JSI Tip 5392. More on disabling Windows File Protection

In Windows 2000 Service Pack 2 and in Windows XP, Microsoft has crippled the ability to disable Windows File Protection.

NOTE: See How do I disable WFP in Windows XP SP2?

NOTE: See How do I disable WFP in Windows 2000 SP4 and Windows XP SP1a?

If you wish to disable WFP:

Windows 2000 Service Pack 2

1. Copy %SystemRoot%\System32\SFC.DLL to %SystemRoot%\System32\SFC_Patch.DLL.

2. Open %SystemRoot%\System32\SFC_Patch.DLL in a hex editor.

3. At offset 0x6211 and 0x6212, change 8BC6 to 9090 and save the changes.

4. Open a CMD prompt and type:

Copy %SystemRoot%\System32\SFC_Patch.DLL %SystemRoot%\System32\dllcache\SFC.DLL /Y
Copy %SystemRoot%\System32\SFC_Patch.DLL %SystemRoot%\System32\SFC.DLL /Y

5. If prompted to insert the Windows CD-ROM, press Cancel.

6. Shutdown and restart Windows 2000.

7. Set SFCDisable to 0xffffff9d.

8. Shutdown and restart Windows 2000.

NOTE: You could use the Recovery Console to perform the copy.

Windows XP

1. Copy %SystemRoot%\System32\SFC_OS.DLL to %SystemRoot%\System32\SFC_Patch.DLL.

2. Open %SystemRoot%\System32\SFC_Patch.DLL in a hex editor.

3. At offset 0xE2B8 and 0xE2B9, change 8BC6 to 9090 and save the changes.

4. Open a CMD prompt and type:

Copy %SystemRoot%\System32\SFC_Patch.DLL %SystemRoot%\System32\dllcache\SFC_OS.DLL /Y
Copy %SystemRoot%\System32\SFC_Patch.DLL %SystemRoot%\System32\SFC_OS.DLL /Y

5. If prompted to insert the Windows CD-ROM, press Cancel.

6. Shutdown and restart Windows XP.

7. Set SFCDisable to 0xffffff9d.

8. Shutdown and restart Windows XP.

NOTE: You could use the Recovery Console to perform the copy.



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish