stopping automatic replacement of system file

  • Thread starter Thread starter Daniel Comp
  • Start date Start date
D

Daniel Comp

Is there a way to tell XP to stop automatically replacing
a customized windows/system32/riched32.dll file?

Each time I copy my version of the file into place, XP
over-writes it with the original. Win2k had a popup
message verifying that this was what I intended to do -
and would then allow it. Is there a setting or a means to
change the auto replcement of this one file in XP?

I appreciate your help in advance.
 
Copy your custom version of the file to %windir%\system32\dllcache as well
as to %windir%\system32 .
 
I don't have a "system32\dllcache " folder, and as soon as
I copy the file into the system32 folder, the system
replaces it again.

I tried this fix:
http://www.winguides.com/registry/display.php/790/


Windows XP

Make a backup the SFC_OS.DLL in the C:\WINDOWS\SYSTEM32
directory.
Make an additional copy of SFC_OS.DLL called SFC_OS1.DLL
and open it in a hex editor.
Windows XP (no Service Pack)
At offset 0000E2B8 (0E2B8h) you should find the
values "8B" and "C6".
Windows XP (Service Pack 1)
At offset 0000E3BB (0E3BBh) you should find the
values "8B" and "C6".
Do not continue if you are unable to find these values.
Change the values "8B C6" to read "90 90" and save the
changes.
Run these commands to update the system files:
copy c:\windows\system32\sfc_os1.dll c:\windows\system32
\sfc_os.dll /y
copy c:\windows\system32\sfc_os1.dll c:\windows\system32
\dllcache\sfc_os.dll /y

If you are prompted to insert the Windows CD, click
Cancel.
Restart Windows for the change to take effect.
Once these files have been updated apply the registry
setting above.


Registry Settings
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon]
Value Name: SFCDisable
Data Type: REG_DWORD (DWORD Value)
Value Data: 0 = enabled (default), ffffff9d = disabled

Change the value of "SFCDisable" to equal "ffffff9d" to
disable WFS or "0" to enable it. The other valid
hexadecimal values are:


1 - disabled, prompt at boot to re-enable
2 - disabled at next boot only, no prompt to re-enable
4 - enabled, with popups disabled
ffffff9d - for completely disabled

Restart Windows for the change to take effect.

This didn't work either.

Any other suggestions?

Daniel
 
Daniel Comp said:
I don't have a "system32\dllcache " folder, and as soon as
Click to expand...


You probably do not have the Explorer options
set to display all the hidden goodies.
Try copying with the command prompt copy /b command.

--
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4) MCDBA
I copy the file into the system32 folder, the system
replaces it again.

I tried this fix:
http://www.winguides.com/registry/display.php/790/


Windows XP

Make a backup the SFC_OS.DLL in the C:\WINDOWS\SYSTEM32
directory.
Make an additional copy of SFC_OS.DLL called SFC_OS1.DLL
and open it in a hex editor.
Windows XP (no Service Pack)
At offset 0000E2B8 (0E2B8h) you should find the
values "8B" and "C6".
Windows XP (Service Pack 1)
At offset 0000E3BB (0E3BBh) you should find the
values "8B" and "C6".
Do not continue if you are unable to find these values.
Change the values "8B C6" to read "90 90" and save the
changes.
Run these commands to update the system files:
copy c:\windows\system32\sfc_os1.dll c:\windows\system32
\sfc_os.dll /y
copy c:\windows\system32\sfc_os1.dll c:\windows\system32
\dllcache\sfc_os.dll /y

If you are prompted to insert the Windows CD, click
Cancel.
Restart Windows for the change to take effect.
Once these files have been updated apply the registry
setting above.


Registry Settings
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon]
Value Name: SFCDisable
Data Type: REG_DWORD (DWORD Value)
Value Data: 0 = enabled (default), ffffff9d = disabled

Change the value of "SFCDisable" to equal "ffffff9d" to
disable WFS or "0" to enable it. The other valid
hexadecimal values are:


1 - disabled, prompt at boot to re-enable
2 - disabled at next boot only, no prompt to re-enable
4 - enabled, with popups disabled
ffffff9d - for completely disabled

Restart Windows for the change to take effect.

This didn't work either.

Any other suggestions?

Daniel

-----Original Message-----
Copy your custom version of the file to %windir%\system32 \dllcache as well
as to %windir%\system32 .




.
Click to expand...
Click to expand...
 
Back
Top