[Release] Hacked sfc_os.dll (disables WFP)

Post by **RyanVM** » Sun Oct 30, 2005 1:31 am

DLL is version 5.1.2600.2180.
http://addons.ryanvm.net/ryanvm/RVMAddonsSFC_1.0.cab (50.5KB)
MD5: 7F6BC6552D6AADB91DCA6A7BC6D1CCA5

Vista · Post by **Vista** » Sun Oct 30, 2005 10:05 am

RyanVM, will this delete the "dllcache" folder in System32 (which takes lot of space)

Post by **RyanVM** » Sun Oct 30, 2005 10:28 am

No, but it leaves it empty minus a few CAT files

dgelwin · Post by **dgelwin** » Tue Nov 01, 2005 8:33 pm

will this also add the registry entry which disables windows file prtoection?

Siginet · Post by **Siginet** » Tue Nov 01, 2005 9:00 pm

no need for the registry entry when you use this file.

dgelwin · Post by **dgelwin** » Tue Nov 01, 2005 10:45 pm

but i thought i red somewhere that all this modded file permited was to be able to use the regtweak which disables sfc

Kelsenellenelvian · Post by **Kelsenellenelvian** » Tue Nov 01, 2005 10:50 pm

It was found out that another way could be used so the reg file does not have to be used.

Post by **RyanVM** » Tue Nov 01, 2005 10:59 pm

Correct. The DLL in this addon requires no registry tweaks to work

dgelwin · Post by **dgelwin** » Wed Nov 02, 2005 5:45 pm

tnx everyone for the help and quic response to my question.

EgOrus · Post by **EgOrus** » Sun Nov 27, 2005 12:28 pm

RyanVM
Can you explain how this patched dll work? What the difference with nlite or RaveRod method?

Post by **RyanVM** » Sun Nov 27, 2005 2:01 pm

It's the same as the nLite method.

Siginet · Post by **Siginet** » Sun Nov 27, 2005 2:08 pm

Is it the same as NLite? I don't think it is. Unless nuhi changed the way he did it. I thin NLite adds the reg entries to the hive file. With this file the reg entries are not needed.

Post by **RyanVM** » Sun Nov 27, 2005 2:37 pm

Really? I thought nuhi was the one who helped you develop your no registry entry needed version...?

keytotime · Post by **keytotime** » Sun Nov 27, 2005 2:46 pm

If you use the regtweak will it affect anything?

dgelwin · Post by **dgelwin** » Sun Nov 27, 2005 3:36 pm

so far i have used this hacked sfc with no regtweak, done a lot of changes and sfc hasnt given me any hickups as to date. but i dont thin the reg entrys would hurt anything. there just simply not needed.

EgOrus · Post by **EgOrus** » Sun Nov 27, 2005 9:06 pm

RyanVM
nLite don't patch sfc_os.dll in last versions, it patches sfcfiles.dll and uses regtweaks - SFCDisable
can you answer my question plz?

Siginet · Post by **Siginet** » Sun Nov 27, 2005 10:21 pm

Yes Nuhi was helping me... but then Paul found info about the rout that we took and we decided to use it instead.

Kelsenellenelvian · Post by **Kelsenellenelvian** » Sun Nov 27, 2005 10:32 pm

EgOrus wrote:RyanVM
nLite don't patch sfc_os.dll in last versions, it patches sfcfiles.dll and uses regtweaks - SFCDisable
can you answer my question plz?

Same thing in the end just different methods and with nlited method you should be able to delete those "undelete-able" folders.

Protagonist. · Post by **Protagonist.** » Mon Nov 28, 2005 2:21 am

Kelsenellenelvian wrote:
EgOrus wrote:RyanVM
nLite don't patch sfc_os.dll in last versions, it patches sfcfiles.dll and uses regtweaks - SFCDisable
can you answer my question plz?
Same thing in the end just different methods and with nlited method you should be able to delete those "undelete-able" folders.

When I've been using nLite recently I haven't even had those folders in program files to begin with. After windows is installed there is no xerox folder or games folder or that other folder that holds wordpad and outlook express and stuff.

EgOrus · Post by **EgOrus** » Mon Nov 28, 2005 5:09 am

Kelsenellenelvian
I understand that all methods do one task, - disable WFP. But it's clear to me how last nuhi's nLite and RaveRod's methods work, and not clear how sfc_os.dll form RVMAddonsSFC_1.0.cab work.

thuun · Post by **thuun** » Thu Dec 01, 2005 12:22 am

SFC 1.0 actually will cause various problems w/system and disable other addons...not sure why, but this happened bunch of times 'til I figured this out and removed it from my integration folder, too bad.
pls. re-work this one!!!
props to RVM anyhoo...

Siginet · Post by **Siginet** » Thu Dec 01, 2005 1:39 am

Weird that you are the only one who has ever reported this issue? I have never had a problem.

Post by **RyanVM** » Sun Jan 15, 2006 4:52 pm

Here's more info on how the file was patched direct from the person who came up with it, jdoe:
http://www3.sympatico.ca/lazimute/index.html#sfc_hack

DisabledTrucker · Post by **DisabledTrucker** » Sun Jan 15, 2006 5:00 pm

Interesting read, now if I could only understand any of what he said... LOL

Yurek3 · Post by **Yurek3** » Sun Jan 15, 2006 5:07 pm

Try mine

http://rapidshare.de/files/11124969/SFC.Files.rar.html

I guaranty work good.

in fase T-9 you get only one minute.

and you can write in winnt.sif file

[SystemFileProtection]
SFCQuota=0
SFCDisable=ffffff9d

[SetupData]
OSLoadOptionsVar="/noexecute=AlwaysOff"

[SystemFileProtection]
; SFCScan=0
; SFCDisable=2
; SFCDllCacheDir = %SYSTEMROOT%\Windows\System32\Dllcache
; quota in hex below is (=50M) ;FFFFFFFF (=0M)
SFCQuota=0x14
SFCShowProgress=1

or make boot.ini like this

@echo off

SET ProgPath=C:
SET ORIG=%ProgPath%\Boot.ini
SET NEW=%ProgPath%\Boot_New.ini

ATTRIB -R -S -H %ORIG%

IF EXIST "%NEW%" (
ATTRIB -R -S -H %NEW%
DEL /Q "%NEW%"
)
FOR /F "delims=*" %%L IN (%ORIG%) DO (
SET Begin=%%L
IF "!Begin:~0,8!" == "timeout=" (
ECHO.timeout=4 >>"%NEW%"
) ELSE (
ECHO.%%L >>"%NEW%"
)
)
COPY /Y %ORIG% %ORIG%_OLD
COPY /Y %NEW% %ORIG%

bootcfg /raw /id 1 "/noexecute=AlwaysOff /NOPAE /fastdetect"

Kelsenellenelvian · Post by **Kelsenellenelvian** » Sun Jan 15, 2006 8:21 pm

Hello Yurek

Post by **RyanVM** » Sat May 13, 2006 10:19 am

Obsoleted by Aserone's addon.
viewtopic.php?t=2194