Windows File Protection Mechanism

The core file of the operating system is very important. Rewriting may cause serious consequences. Win introduces the file protection (WFP) mechanism.
WFP Protects specific file types, such as system files with the extension sys, EXE, DLL, ocx, Fon, and TTF.
When an applicationProgramWhen attempting to replace a protected file, WEP checks the digital signature of the file to determine whether the file is from Microsoft and whether it is consistent with the information stored in the database. if both conditions are met, replacement is allowed.
If the file does not meet the preceding conditions, win will prompt you that the protected file will be replaced by the new file. Win will soon replace the correct file with dllcache or CD.
WEP monitors the file list in the core directory. When the file is incomplete, the copy is automatically copied to the original folder from the backup folder of the operating system.