In my earlier article on disabling System File Protection in
Windows XP SP 2, the method involved using the XP-SP1 version of the dll file in need of editing. However, some have claimed
that file protection still remained enabled after following the steps outlined.
Therefore, here I will present an alternate method where we will edit the
default sfc_os.dll included in XP-SP2 in an attempt to disable file protection.
Note! Only proceed if the values shown exist. This was
tested with sfc_os.dll version 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Follow the same basic instructions as in the previous article: http://pubs.logicalexpressions.com/Pub0009/LPMArticle.asp?ID=510, BUT, this time edit SFC_OS.DLL as follows:
Open SFC_OS.DLL in a hex editor (here we are using
UltraEdit to illustrate)
Go to hex offset 0F82
Once replaced, go to offset ECE9 hex
Save and Exit.
Follow the steps in the previous article to make sure both sfc_os.dll files (the one in System32 and the one in System32\DllCache folder) are replaced with the edited version of the file.
The last step is the same as in the previous article
In the right hand pane, if it doesn't exist, create a new Dword value named:
Double click it and enter:
Exit the registry and reboot. System File Protection
should now be disabled.