Your Daily Tech-Byte
If you have edited a Windows system file for some mod or customisation, you may have come across a Windows File Protection (WFP) dialog box. Windows XP has this feature as a part of the System File Checker, which is intended to prevent some common DLL file issues. The WFP notifies you whenever there’s an attemp to change a system file. This feature may also block valid attempts to change system files. You can therefore disable it using this tweak if you are tired of seeing that box.
Note: To perform this tweak, you need to have your Windows XP CD-Rom and a hex editor. If you do not have a hex editor, you can use BinEdit, which is freeware. Also make sure that you backup the DLL file being used in this tweak to a safe location.
Follow the steps below:
Part one:
1. Open the ‘Run’ dialog box.
2. Type in ‘regedit’ and click OK.
3. Locate this string:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
4. In the right pane, right-click on the ‘SFCDisable’ string.
5. Select Modify and type in ‘ffffff9d‘ in the Value Data box.
6. Click OK and close regedit.
Part two:
1. Go to C:\Windows\System32.
2. Search for the file ‘SFC_OS.dll‘.
3. Copy the file and paste it on the desktop.
4. Rename the copied file as ‘SFC_OS1.dll’.
5. Now move this ‘SFC_OS1.dll’ file to the C:\Windows\System32 folder.
6. Start your hex editor and open the file ‘SFC_OS1.dll’.
7. Click on ‘Edit’ and select ‘Write Mode Enabled’.
8. On the left side look for ’0000e2b0′.
9. This line contains the 8B and C6 bytes.
10. Change these bytes to 90 and 90.
11. Save the file and exit the program.
Part 3:
1. Insert your Windows XP CD-Rom.
2. Restart your PC.
3. Make sure that your PC is set to boot from the CD-Rom first.
4. Boot from the Windows XP CD.
5. Wait for the CD to load the files.
6. After it’s over, press the ‘R’ button on your keyboard to start the Windows XP Recovery Console.
7. Follow the prompts on the screen.
8. Once you are through, type in the following line exactly as it appears:
copy C:\Windows\System32\sfc_os1.dll C:\Windows\System32\sfc_os.dll
9. Hit Enter. Type in Yes (Y) if asked to overwrite the file.
10. Eject the Windows XP CD.
11. Type ‘Exit’ and press Enter to reboot.
Now you won’t see the Windows File Protection (WFP) dialog box again. This trick is really useful if you modify files very often and want to get rid of the WFP.
Larry Miller
December 18th, 2008 at 3:52 pm
NOT RECOMMENDED
Windows File Protection is a valuable feature that should not be lightly disabled. Doing this can lead to serious and difficult to diagnose problems. This feature prevents the deletion or accidental replacement of critical system files. This sometimes occured during software installation.
This feature will not prevent the legitimate update of system files as Windows update and Service packs routinely do this. Iy can also be done manually very easily. Simply copy the new file to c:\windows\system32\dllcache, then delete the file from the original location. The system will then replace this file with the new version. WARNING, be very sure you know what you are doing. This could render you system unbootable.
Larry Miller
Microsoft MCSA
Arjun
December 19th, 2008 at 6:15 am
You should not disable the Windows File Protection feature until and unless you are pretty sure of what you are doing.
This trick is meant for people who are frequent modders and don’t want the File Protection dialog box to be displayed each time they edit or replace a file.
lexluthermiester
February 20th, 2009 at 9:57 pm
Unfortunately, disabling WFP is the only way of permanently removing unwanted/unneeded programs and files that come preinstalled such as Internet Explorer, Outlook Express, all the MSN “stuff”, Windows Media Player and Netmeeting among may others. And before anyone chimes in about how these apps and files are “required” for windows to function stably, just stop. They are not required at all! Windows will function just fine and completely stable without any of them.
Of course, rather than go through all the trouble of trying to disable the hard way, one could simply use a third party program to erase[try Eraser] to wipe out all the contents of the system32\dllcache folder, then changing/removing the apps or files in question. By wiping the stated folder you effectively remove anything for windows to track and thus it has no reference files to restore from. It will ask for the installation CD once or twice, but this is a very minor annoyance. One must also be careful to be sure that an i386 folder[which contains all of the install libraries and is used by many OEM's] is not present on the drive[s], or at least that windows is not aware of it. If present, one can remove windows awareness by searching the registry for entries of “i386″ and modifying the drive letter to point to an optical drive or drive letter not in use by the system, such as drive “T:\”, and then erasing the folder in question or moving it to another location.