Re: stopping automatic replacement of system file
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 09/20/03
- Previous message: Nicholas: "Re: Virus alert."
- In reply to: Daniel Comp: "Re: stopping automatic replacement of system file"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 20 Sep 2003 02:31:32 -0700
"Daniel Comp" <daniel@intelligentnetware.com> wrote in message
news:0a9f01c37e69$bd549a10$a301280a@phx.gbl...
> I don't have a "system32\dllcache " folder, and as soon as
You probably do not have the Explorer options
set to display all the hidden goodies.
Try copying with the command prompt copy /b command.
-- Roger Abell Microsoft MVP (Windows, Security) MCSE (W2k3,W2k,Nt4) MCDBA > I copy the file into the system32 folder, the system > replaces it again. > > I tried this fix: > http://www.winguides.com/registry/display.php/790/ > > > Windows XP > > Make a backup the SFC_OS.DLL in the C:\WINDOWS\SYSTEM32 > directory. > Make an additional copy of SFC_OS.DLL called SFC_OS1.DLL > and open it in a hex editor. > Windows XP (no Service Pack) > At offset 0000E2B8 (0E2B8h) you should find the > values "8B" and "C6". > Windows XP (Service Pack 1) > At offset 0000E3BB (0E3BBh) you should find the > values "8B" and "C6". > Do not continue if you are unable to find these values. > Change the values "8B C6" to read "90 90" and save the > changes. > Run these commands to update the system files: > copy c:\windows\system32\sfc_os1.dll c:\windows\system32 > \sfc_os.dll /y > copy c:\windows\system32\sfc_os1.dll c:\windows\system32 > \dllcache\sfc_os.dll /y > > If you are prompted to insert the Windows CD, click > Cancel. > Restart Windows for the change to take effect. > Once these files have been updated apply the registry > setting above. > > > Registry Settings > System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\Winlogon] > Value Name: SFCDisable > Data Type: REG_DWORD (DWORD Value) > Value Data: 0 = enabled (default), ffffff9d = disabled > > Change the value of "SFCDisable" to equal "ffffff9d" to > disable WFS or "0" to enable it. The other valid > hexadecimal values are: > > > 1 - disabled, prompt at boot to re-enable > 2 - disabled at next boot only, no prompt to re-enable > 4 - enabled, with popups disabled > ffffff9d - for completely disabled > > Restart Windows for the change to take effect. > > This didn't work either. > > Any other suggestions? > > Daniel > > > >-----Original Message----- > >Copy your custom version of the file to %windir%\system32 > \dllcache as well > >as to %windir%\system32 . > > > >"Daniel Comp" <daniel@intelligentnetware.com> wrote in > message > >news:031801c37e18$411b7820$a401280a@phx.gbl... > >> Is there a way to tell XP to stop automatically > replacing > >> a customized windows/system32/riched32.dll file? > >> > >> Each time I copy my version of the file into place, XP > >> over-writes it with the original. Win2k had a popup > >> message verifying that this was what I intended to do - > >> and would then allow it. Is there a setting or a means > to > >> change the auto replcement of this one file in XP? > >> > >> I appreciate your help in advance. > > > > > >. > >
- Previous message: Nicholas: "Re: Virus alert."
- In reply to: Daniel Comp: "Re: stopping automatic replacement of system file"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|