Page 1 of 1
[offtopic] Freezeprogram that works?
Posted: Tue Apr 24, 2007 5:40 am
by street011
Hi there,
for a while im using Clean Slate and Deepfreeze Enterprise.
i tested both and both failed my tests
i was able to mess my windows up with security fully enabled..
how? using a hex editor to write data to the disk.
now i know sandboxie can protect against this, but i need a full recovery after reboot, while users have full access.
Does anybody know more software like this that is more bulletproof?
tnx a lot
Re: [offtopic] Freezeprogram that works?
Posted: Tue Apr 24, 2007 4:26 pm
by Guest
street011 wrote:Hi there,
for a while im using Clean Slate and Deepfreeze Enterprise.
i tested both and both failed my tests
i was able to mess my windows up with security fully enabled..
how? using a hex editor to write data to the disk
What editor did you use? You mean that by writing raw data to the disk you bypassed Deep Freeze? That truly worrying...
Posted: Tue Apr 24, 2007 5:18 pm
by street011
i used winhex, i tried to different things:
-overwriting the bootsector messed up the system.
-overwriting deepfreeze driver/program files messed up the system.
so i wasn't too happy with that!
Posted: Tue Apr 24, 2007 5:28 pm
by Guest
street011 wrote:i used winhex, i tried to different things:
-overwriting the bootsector messed up the system.
-overwriting deepfreeze driver/program files messed up the system.
so i wasn't too happy with that!
It's not the first time Deep Freeze shows to be vulnerable. Frankly, I'm not that surprised, and I'm not sure it's even possible to protect a system from whithin if you one can mess up at kernel level (and Deep Freeze does allow to install drivers). Still, it's ridiculous that it can be bypassed so easily by simple raw editing the disk...
What version of Deep Freeze is this, version 6?
Posted: Tue Apr 24, 2007 6:48 pm
by street011
yes... latest version... 6.20 i believe... downloaded fresh from the web.
Posted: Tue Apr 24, 2007 8:59 pm
by SnDPhoenix
Well there arent really that many freezing programs out there and it has been a while since i used any of them and i have forgot most of them, but ill list what i remember:
1. DeepFreeze
2. CleanSlate
3. Shadowuser
4. i cant remeber the name of this particular software, but it starts with a "R"
Also, as an alternative to freezing your pc, you could use a software like Rollback RX and just make a backup of your whole pc, then proceed to let you, your kids, your spouse, your buddies etc. do whatever they/you want on your pc, and when you want, just roll right back to your latest backup, so in a way it is like Windows System Restore, BUT, it is much more stable, faster, secure, smaller, lighter, and it makes a backup of everything compared to System Restore which only backsup system files and apparently on a 60gb hd, you can store up to 60,000 backups
Posted: Wed Apr 25, 2007 9:59 am
by Unknown_User_549
PowerShadow might be worth a try?
Llllooonngg thread here: was free ? still
http://www.wilderssecurity.com/showthread.php?t=161735
Regards.
Posted: Wed Apr 25, 2007 12:37 pm
by street011
this software is kinda outdated, i think its not being developped anymore...
i didn't even had the chance of testing it, i got a blue screen every time i enter shadow mode....
Posted: Wed Apr 25, 2007 1:10 pm
by SnDPhoenix
well how did ShadowUser work for you? also did you try RollBack RX Pro? i really reccomend you try it, theres tons of good reviews and threads created on different forums about rollback's greatness.
Posted: Wed Apr 25, 2007 1:36 pm
by SnDPhoenix
Wait, strike that, i finally remembered the name of this one saftware that kicked major ass over rollback and any other recovery program, and that is, Raxco FirstDefense-ISR, you can visit the site here
http://www.raxco.com/products/fdisr/