Re: Editing URL.DLL

Windows File Protection (WFP) protects system files by running in the background and detecting attempts to replace protected system files. WFP is triggered after it receives a directory change notification on a file in a protected directory. Once this notification is received, WFP determines which file was changed. If the file is protected, WFP looks up the file signature in a catalog file to determine if the new file is the correct Microsoft version. If it is not, the operating system replaces the file with the correct version from the dllcache directory or the distribution media
---
Leonard Grey
Errare humanum est

"A Day in the Life of a Web 2.0 Hacker" - PC Magazine
http://www.pcmag.com/article2/0,2817,2330952,00.asp

1776 wrote:
Am I correct in assuming from these instructions that:

1) The file protection logic is such that the running OS protects the system folder from which it was launched.
2) Booting from CD causes the OS to leave the hard drive (let's call it the standard) system folder unprotected so that you can modify files in that folder.
3) Booting now from the standard location causes the OS to protect that folder in its launch state, which now contains the modified file.

W.

ju.c wrote:
You need to boot from a CD to copy the system file.

You can use the Windows CD to boot into the Recovery Console.
Copy your modified file to the root Windows drive (C:) then boot
the CD and copy it from there to C:\WINDOWS\system32\.

Or you can get this excellent Linux distro, "Damn Small Linux":
http://www.damnsmalllinux.org/download.html


ju.c


"Oreally" <oreally@xxxxxxxxxxx> wrote in message
news:m7qdnU4gj8wBtm3VnZ2dnUVZ_iydnZ2d@xxxxxxxxxxxxxx
How can delete this from System32? I want to replace it with an
edited url.dll file and it is locked by Windows? Will Safe Mode work?

Thanks



.

Relevant Pages

  • Re: Windows File Protection
    ... clicks through it so fast and the program just opens a connection for ... no changes being made because of windows file protection. ... Setting SFCDisable to 1 will disable WFP. ...
    (microsoft.public.windows.group_policy)
  • [Full-Disclosure] Silencing Windows File Protection
    ... the best way to bypass Windows File Protection (WFP) was ... The second is the dllcache ...
    (Full-Disclosure)
  • Defect in Windows File Protection?
    ... Windows File Protection (WFP) in the system32 directory on Windows XP. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Getting rid of MSN Gaming Zone
    ... This folder amongst others is a system folder and is protected by Windows File Protection (WFP). ...
    (microsoft.public.windowsxp.general)
  • Re: How Do I Fix Script Errors?
    ... OLEXP Using Virus Protection Features in Outlook Express 6 ... Turn off email scanning in your antivirus software. ... Windows 2000 and Windows XP. ... Windows XP Service Pack 2 Resources for IT Professionals ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
Quantcast