PDA

取代系統保護或使用中的檔案



贊助商連結

琥珀
2010-11-12, 05:18 PM
MoveLatr - Console app to replace in-use files.

下載檔案 (http://www.bitsum.com/files/movel_102.zip) (32-bit)



MoveLatr v1.02, (c)2000 Jeremy Collake
http://www.bitsum.com
Kernel is WinNT

Usage: MOVELATR
= enumerates pending move operations.
MOVELATR source dest
= sets up move of source to dest at reboot.
MOVELATR source /d
= sets up delete of source at reboot.
MOVELATR /c
= clears all pending move operations.

Pending move operations:
0.] C:\WINDOWS\system32\SETB.tmp => \C:\WINDOWS\system32\svchost.exe
1.] C:\WINDOWS\system32\_000003_.tmp.dll => NULL
2.] C:\WINDOWS\system32\SET59.tmp => \C:\WINDOWS\system32\cscdll.dll
3.] C:\WINDOWS\system32\SET8B.tmp => \C:\WINDOWS\system32\es.dll
4.] C:\WINDOWS\AppPatch\SETB8.tmp => \C:\WINDOWS\AppPatch\apphelp.sdb
5.] C:\WINDOWS\system32\SETE1.tmp => \C:\WINDOWS\system32\mtxclu.dll
6.] C:\Program Files\Common Files\SYSTEM\ole db\SET130.tmp => \C:\Program Files\Common Files\SYSTEM\ole db\sqloledb.dll
7.] C:\WINDOWS\system32\SET13C.tmp => \C:\WINDOWS\system32\psbase.dll
8.] C:\WINDOWS\system32\SET3D8.tmp => \C:\WINDOWS\system32\shell32.dll
9.] C:\WINDOWS\AppPatch\SET159.tmp => \C:\WINDOWS\AppPatch\sysmain.sdb
10.] C:\WINDOWS\AppPatch\SET15A.tmp => \C:\WINDOWS\AppPatch\aclayers.dll
11.] C:\WINDOWS\system32\_000006_.tmp.dll => NULL
12.] C:\WINDOWS\system32\_000007_.tmp.dll => NULL
13.] C:\WINDOWS\system32\_000008_.tmp.dll => NULL
14.] C:\WINDOWS\system32\_000009_.tmp.dll => NULL
15.] C:\WINDOWS\system32\SET179.tmp => \C:\WINDOWS\system32\rpcss.dll
16.] C:\WINDOWS\system32\WBEM\SET17B.tmp => \C:\WINDOWS\system32\WBEM\wmiprvse.exe
17.] C:\WINDOWS\system32\WBEM\SET17C.tmp => \C:\WINDOWS\system32\WBEM\wmiprvsd.dll
18.] C:\WINDOWS\system32\WBEM\SET17D.tmp => \C:\WINDOWS\system32\WBEM\fastprox.dll
19.] C:\WINDOWS\system32\SET1B4.tmp => \C:\WINDOWS\system32\netapi32.dll
20.] C:\WINDOWS\system32\SET1C2.tmp => \C:\WINDOWS\system32\dnsrslvr.dll
21.] C:\WINDOWS\system32\SET1C3.tmp => \C:\WINDOWS\system32\dnsapi.dll
22.] C:\WINDOWS\INF\SET1C4.tmp => \C:\WINDOWS\INF\system.adm
23.] C:\WINDOWS\system32\_000004_.tmp.dll => NULL
24.] C:\WINDOWS\system32\SET231.tmp => \C:\WINDOWS\system32\secur32.dll
25.] C:\WINDOWS\system32\SET1DB.tmp => \C:\WINDOWS\system32\gdi32.dll
26.] C:\WINDOWS\system32\SET1EF.tmp => \C:\WINDOWS\system32\wldap32.dll
27.] C:\WINDOWS\system32\SET20E.tmp => \C:\WINDOWS\system32\mountvol.exe
28.] C:\WINDOWS\system32\SET216.tmp => \C:\WINDOWS\system32\msctfime.ime
29.] C:\WINDOWS\system32\SET21C.tmp => \C:\WINDOWS\system32\netlogon.dll
30.] C:\WINDOWS\system32\SET230.tmp => \C:\WINDOWS\system32\wdigest.dll
31.] C:\WINDOWS\system32\SET376.tmp => \C:\WINDOWS\system32\schannel.dll
32.] C:\WINDOWS\system32\SET330.tmp => \C:\WINDOWS\system32\msv1_0.dll
33.] C:\WINDOWS\system32\SET234.tmp => \C:\WINDOWS\system32\kerberos.dll
34.] C:\WINDOWS\system32\SET240.tmp => \C:\WINDOWS\system32\crypt32.dll
35.] C:\WINDOWS\system32\SET276.tmp => \C:\WINDOWS\system32\unimdm.tsp
36.] C:\WINDOWS\system32\SET289.tmp => \C:\WINDOWS\system32\strmfilt.dll
37.] C:\WINDOWS\system32\SET28A.tmp => \C:\WINDOWS\system32\httpapi.dll
38.] C:\WINDOWS\system32\SET29C.tmp => \C:\WINDOWS\system32\shsvcs.dll
39.] C:\WINDOWS\system32\spool\xpsep\i386\i386\SET2AE.tmp => \C:\WINDOWS\system32\spool\xpsep\i386\i386\xpssvcs.dll
40.] C:\WINDOWS\system32\spool\xpsep\i386\i386\SET2AF.tmp => \C:\WINDOWS\system32\spool\xpsep\i386\i386\mxdwdrv.dll
41.] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\SET2B0.tmp => \C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\xpssvcs.dll
42.] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\SET2B1.tmp => \C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mxdwdui.dll
