 3 updates were waiting to be loaded.

On my PC, I frequently window restart most of the time when I click on computer .

KR ,
Monia

Hi Monia and Alex!

Type Windows Update in the search window. If it says Windows is up to date (and you only have SP1 installed), click on "view all available updates".

This is a SP2 update for 5 languages, including German. Use this if the other method doesn't work.

http://www.microsoft.com/downloads/d...displaylang=en

and it's 1:22 am in Germany right now. You should be asleep

The computer might be waiting for confirmation from you for you to install SP2. But you should probably install this soon.
As you said it mightn't be showing, so download SP2 (if it isnt coming up in windows update go here)
http://www.microsoft.com/downloads/d...displaylang=en


(KB stands for "knowledge-base", and basically these articles are used by your machine to optimise your pc in particular ways for your particular computer configuration eg. to protect against security threats)

But you still havent really answered my question, when does the deleting normally happen?