|
In my earlier article on disabling System File Protection in
Windows XP SP 2, the method involved using the XP-SP1 version of the dll file in need of editing. However, some have claimed
that file protection still remained enabled after following the steps outlined.
Therefore, here I will present an alternate method where we will edit the
default sfc_os.dll included in XP-SP2 in an attempt to disable file protection.
Note! Only proceed if the values shown exist. This was
tested with sfc_os.dll version 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Follow the same basic instructions as in the previous article: http://pubs.logicalexpressions.com/Pub0009/LPMArticle.asp?ID=510, BUT, this time edit SFC_OS.DLL as follows:
Open SFC_OS.DLL in a hex editor (here we are using
UltraEdit to illustrate)
Go to hex offset 0F82
And replace
440069007300610062006C0065
with
530065007400740069006E0067
Once replaced, go to offset ECE9 hex
and replace
33C0
with
EB01
Save and Exit.
Follow the steps in the previous article to make sure both sfc_os.dll files (the one in System32 and the one in System32\DllCache folder) are replaced with the edited version of the file.
The last step is the same as in the previous article
Go to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon
In the right hand pane, if it doesn't exist, create a new Dword value named:
SFCDisable
Double click it and enter:
FFFFFF9D
Exit the registry and reboot. System File Protection
should now be disabled.
|
