Windows File Protection (For 2K/XP) User Guide
Microsoft has recently added a new feature to Windows 2000/XP systems —— Windows FileProtection, or WFP for short. The main function of this component is to restore the Windows system with backup files after the system files have been accidentally deleted or unintentionally destroyed during the installation/uninstallation of the application. This article will give a brief introduction to the basic functions and usage of WFP. First, the working principle of WFP When installing Windows XP for the first time, some files ending with dll, exe, fon, ocx, sys and tff will be identified as important system files by WFP, and these files will be backed up in the dllcache folder. In the process of using Windows 2000/XP system, WFP will back up the files ending with ax, cpl, cpx, dll, exe, fon, inf, ocx, rsp, sys, tff and tlb in the default settings. Under the system32\\dllcache folder. If these system files are accidentally deleted or corrupted, WFP can easily restore the Windows file system by using the backup files under dllcache. How to upgrade the operating system files with WFP function Because WFP can automatically restore the original system files by using backup, you cannot upgrade the operating system files with WFP in the normal way. Here are some common ways to upgrade: 1. Install the Windows service component. 2. Upgrade the Windows system. 3. Run hotfix.exe. The hotfix automatically updates the system files backed up by WFP. Most hot fix programs are currently packaged in the windows service component. If you have Windows XP Service Component 1, then open “Add/Remove Programs. You can see the following 2 hotfix programs: 4. Use Winnt32.exe to run the system installation/upgrade program. There is also a simple manual upgrade method, copy the files to be upgraded to the dllcache folder, and then WFP can automatically upgrade the Windows file system. Third, the preliminary preparation work Before running the WFP program, the user must first log in as the system administrator. The identity of the system administrator will provide you with a fairly convenient condition for modifying WFP-related configurations. Although you may not need it, it is recommended that you make an emergency repair disk for later use. After completing the relevant settings, log out of the system and log in again as a normal user, so that we can use WFP. Fourth, WFP use and configuration You can modify the configuration of the corresponding options in the Group Policy editor. Click Start/Run, type gpedit.msc, press Enter to open the Computer Configuration Management Template and select the Windows File Protection folder. Double-click each option under the Settings tab to select it. For the Set Windows File Protection scanning option, select Enable to have WFP scan the backup file at system startup and replace the system files if necessary, but selecting this will extend the Windows boot time. For the Hide the file scan progress window option, select “disable”, Windows will no longer display WFP's program list. For the Limit Windows File Protection cache size option, by default, the disk space occupied by the dllcache is not limited. The file system to be backed up by WFP is quite large, and the extra hard disk space is occupied when the file is placed in the high-speed memory. . Select “Enable”, enter the value you want, in megabytes. For the Specify Windows File Protection cache location option, if you want to change the default path, select “Enable” and enter the path to the file directory you want. The path under the default condition is ystemRoot\\system32. If you want to make further settings for WFP, click Start /Programs /Accessories and choose Command Prompt. The following figure shows several commonly used sfc parameters in the DOS interface. Regarding the sfc/scannow.WFD parameter, all backup files will be scanned immediately after the Enter key is pressed, and all system files with incorrect versions will be replaced. Regarding the sfc/scanboot parameter, it takes effect after restarting, and each time the system starts, WFP starts scanning. The above two items can also be modified by modifying the registry. Open the registry [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WindowsNT\\CurrentVersion\\Winlogon] and change the key value of New DWORD Value Right click to SFCScan in the right panel. Change the ValueData value to 0 to use the default WFP function; enter 1 to have WFP scan the backed up system files every time Windows starts; enter 2 and WFP will scan all system files after the next boot. The registry modification takes effect after the restart. Regarding the sfc/cancel parameter, valid only for Windows 2000, all WFP scans of backup system files will be canceled, but this command does not take effect under Windows XP. Regarding the sfc/quiet parameter, it is only valid for Windows 2000. WFP will replace all incorrect system files with the backup file under dllcache. This command does not work on Windows XP. Regarding the sfc/purgecache parameter, the command will clear all files under the dllcache folder. Regarding the sfc/cachesize=x parameter, by default, WFP will back up all system files, so that once the problem occurs, the system can be completely restored. When a part of the backup file is loaded into the high-speed memory, WFP also takes up extra hard disk space. The value of X represents the maximum space that can be used by the dllcache folder that can be entered. Regarding the sfc/revert parameter and the sfc/enable parameter, these two commands will restore WFP to the default settings. Use sfc/revert under Windows XP and sfc/enable under Windows 2000. Now that you have a good understanding of the excellent performance of Windows File Protection, and how to make it more efficient for your operating system, although WFP will take up some system resources, and you can always choose to disable WFP in Windows, but if Your computer configuration is high, here I would like to suggest that in order to ensure the stability of the system, do not choose to disable WFP. The following is a summary of the reasons and countermeasures for the system to pop up the windows file protection warning box: 1 System poisoning. See w32.xorala : W32.Valla.2048 : 2 Software problems, some older or poorly designed software will replace the system files, this prompt box will also appear; check your installation software in the case of non-toxic Compatibility, then insert the CD, use Sfc to recover the file, usage is, click Start /Run, type the command: SFC /Scannow, OK. Sometimes there will be discrepancies, and you can manually restore the system files. Insert the disc, and after the system recognizes the disc, click Start/Run and type SFC /scannow to confirm. This method is not valid if your system has been patched and your original disk is not patched. For example, if you install 2000SP4, you must insert the CD with integrated SP4. First put the CD into the CD-ROM drive, you must put it into the CD-ROM drive in advance! Then click Start/Run and enter SFC /scannow to confirm. Also note that the use of windows2000 3 in 1 CD is not able to repair system files in this way. 3 If you used the pirated disk (windows xp) when you installed the system, and then you activated (calculus, Russian phone patch, automatic activation program, etc.), the wfc warning box will also appear; start running sfc/purgecache and start running gpedit .msc (group policy) computer configuration => administrative template => system => windows file protection right setting is disable start running regedit or regedt32 found [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon on the right Right-click in the pane and select New-->DWORD Value, name it SFCDisable. Under the Hexadecimal key, enter the key value ffffff9d to turn off WFP and restart the system for the changes to take effect. To make sure that WFP is indeed closed, you can view the log files after restarting your computer. Click Start -->Settings-->Control Panel. Open Administrative Tools-->Event Viewer. You will see the record shown in the figure. WFP is turned off every time Windows 2000 starts. Note: Although WFP is turned off, the files are still backed up under the dllcache folder. So you should delete these files after WFP is turned off. Just open the %SystemRoot%/System32/dllcache folder and delete the files in the directory. 4 More specific situation: xp system, file protection will pop up in a while, saying that the installation language does not meet the requirements to start running sfc /scanonce restart; windows2000server, installed office2000, always pop up a dialog box, saying that the system file is modified, let insert If the disk is installed, if it is not inserted, the countermeasure for the move will be as described in Article 3. Or replace office xp; 5 If it is a whole system, start running sfc /scannow can also be a good solution; you can also reinstall the system.