visitor Posted August 8, 2004 Share Posted August 8, 2004 SFCSetting hack for WFP...At offset (0000ECE9) change:33 C9 to:EB 01...RaveRodHey thaNX for the info. We're running SP2 build2179 & prefer to stick with this RTM release, which is working well for us. The value @ offset ECEA = C0 (not C9). All other values are as you posted for 2180......sorry - found the answer hereIs the manually applied registry value name "SFCDisable" or "SFCSetting"?thaNX Link to comment Share on other sites More sharing options...
Denney Posted August 8, 2004 Author Share Posted August 8, 2004 @visitor: The "SFCSetting" registry value should be set to "ffffff9d" if you want to disable WFP. The "SFCDisable" registry value is now useless (just there to trick Windows).Build 2179 isn't RTM by the way. It was going to be but they had to fix a few more little bugs and application compatibility. Build 2179, I think, will expire is 180 days. Link to comment Share on other sites More sharing options...
Denney Posted August 8, 2004 Author Share Posted August 8, 2004 Re-attached SFC_OS.DL_ file with better compression (thanks RyanVM). Link to comment Share on other sites More sharing options...
netquik Posted August 11, 2004 Share Posted August 11, 2004 more info about the hacK?has it modified header crc?Could explain SFCsetting and SFCdisable fact?could comment code?thanks Link to comment Share on other sites More sharing options...
kolath Posted August 11, 2004 Share Posted August 11, 2004 How would I go about removing a certain directory (in this case Program Files and everything under it) from being watched by WFP? There was post with a hacked dll for SP1 a while back, but I didn't find it in a search. Besides, I don't remember there being much in the way of instructions for making a new version of the dll. +1I have used the hacked SFC_OS.dll + registry method to disable WFP before, but all I really want to do is delete those annoying folders that XP puts in the Program Files directory (e.g. "xerox", "MSN Gaming Zone", "Movie Maker", etc). Is there any way to remove these from the list of protected files rather than disabling WFP altogether. And also, does anyone know why the heck those stupid folders are considered protected system folders in the first place? Link to comment Share on other sites More sharing options...
kolath Posted August 11, 2004 Share Posted August 11, 2004 bump? Link to comment Share on other sites More sharing options...
RyanVM Posted August 11, 2004 Share Posted August 11, 2004 How would I go about removing a certain directory (in this case Program Files and everything under it) from being watched by WFP? There was post with a hacked dll for SP1 a while back, but I didn't find it in a search. Besides, I don't remember there being much in the way of instructions for making a new version of the dll. +1I have used the hacked SFC_OS.dll + registry method to disable WFP before, but all I really want to do is delete those annoying folders that XP puts in the Program Files directory (e.g. "xerox", "MSN Gaming Zone", "Movie Maker", etc). Is there any way to remove these from the list of protected files rather than disabling WFP altogether. And also, does anyone know why the heck those stupid folders are considered protected system folders in the first place? Disable WFP, delete the folders, then re-enable it. Does that work? Link to comment Share on other sites More sharing options...
kolath Posted August 11, 2004 Share Posted August 11, 2004 nope. At least it didn't work on SP1. I disabled WFP, deleted the folders, rebooted, no problem. But if I ever re-enabled WFP, the folders would come back on the next reboot. Link to comment Share on other sites More sharing options...
visitor Posted August 11, 2004 Share Posted August 11, 2004 *DELETE* <- we're off on a tangent here, sorry ...Build 2179, I think, will expire is 180 days...How can we test this?Turning the system clock ahead did not cause it to expire...thaNX Link to comment Share on other sites More sharing options...
RyanVM Posted August 12, 2004 Share Posted August 12, 2004 nope. At least it didn't work on SP1. I disabled WFP, deleted the folders, rebooted, no problem. But if I ever re-enabled WFP, the folders would come back on the next reboot.In that case, it would be nice to be able to remove those entries from the sfcfiles list Link to comment Share on other sites More sharing options...
Denney Posted August 12, 2004 Author Share Posted August 12, 2004 To the people who want to unprotect certain folders, please use the forum search. Here the thread with that information:http://www.msfn.org/board/index.php?showtopic=21334@netquik: The SFC_OS.DL_ file attached has been modified with modpe (correct header). It is ready to be put on the CD.The SFCSetting registry key is added by me so that you can disable WFP while Windows actually looks at SFCDisable (therefore tricking Windows into thinking it's enabled).In most cases, SFCDisable will turn out to be 0x0000000 while SFCSetting will be 0xffffff9d. That tricks Windows into thinking WFP is enabled but when it comes to removing protected files, it isn't. Link to comment Share on other sites More sharing options...
RyanVM Posted August 12, 2004 Share Posted August 12, 2004 Below is a link to a patched sfcfiles.dll for SP2 (with the PE header modified), ready to be put onto a CD. I tested it in VirtualPC and it worked OK. Folders in Program Files are now deletable http://www.ryanvm.net/msfn/sfcfiles.dl_ Link to comment Share on other sites More sharing options...
GreenMachine Posted August 12, 2004 Share Posted August 12, 2004 I think you mean ...http://www.ryanvm.net/msfn/SFCFILES.DL_But I know you are just showing off that ryanvm.net !(GreenMachine.net is long gone, alas)EDIT:: Silly me: forgot to add Thanks, RyanVM! Link to comment Share on other sites More sharing options...
xb00t Posted August 12, 2004 Share Posted August 12, 2004 RaveRod, can I use your attached file and replace it in mi I386/ or do I have to edit my own SFC_OS.DLL? I didn't quite catch that... Link to comment Share on other sites More sharing options...
Denney Posted August 12, 2004 Author Share Posted August 12, 2004 @xb00t: You can use the one attached on the CD. No need to edit it. I only put the edits up so that people know what is edited in that file. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now