Some nLite tweaks

[trodas]

...because nLite won't work for me ATM.

I wonder if anyone know about these there things that I would very much like to deploy :)
On Windows 2000 SP2 Czech build 2948.


First - windows file protection. You know it - move notepad, ping or any other file to trash and the annoing message come in... right? So, how to disable it? I found something that look like this (WFP? Windows File Protection? Or it shoudl be SFC? Symtem File Check?) yet my attempt failed:


REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000001


Second - NTFS date stamp. NTFS save last access time, witch took time and I want disable it. How? Anyone know? :confused:


Third - TCP/IP priority 1. nLite claim that it "drastically reduce the response" on network based stuff, witch interest me - of course :) Many reasons - from faster surfing to ping in games - all is TCP/Ip related. Now - how? :lol:


My friend, on XP, using TuneUp 2004 get the windows file protection sucesfully disabled and the register have this value:


REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:ffffff9d

Yet for me it won't work/help/cause any change. And since he have the TuneUp 2004 uninstalled anyway, it has to be - at least for win2k something else... :rolleyes:

Hmmm, I actually tried it on another PC with XP SP2 and the results are exactly the same. This simple thing does not work. Something is still missing :p:

Anyone?

[trodas]

How to kill NTFS date stamp

http://www.windowsdevcenter.com/pub/a/windows/2005/02/08/NTFS_Hacks.html

After I looking (unsucesfully for free (no registrations, for christ sake!)) download of fsutil, i read that the 60k utility is included with every XP install, so I take it to my Win2k SP2 from the XP machine and used and deleted when the bite is set:

fsutil behavior set disablelastaccess 1

Ha! :D

One down, two to go :D

Now about WFP - well, this is my responsibility, since it is MY system, right? Besides, I have a backup. And I frequently modify any files I feel fit, so such childish limitations I consider myself as too restricting. (like the commies once restricted us in some ways, till we found out the hard way, that in US people get restricted "for their own good" - like the commies say - by similar ways as commies did... - political ramblings, pay no attention)
Therefore I want it to go - to hell, to be precise. I also extremly hate the idea that OS is controlling what I doing. Hell, if I wand to delete any OS file, I will do it. Still. No-one can stop me - okay, dllcache can make my life harder, but still can't stop me. No way.
I already found some solutions there:
http://www.vorck.com/2ksp5.html#15
...however I have first ask the utmost important question - WITCH process is watching over my files? I did not - like I mention - are comfortable with the idea of OS watching over me, and I also did not see any SFC.exe as process into my windows!
Therefore it must be hidden or something - or simply sincluded with another process. I want to kill then the process as well! ;)

And yep, you got a point with the games and UDP. So, let me just say that I want to try it out, okay? If it will be better or not :)


PS. I already modified some dll files (even the shell32.dll one), so... To hell with WFP ;)

http://www.updatexp.com/windows-file-protection.html
Ha! It IS a invisible suxxka! KIIIILLLL!!!

[trodas]

My today findings.

by creating a totally disabled SFC.DLL, and his method has since spread far and wide to sites I won't even mention.

Totally disabled sounds very good for me. In need, please re-read my goals to get rid of CPU, memory and files asociated with the WFP hidden service.
So, I searched and found: http://www.winguides.com/registry/display.php/790
I edited the poor sfc.dll (change the values "8B C6" to read "90 90") file and replaced it by my way - just rename the orginal to sfcx.dll and copy the edited one, reboot and done. No more messages and stuff.

And then it come. When WFP is "Totally disabled", then Im sure can delete it's files, because they aren't need anymore, right? sfc.exe - manual utility - go w/o problem. However the sfcfiles.dll refuse to get deleted. I got suspicous. Renamed it (always works :lol: ), and rebooted.

As machine booting and near the end, after login - a silent reboot come. I expected blue screen, not instant reboot tough, the results is the same. The dll is still need.

Therefore is more that likely the WFP service is still up and running and the only one difference there is now - that the recover of file from dllcache or the message when apropriate file is not found is surpressed, but that it is! The service is more that likely still running, still eating my CPU time, still controling me and still need the files I want to get rid off... :(

I call this "solution" a fake remove.

I hope nLite does better job, yet then the question - how to get REALLY rid of WFP, remain.