Jump to content

Sfc_os.dl_ Hacked !


Recommended Posts

Its all becoming clear.....Errr I think :)

so that means before this file was hacked we could not turn off wfp with a just a reg key ie we had to patch the file first and then the key would work. now we can just use the key to turn it on and off.

Link to comment
Share on other sites


Copy this into notepad and save as a .reg file, then merge it with the registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:ffffff9d

The default dword value was originally 0.

Link to comment
Share on other sites

  • 1 month later...
You could just do a reg fix until Windows 2000 SP2, I believe.  Someone correct me if I'm wrong.  Just changing the reg key didn't work after that or for Windows XP.

as he told - this old registry entry does not work

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonAdd]
"SFCDisable"=dword:FFFFFF9D

see here - http://www.lanovation.com/support/docs/NT_.../WFP_2000XP.htm

on the other hand - disabling system restore helps when replacing system files

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...