Solved

Windows File Protection

Posted on 2003-10-21
1
174 Views
Last Modified: 2010-04-14
How can you keep the Windows File Protection message from displaying? I have indicated in the registry the location where WFP can locate files. Service Pack is 3, Operating System Windows 2000
0
Comment
Question by:waveryiii
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 6

Accepted Solution

by:
bkoehler-mpr earned 125 total points
ID: 9594168
WinGuides
http://www.winguides.com/registry/display.php/790/

.com.cn Tips site
http://www.cctips.com/xp/tweak/fst4.htm

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Change "SFCDisable" to "ffffff9d"

0 - enabled, default setting
1 - disabled, prompt at boot to re-enable
2 - disabled at next boot only, no prompt to re-enable
4 - enabled, with popups disabled
ffffff9d - for completely disabled

This setting is disabled in Windows 2000 SP2 and Windows XP, and needs to re-enabled using a hex editor and changing SFC.DLL (or SFC_OS.DLL for Windows XP) following these instructions:

Windows 2000 SP2

Make a backup the SFC.DLL in the C:\WINNT\SYSTEM32 directory.
 
Make an additional copy of SFC.DLL called SFC1.DLL and open it in a hex editor.
 
At offset 00006211 (6211h) you should find the values "8B" and "C6". Do not continue if you are unable to find these values.
 
Change the values "8B C6" to read "90 90" and save the changes.
 
Run these commands to update the system files:
copy c:\winnt\system32\sfc1.dll c:\winnt\system32\sfc.dll /y
copy c:\winnt\system32\sfc1.dll c:\winnt\system32\dllcache\sfc.dll /y
If you are prompted to insert the Windows CD, click Cancel.
 
Restart Windows for the change to take effect.
Windows XP

Make a backup the SFC_OS.DLL in the C:\WINDOWS\SYSTEM32 directory.
 
Make an additional copy of SFC_OS.DLL called SFC_OS1.DLL and open it in a hex editor.
 
Windows XP (no Service Pack)
At offset 0000E2B8 (0E2B8h) you should find the values "8B" and "C6".

Windows XP (Service Pack 1)
At offset 0000E3BB (0E3BBh) you should find the values "8B" and "C6".
 
Do not continue if you are unable to find these values.
 
Change the values "8B C6" to read "90 90" and save the changes.
 
Run these commands to update the system files:
copy c:\windows\system32\sfc_os1.dll c:\windows\system32\sfc_os.dll /y
copy c:\windows\system32\sfc_os1.dll c:\windows\system32\dllcache\sfc_os.dll /y
If you are prompted to insert the Windows CD, click Cancel.
 
Restart Windows for the change to take effect.
Once these files have been updated apply the registry setting above.

Note: You must manually modify the operating system files using a hex editor to allow this tweak to disable SFC on Windows 2000 (SP1+) or Windows XP.


0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Part One of the two-part Q&A series with MalwareTech.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question