Replacing files protected by the Windows File Protection

Article translations Article translations
Article ID: 555486 - View products that this article applies to.
Author: Alessandro Angeli MVP
Expand all | Collapse all

On This Page


SUMMARY

This article describes a potentially dangerous and unsupported technique that will allow system administrators to replace or modify files protected by the Windows File Protection.

Tips

INFO

This technique applies to Windows Server 2003 Standard Edition but it may also work with all the listed products (NT5.x, that is Windows 2000/XP/2003).

INTRO

This article describes a potentially dangerous and unsupported technique that will allow system administrators to replace or modify files protected by the Windows File Protection without the need for a system update (Service Pack, HotFix, system upgrade, Windows Update). Article 222193 of the Knowledge Base states that WFP restores the modified file taking it from its cache ("%systemroot%\system32\dllcache") and, if that fails (because the file is missing or corrupted), from the system installation path or media. However, before getting the file from the installation path or media, WFP will notify the user and ask. At this point, the user can cancel the dialogthus aborting the replacement.

HOWTO

This technique requires the user to first overwrite the file in the WFP cacheand then overwrite the actual file. When asked to provide the media, the user must cancel the dialog. The WFP cache ("%systemroot%\system32\dllcache") is not protected and its files can be overwritten either using the Windows Explorer or the command prompt. Since the folder is a compressed system folder, it is necessary to disable the "Hide protected operating system files" option in the global folder options to see the folder in Windows Explorer or in a directory listing.

Properties

Article ID: 555486 - Last Review: November 2, 2005 - Revision: 1.0
APPLIES TO
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows XP Embedded Service Pack 1
  • Microsoft Windows XP Embedded Service Pack 2
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Media Center Edition 2002
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Service Pack 1
  • Microsoft Windows XP Service Pack 2
  • Microsoft Windows XP Tablet PC Edition
COMMUNITY SOLUTIONS CONTENT DISCLAIMER
MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com