Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: White-Listing Files in SFC?

26 Sep 2009   #1
drfsupercenter

Windows 7 Ultimate and Ubuntu 9.04
 
 
White-Listing Files in SFC?

OK,

So my new hard drive finally came, I put it in and did a complete clean install of Windows 7.

I just got done replacing Wordpad and Paint with the Windows Vista versions, simply because I hate that stupid Ribbon interface. Unlike last time, it still boots perfectly, and when I run either of those programs it runs the proper Vista versions.

However, if I ever do sfc /scannow it obviously detects something fishy and puts back the original Windows 7 files.

So I'm just curious: Is there some way to tell system file checker "Ignore these files, just scan all the rest"?


My System SpecsSystem Spec
.
26 Sep 2009   #2
logicearth

Windows 10 Pro (x64)
 
 

No, that would be silly if that was possible. Malware would have an easier time modifying system files if there was a white-list...
My System SpecsSystem Spec
26 Sep 2009   #3
drfsupercenter

Windows 7 Ultimate and Ubuntu 9.04
 
 

Aww

So can I do a system file check and not check those files manually?
My System SpecsSystem Spec
.

26 Sep 2009   #4
logicearth

Windows 10 Pro (x64)
 
 

You could install Vista, then those file would no longer be an issue. Or you could just learn to adapt to the Ribbon Interface.
My System SpecsSystem Spec
26 Sep 2009   #5
drfsupercenter

Windows 7 Ultimate and Ubuntu 9.04
 
 

LOL, the whole point in upgrading to Windows 7 was to not have to put up with Vista...
My System SpecsSystem Spec
04 Feb 2010   #6
redemblem101

Windows 7 x64 Professional
 
 

I'm having a similar issue. Although, instead of wanting to whitelist some files from sfc, I was wondering if it was possible to merely disable the service from automatically running.

I have modded my explorer.exe file and I wouldn't mind just being able to manually run sfc when I need to troubleshoot my system-- I do not need Windows to do this for me!
My System SpecsSystem Spec
04 Feb 2010   #7
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

Quote   Quote: Originally Posted by logicearth View Post
No, that would be silly if that was possible. Malware would have an easier time modifying system files if there was a white-list...
There is nothing silly about an operator being able to control their own computer in the fashion that they wish. This is a question that I have had in the back of my mind for a while, but didn't decide to voice until now.

I know that in XP there was a problem with SFC replacing updated files, even when they were from MS, because it referenced the installation CD. Since the CD is no longer necessary, I assume that this reference is recorded in the installation somewhere, but I know not where?

Previously, it was possible to tell SFC to accept, reject or ignore any particular "problem" that it found, so that it was possible to have some control over the matter, assuming that one went to the trouble of checking them out. This no longer appears to be possible.

Whether the file involved is changed via update or by user changes, there should be a way to prevent SFC from automatically reverting back to the original files. This is one reason that I don't use SFC now, unless I feel that there is no choice.
My System SpecsSystem Spec
04 Feb 2010   #8
redemblem101

Windows 7 x64 Professional
 
 

@seekermeister

One reason that I choose to still use sfc is because it helps me to update files sometimes. As you stated, sfc does reference some sort of library for the files that it checks against clearly because I've modded my explorer.exe version 16385 and sfc replaced the file with version 16450. Windows Update must have released a newer version/fix for explorer, however that file is definitely stored somewhere on the computer.

I do not want sfc to replace my explorer.exe with the correct version automatically, but I do occasionally like to update the file so I would prefer to run it manually or when I troubleshoot.

One interesting thing though is that if sfc is referencing some library for the uncorrupted version of the file, then wouldn't malware just as easily replace the reference file? The only way around this would be to use the CD as the reference. So, you're right, it definitely isn't silly because malware would be able to take advantage of the reference file regardless.
My System SpecsSystem Spec
04 Feb 2010   #9
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

Googling, it appears that it is referencing the sfc.dll and/or sfc_os.dll. Googling that, there is a lot of returns indicating that these could be replaced via malware/trojan. So it clearly indicates that SFC is far from foolproof.
My System SpecsSystem Spec
Reply

 White-Listing Files in SFC?




Thread Tools




Similar help and support threads
Thread Forum
office 2013 interface white washed menus appearing as white spots
hi i have a weired problem on one of our staff laptop. its core i3 system having windows 7 64 bit. initialy it had visio 2010 and office 2013 installed .. the problem was that when outlook was opened it would open but no text / menus were visible. it was all a like a white window having only...
Microsoft Office
wmc stopped listing mpeg4 files in video library
windows media center 7 64 has stopped listing mpeg4 files. How can i fix this? I did install nero 9 and then uninstalled it. and i installed power2go8 could these programs messup wmc?
Media Center
Listing with updated batch files for windows7
Hey anybody any thoughts where to find an updated listing with batch files for windows7 Not looking for very explicit commands would like to run application like wmplayer and open office with a batch Thank you very much for your help Greetings
General Discussion
Explorer search is sometimes not listing all files
If I search in "c:\users\" for *.xls I get 2 files listed - both are in deep subfolders. 142.xls in "c:\users\paul\appdata\roaming\temp\temp\temp\temp\temp\temp\temp\" If I search in "c:\users\paul\" for *.xls I get 100+ files listed, eg: list.xls in "c:\users\paul\backup\ICT\2010\" ...
General Discussion
Listing audio files in Windows Explorer with date
In previous versions of Windows (well, maybe not Vista; I never used it), you could select a variety of views for the files in a folder in Windows Explorer. The Details view would tell you date modified (among other things). It still works this way with Win7 except for MP3 files. With these...
General Discussion
Disable listing of folders, then files
In explorer windows is listing folders first, and then files. I would like to disable this, so that all my items are sorted by name, no matter if it's folder or file. Is this possible?
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:37.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App