disable SFC and WFP editing XP root files?

[Nepali]

i have gone through search but couldn't find what i am looking for..

i want to disable the SFC and WFP in windows by editing the corefile of windows XP

i hope there is two method

sfc_os.dll patch

and a registry file

ok

i can replace the file ,, but what abt registry file

which file should i have to edit for registry

is this

hivedef.inf or

hivesys.inf

or what ?

i don't want to import *.reg file to disable SFC

[InTheWayBoy]

Well this is the code for it according to the guide:

;Re-enable WFP
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000

So it's in HKLM...I haven't ever edited the *.inf's before install, but I think they are different, one for HKLM and the other for HKCU. But I might be wrong...and this should probably be in the Unattended Section.

[Nepali]

where to enter this code..

i think to disable it must be FFFFFF9D

i am not concerned with *.reg

i am concerned with XP root files

Eg editing *.inf

not by importing

Windows Registry Editor Version 5.00

;Disable Windows File Protection (WFP) (to enable, change to 0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]"SFCDisable"=dword:FFFFFF9D

[InTheWayBoy]

If you would just open the inf's for a second, you'll see that hivedef.inf deals mostly with HKCU, which is not what you need. Now if you open hivesft.inf, you'll see most of the list is for HKLM, which is what you need. Now take that a step further, and see how it's broken down:

HKLM,"SOFTWARE\Microsoft\DataAccess","FullInstallVer","2.81.1117.0"

So looking at the code (And yeah, I grabbed the wrong one):

;Disable Windows File Protection (WFP) (to enable, change to 0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:FFFFFF9D

You'll should see how it all works out...I can't verify this but it should be something like this:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SFCDisable","dword:FFFFFF9D"

That last part I'm a little unsure off...maybe try it with "dword:FFFFFF9D", and if that doesn't work then try "FFFFFF9D"

Looks like most of the *.inf's have different sections:

AddReg, DelReg, etc

I would think you would need to input this into the AddReg section.

[Yzöwl]

I would try adding this line to HIVESFT.INF

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,0

[Nepali]

What does this line in HIVESFT.INF do

Enable or Disable

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,0

[Yzöwl]

What does this line in HIVESFT.INF do

Enable or Disable

Sorry for the cause of confusion

• to enable
  

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,0

• or
  

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x00010001,0x00000000

• to disable
  

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,-99

• or
  

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x00010001,0xFFFFFF9D

[Ex0dus]

this doesnt really help your problem but could someone tell me why you would want to disable sfc? and WFP?

Edited September 14, 2005 by Ex0dus

[Nepali]

i have rvyan pack + xpize and some modified files

EG winntbbu.dll

shell32.dll

mydocs.dll

moricons.dll

thats why i want to disable it from root file (this is not a unattended CD)

i don't use $oem$ folder.