Jump to content

disable SFC and WFP editing XP root files?


Nepali

Recommended Posts

i have gone through search but couldn't find what i am looking for..

i want to disable the SFC and WFP in windows by editing the corefile of windows XP

i hope there is two method

sfc_os.dll patch

and a registry file

ok

i can replace the file ,, but what abt registry file

which file should i have to edit for registry

is this

hivedef.inf or

hivesys.inf

or what ?

i don't want to import *.reg file to disable SFC

Link to comment
Share on other sites


Well this is the code for it according to the guide:

;Re-enable WFP
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000

So it's in HKLM...I haven't ever edited the *.inf's before install, but I think they are different, one for HKLM and the other for HKCU. But I might be wrong...and this should probably be in the Unattended Section.

Link to comment
Share on other sites

where to enter this code..

i think to disable it must be FFFFFF9D

i am not concerned with *.reg

i am concerned with XP root files

Eg editing *.inf

not by importing

Windows Registry Editor Version 5.00

;Disable Windows File Protection (WFP) (to enable, change to 0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]"SFCDisable"=dword:FFFFFF9D

Link to comment
Share on other sites

If you would just open the inf's for a second, you'll see that hivedef.inf deals mostly with HKCU, which is not what you need. Now if you open hivesft.inf, you'll see most of the list is for HKLM, which is what you need. Now take that a step further, and see how it's broken down:

HKLM,"SOFTWARE\Microsoft\DataAccess","FullInstallVer","2.81.1117.0"

So looking at the code (And yeah, I grabbed the wrong one):

;Disable Windows File Protection (WFP) (to enable, change to 0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:FFFFFF9D

You'll should see how it all works out...I can't verify this but it should be something like this:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SFCDisable","dword:FFFFFF9D"

That last part I'm a little unsure off...maybe try it with "dword:FFFFFF9D", and if that doesn't work then try "FFFFFF9D"

Looks like most of the *.inf's have different sections:

AddReg, DelReg, etc

I would think you would need to input this into the AddReg section.

Link to comment
Share on other sites

What does this line in HIVESFT.INF do

Enable or Disable

Sorry for the cause of confusion
  • to enable

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,0

  • or

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x00010001,0x00000000

  • to disable

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x10001,-99

  • or

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon",SFCDisable,0x00010001,0xFFFFFF9D

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...