Need help disabling WFP in SP2

Bunchofstuff

Bunchofstuff

banned
Ok, im trying to disable the windows file protection in windows xp home sp2 , i know you have to open up the SFC_OS.DLL file and modify it with a hex editor, but i need to know what to change, i found some stuff on it by searching google but i think its for sp1 or professional only.....also i found a sfc_os.dll that somebody already hacked so i tried to replace the non-hacked one with the hacked on and the windows file protection replaces it with a non-hacked one ( yes i switched it out in the dll-cache too)

im trying to just make it where i can edit explorer.exe with resouce hacker, theres another way of doing it where you go here %systemroot%\system32\Restore and edit the xml file to include explorer.exe but i can't get that to work etheir on my computer, but i got it to work on another one that has windows xp home edition no service packs

thanks for the help....
 
Disabling Windows File Protection

You may disable WFP by setting the value SFCDisable (REG_DWORD) in HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon. By default, SFCDisable is set to 0, which means WFP is active. Setting SFCDisable to 1 will disable WFP. Setting SFCDisable to 2 will disable WFP for the next system restart only (without a prompt to re-enable).

Important: You must have a kernel debugger attached to the system via null modem cable (for example:I386kd.exe or Windbg.exe) to use SFCDisable = 1 or SFCDisable = 2.

After WFP is disabled using the SFCDisable = 1 setting, the following message will appear after logon:

Warning! Windows File Protection is not active on this system. Would you like to enable Windows File Protection now? This will enable Windows File Protection until the next system restart. <Yes> <No>.

Clicking Yes will reactivate WFP until the next system restart. This message will appear at every successful logon until SFCDisable is set to 0.

NOTE: The above message will only be presented to Administrators.
 
Ok , thanks, i finally figured it out, with SP2 i guess you have to boot into safe mode to switch out the explorer.exe files instead of doing the control+shift+Esc method
 
You must log in or register to reply here.
Back
Top