SecurityXploded.com
SecurityTrainings
Mailing List Join us on Google+ Twitter facebook RSS Feeds
SFCList : Windows Protected System Files Listing Tool - www.SecurityXploded.com
 
 
SFCList
Download SFCList 
 
See Also
 
 
About SFCList
SFCList is the utility to enumerate files protected by SFC mechanism. Windows has introduced SFC technology (System File Checker) to protect core system files from being accidently or intentionally modified by third party programs. Whenever any such protected file is modified, SFC comes into action and replaces it with original system file.

SFCList tool helps to enumerate all those protected files. As there are thousands of such files, it has filter option which can be used to shorten down the search. Also one can verify if the particular file is protected by SFC or not.

From Vista onwards the internal Windows file system protection mechanism has changed. As a result listing of protected files is no longer supported. However one can verify if the particular file is protected or not.
 
 
Using SFCList
SFCList [ -l [pattern] ] [ -p <filepath> ]

        -l [pattern]   List all system file protected through SFC which matches 
                       the string pattern (optional)
        -p <filepath>  Verify if the file is protected by SFC

Example:
        //List all the protected files having text 'win'
        sfclist -l win

        //List all the protected dll files
        sfclist -l .dll

        //Check if the file is protected by SFC
        sfclist -p "c:\windows\system32\kernel32.dll"

Note: On Vista, listing of protected files is not supported, only -p option to verify file protection is supported.
 
 
SFCList in Action
Here is the screenshot of SFCList listing protected system files matching pattern 'win'
 
SFCList Demo Screen
 
 
Download SFCList
FREE Download SFCList 1.5

License  : Freeware
Platform : Windows 2000, XP, 2003 & Vista

 
 
References
    Description of Windows XP and Windows Server 2003 System File Checker
 
 
See Also