Solved

Windows File Protection

Posted on 2003-10-21
1
168 Views
Last Modified: 2010-04-14
How can you keep the Windows File Protection message from displaying? I have indicated in the registry the location where WFP can locate files. Service Pack is 3, Operating System Windows 2000
0
Comment
Question by:waveryiii
1 Comment
 
LVL 6

Accepted Solution

by:
bkoehler-mpr earned 125 total points
ID: 9594168
WinGuides
http://www.winguides.com/registry/display.php/790/

.com.cn Tips site
http://www.cctips.com/xp/tweak/fst4.htm

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Change "SFCDisable" to "ffffff9d"

0 - enabled, default setting
1 - disabled, prompt at boot to re-enable
2 - disabled at next boot only, no prompt to re-enable
4 - enabled, with popups disabled
ffffff9d - for completely disabled

This setting is disabled in Windows 2000 SP2 and Windows XP, and needs to re-enabled using a hex editor and changing SFC.DLL (or SFC_OS.DLL for Windows XP) following these instructions:

Windows 2000 SP2

Make a backup the SFC.DLL in the C:\WINNT\SYSTEM32 directory.
 
Make an additional copy of SFC.DLL called SFC1.DLL and open it in a hex editor.
 
At offset 00006211 (6211h) you should find the values "8B" and "C6". Do not continue if you are unable to find these values.
 
Change the values "8B C6" to read "90 90" and save the changes.
 
Run these commands to update the system files:
copy c:\winnt\system32\sfc1.dll c:\winnt\system32\sfc.dll /y
copy c:\winnt\system32\sfc1.dll c:\winnt\system32\dllcache\sfc.dll /y
If you are prompted to insert the Windows CD, click Cancel.
 
Restart Windows for the change to take effect.
Windows XP

Make a backup the SFC_OS.DLL in the C:\WINDOWS\SYSTEM32 directory.
 
Make an additional copy of SFC_OS.DLL called SFC_OS1.DLL and open it in a hex editor.
 
Windows XP (no Service Pack)
At offset 0000E2B8 (0E2B8h) you should find the values "8B" and "C6".

Windows XP (Service Pack 1)
At offset 0000E3BB (0E3BBh) you should find the values "8B" and "C6".
 
Do not continue if you are unable to find these values.
 
Change the values "8B C6" to read "90 90" and save the changes.
 
Run these commands to update the system files:
copy c:\windows\system32\sfc_os1.dll c:\windows\system32\sfc_os.dll /y
copy c:\windows\system32\sfc_os1.dll c:\windows\system32\dllcache\sfc_os.dll /y
If you are prompted to insert the Windows CD, click Cancel.
 
Restart Windows for the change to take effect.
Once these files have been updated apply the registry setting above.

Note: You must manually modify the operating system files using a hex editor to allow this tweak to disable SFC on Windows 2000 (SP1+) or Windows XP.


0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
We have come a long way with backup and data protection — from backing up to floppies, external drives, CDs, Blu-ray, flash drives, SSD drives, and now to the cloud.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now