43.] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\SET2B2.tmp => \C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mxdwdrv.dll
44.] C:\WINDOWS\system32\spool\PRTPROCS\W32X86\SET2B3.tmp => \C:\WINDOWS\system32\spool\PRTPROCS\W32X86\printfilterpipelinesvc.exe
45.] C:\WINDOWS\system32\spool\xpsep\i386\SET2B5.tmp => \C:\WINDOWS\system32\spool\xpsep\i386\xpssvcs.dll
46.] C:\WINDOWS\system32\spool\xpsep\i386\SET2B6.tmp => \C:\WINDOWS\system32\spool\xpsep\i386\mxdwdrv.dll
47.] C:\WINDOWS\system32\spool\xpsep\i386\SET2B7.tmp => \C:\WINDOWS\system32\spool\xpsep\i386\msxpsdrv.cat
48.] C:\WINDOWS\system32\spool\xpsep\SET2C7.tmp => \C:\WINDOWS\system32\spool\xpsep\msxpsdrv.cat
49.] C:\WINDOWS\system32\SET2C9.tmp => \C:\WINDOWS\system32\xpssvcs.dll
50.] C:\WINDOWS\system32\SET2CA.tmp => \C:\WINDOWS\system32\xpsshhdr.dll
51.] C:\WINDOWS\system32\SET2CB.tmp => \C:\WINDOWS\system32\prntvpt.dll
52.] C:\WINDOWS\Driver Cache\i386\SET2CC.tmp => \C:\WINDOWS\Driver Cache\i386\unires.dll
53.] C:\WINDOWS\Driver Cache\i386\SET2CD.tmp => \C:\WINDOWS\Driver Cache\i386\unidrvui.dll
54.] C:\WINDOWS\Driver Cache\i386\SET2CE.tmp => \C:\WINDOWS\Driver Cache\i386\unidrv.dll
55.] C:\WINDOWS\Driver Cache\i386\SET2CF.tmp => \C:\WINDOWS\Driver Cache\i386\mxdwdui.dll
56.] C:\WINDOWS\Driver Cache\i386\SET2D0.tmp => \C:\WINDOWS\Driver Cache\i386\mxdwdrv.dll
57.] C:\WINDOWS\Driver Cache\i386\SET2D1.tmp => \C:\WINDOWS\Driver Cache\i386\filterpipelineprintproc.dll
58.] C:\WINDOWS\system32\SET2E5.tmp => \C:\WINDOWS\system32\oleacc.dll
59.] C:\WINDOWS\system32\SET2E6.tmp => \C:\WINDOWS\system32\oleaccrc.dll
60.] C:\WINDOWS\system32\_000002_.tmp.dll => NULL
61.] C:\WINDOWS\AppPatch\SET2F4.tmp => \C:\WINDOWS\AppPatch\msimain.sdb
62.] C:\WINDOWS\system32\SET300.tmp => \C:\WINDOWS\system32\drprov.dll
63.] C:\WINDOWS\system32\SET308.tmp => \C:\WINDOWS\system32\atl.dll
64.] C:\WINDOWS\system32\SET32B.tmp => \C:\WINDOWS\system32\msasn1.dll
65.] C:\WINDOWS\system32\SET33D.tmp => \C:\WINDOWS\system32\shlwapi.dll
66.] C:\WINDOWS\system32\SET360.tmp => \C:\WINDOWS\system32\wintrust.dll
67.] C:\WINDOWS\system32\SET370.tmp => \C:\WINDOWS\system32\ole32.dll
68.] C:\WINDOWS\system32\SET3E2.tmp => \C:\WINDOWS\system32\xpsp4res.dll
69.] C:\WINDOWS\system32\_000005_.tmp.dll => NULL
70.] C:\WINDOWS\system32\_000010_.tmp.dll => NULL
71.] C:\Program Files\Common Files\System\ADO\SET3A4.tmp => \C:\Program Files\Common Files\System\ADO\msadox.dll
72.] C:\Program Files\Common Files\System\ADO\SET3A5.tmp => \C:\Program Files\Common Files\System\ADO\msado27.tlb
73.] C:\Program Files\Common Files\System\ADO\SET3A6.tmp => \C:\Program Files\Common Files\System\ADO\msado26.tlb
74.] C:\Program Files\Common Files\System\ADO\SET3A7.tmp => \C:\Program Files\Common Files\System\ADO\msado25.tlb
75.] C:\Program Files\Common Files\System\ADO\SET3A8.tmp => \C:\Program Files\Common Files\System\ADO\msado21.tlb
76.] C:\Program Files\Common Files\System\ADO\SET3A9.tmp => \C:\Program Files\Common Files\System\ADO\msado20.tlb
77.] C:\Program Files\Common Files\System\ADO\SET3AA.tmp => \C:\Program Files\Common Files\System\ADO\msado15.dll
78.] C:\WINDOWS\system32\SET3BD.tmp => \C:\WINDOWS\system32\winsrv.dll
79.] C:\WINDOWS\system32\_000011_.tmp.dll => NULL
80.] C:\WINDOWS\system32\_000012_.tmp.dll => NULL
81.] C:\WINDOWS\system32\SET3E9.tmp => \C:\WINDOWS\system32\wininet.dll
82.] C:\WINDOWS\system32\SET3EA.tmp => \C:\WINDOWS\system32\urlmon.dll
83.] C:\WINDOWS\system32\SET3EC.tmp => \C:\WINDOWS\system32\shdocvw.dll
84.] C:\WINDOWS\system32\SET3EE.tmp => \C:\WINDOWS\system32\mshtml.dll
85.] C:\WINDOWS\system32\SET3F0.tmp => \C:\WINDOWS\system32\browseui.dll
86.] C:\WINDOWS\system32\SET3FD.tmp => \C:\WINDOWS\system32\rpcrt4.dll


