Your IP

You Are Visitor

web site traffic stats page

Tuesday, July 31, 2007

-5)..... How to disable format command in windows XP xp2

If you REALLY want to prevent the ability to Format from the right-click menu, the
first step is to disable Windows File Protection. To do that you need to hex edit
the C:\windows\system32\sfc_os.dll file (this assumes you are using WinXP SP-2, otherwise
go straight to step 3 since SP-1 does not require this hex edit).

1. Go here, download and install a free hex editor.

2. Then go here and follow the instructions on loading, editing, and saving
your modified sfc_os.dll file. You'll be able to copy it into system32\dllcache\
modified, but most likely you'll have to use the Recovery Console to copy
the modified sfc_os.dll file into \system32\.





3. Cut and paste the lighter blue text below into notepad, and save as indicated.
With the modified sfc_os.dll file in place, just double click the .reg files whenever
you want to either disable or enable WFP.

Save this file as No_WFP.reg (File Protection Disabled)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:ffffff9d

Save this file as Yes_WFP.reg (File Protection Enabled)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000

Once you've turned WFP off, reboot.

4. The next step is to modify the c:\windows\system32\shell32.dll file. To do that,
you'll need a resource hacker like this one. Download and copy the zipped files into a folder and
launch the executable. SAVE YOUR MOST RECENT SHELL32.DLL FILE TO ANOTHER LOCATION
- FLOPPY/FLASH DRIVE ANOTHER DRIVE, ETC.

5. In Resource Hacker, open C:\windows\system32\shell32.dll and find this section:
Dialog: 28672: 1033.

Delete the resource and save the shell32.dll file - if you are not able to save it
right back into C:\windows\system32, then save it to another location, for example
to C:\shell32.dll. Then go back into the Recovery Console and copy the modified shell32.dll
into C:\windows\system32 and to C:\windows\system32\dllcache. Reboot and now when
anyone clicks on Format from the right-click menu NOTHING will happen or be displayed
(no Format Box). You will still be able to format drives by using a cmd box and the
c:\windows\system32\format.com command, if you want to disable this too, rename this
file or move it to another location only you know about or off the hard drive altogether.



6. When you're done tinkering, turn WFP back on with the second .reg file (Yes_WFP.reg)
and you're done.

No comments: