[XXXler]

можно воспользоватся утилитами:

WfpAdmin Console Version, (c)2003 Bitsum Technologies Version: 2.00 http://www.bitsum.com ------------------------------------------------------- USAGE: WfpAdminc [/DeprotectAll] ["folder1" "folder2" "folder3" ...] Samples: To disable WFP completely, "WfpAdmin /DeprotectAll" To deprotect c:\windows\system32 and c:\windows\system, "WfpAdmin c:\windows\system32 c:\windows\system" Notes: If a space exist in a folder name, it need be enclosed in quotation marks.

Version 1.01, Copyright (C)2001, Frank P. Westlake. The only way to the Father i s through Jesus. Registers file move operations to be accomplished during the next system start. MoveEx [existing-file [new-file]] [/d # [/DeleteAllOK]] existing-file Complete path to the file to move or to delete. new-file Complete path to the new filename. If new-file exists it will be overwritten unless the /o option is included. If new-file is not specified, existing-file will be deleted. /d Delete the entry number from the list of pending operations. /DeleteAllOK Do not ask if OK to delete all entries. /o Do not overwrite new-file if it exists. With no parameters the current pending rename operations are printed. The /d option will delete an individual entry if # is greater than 0. If # is 0 (zero), all entries will be deleted after verification from the user. User verification can be included on the command line with the /DeleteAllOK option. Pending rename operations are stored in: WINNT: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager PendingFileRenameOperations Windows9x: %WINDIR%\WININIT.INI [Rename] Examples: MoveEx %SystemRoot%\Memory.dmp &REM Delete MoveEx C:\temp\NewExplorer.exe %SystemRoot%\Explorer.exe &REM Rename MoveEx &REM List entries MoveEx /d 0 &REM Delete entries