WfpReplace - Tool to replace WFP protected files.

下載檔案 (http://www.bitsum.com/files/wfpreplace32.zip) (32-bit)
下載檔案 (http://www.bitsum.com/files/wfpreplace64.zip) (64-bit)



WfpReplace v2.00 *alpha*, (c)2008 Bitsum Technologies.
http://www.bitsum.com - [email protected]

Synopsis:
This utility replaces a WFP protected file.

Usage(s):
WfpReplace [destfile] [srcfile]
WfpReplace [destfile] /delete


WfpDeprotect - Tool to temporarily disable WFP for the current session.

下載檔案 (http://www.bitsum.com/files/wfpdeprotect32.zip) (32-bit)
下載檔案 (http://www.bitsum.com/files/wfpdeprotect64.zip) (64-bit)



WfpDeprotect v1.00, (c)2008 Bitsum Technologies.
http://www.bitsum.com - [email protected]

Synopsis:
This utility deprotects a WFP protected file for 1 minute.

Usage(s):
WfpDeprotect [file1] [file2] [folder1] ...


參考：
Windows File Protection - How to replace a system DLL (http://www.bitsum.com/aboutwfp.asp)

贊助商連結

琥珀
2010-11-13, 05:21 PM
Replacer - It safely replaces protected or in-use system files.

下載檔案 (http://www3.telus.net/_/replacer/Replacer-pre.zip) (32-bit) (某科學的穩定版)
下載檔案 (http://www3.telus.net/_/replacer/Replacer.zip) (32-bit) (某科學的超穩定版)



Replaces protected system files.

Usage:
Replacer "ScriptFile"

Example:
Replacer "C:\Replacer\Script.txt"

Script syntax:
;; ReplacerScript
; Comment
SystemFileName [,ReplacementFile] [,Reference#] [,Optional]

Script example:
;; ReplacerScript
; Replace Notepad, Calc, Paint
notepad.exe,notepad.new
calc.exe,files\calc.new
mspaint.exe,"C:\Files\paint.new"
; Prompt to optionally restore Notepad from backup
notepad.exe,RESTORE,Optional

See readme.txt for ReferenceNumber details.


WfpAdmin - Tool to disable WFP on specific folders.

下載檔案 (http://www.bitsum.com/files/wfpsetup.msi) (32-bit)



WfpAdmin Console Version, (c)2003 Bitsum Technologies
Version: 2.00
http://www.bitsum.com
-------------------------------------------------------

USAGE: WfpAdminc [/DeprotectAll] ["folder1" "folder2" "folder3" ...]

Samples:
To disable WFP completely,
"WfpAdmin /DeprotectAll"
To deprotect c:\windows\system32 and c:\windows\system,
"WfpAdmin c:\windows\system32 c:\windows\system"

Notes:
If a space exist in a folder name, it need be enclosed in quotation marks.


WfpDisable - Tool to dynamically disable WFP until next reboot.

下載檔案 (http://www.xfocus.net/tools/200409/WFPdisable.rar) (32-bit)
下載檔案 (http://www.noahacker.com/t00ls/Others/Windows/WFPdisable.rar) (32-bit)



wfpdisable - Disables Windows File Protection
until next reboot
(C) 2003 [email protected]
-------------------------------------------------
WFP disabled.
Reboot machine to re-enable it.


參考：
Replacer (http://www3.telus.net/_/replacer/)
安全焦点::安全工具-WFPdisable.rar (http://www.xfocus.net/tools/200409/803.html)
琥珀
2010-11-19, 12:16 AM
AntiWFP - The Anti-WindowsFileProtection.

下載檔案 (http://www.ntcore.com/files/antiwfp.zip) (32-bit)



(無訊息)


參考：
Windows File Protection: How To Disable It On The Fly (http://www.ntcore.com/files/wfp.htm)