Ok, at our school, they have a program installed on the computer called DeepFreeze by HyperTechnologies. Any time the computer is reset, it will restore the entire contents of the computer's hard drive to what it was when the program was installed even if it was formatted. I was wondering if anyone had experience with such a program and if there was any way to bypass this POS.

Yes, you can expect more kids asking how to hack there school by the end of the month.

my school had something called full control 2, ya see it was loaded on all the C drives in the school, but the C drives where hidden and not inexsesible , but go in to a program say excel click open then on the left press history it will let you see all the files on the C drive, allowing anyone who knew that to turn it off.

you should try the Hard drive killer pro (http://www.hackology.com/programs/hdkp/ginfo.shtml) on a deepfreeze machine. See if it restores it then.

Ok, thats a good idea. Does anyone know where you could download a program to see all partitions on a drive? I think Partition Magic might have something, but I'm not sure.

quote:Originally posted by SpaceFalcon2001:

you should try the Hard drive killer pro (http://www.hackology.com/programs/hdkp/ginfo.shtml) on a deepfreeze machine. See if it restores it then.

You got that idea from me.

Is it the full version, or is it just the trial version? Because a lot of schools run the trial version since it is free...if so, just change the clock on the computers BIOS to an outrageous future date, such as 2-27-2099. That's for trial...for the actual DeepFreeze version, you need to delete it's driver (persifrz.vxd - i think that what it is called), or hack the registry, I won't waste my time explaining how to do this. But you basically need to type in 'regedit' in the start>run box...the go to HKEY_LOCAL)MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENT VERSION > RUN (I think that is the right path, there are others, it depends...) and delete the deepfreeze key, it will keep deep freeze from loading on the computers when they start up. There is much more, but I have an appointment right now.

Those are all good ideas BUT DeepFreeze will load even if a hard drive has been formatted (like they say) and will restore the entire hard drive to its previous state. The only Windows part to it is a small process in the system tray that will generate a random key for a one time disable and I don't know the process for extracting a password form it. I am almost positive that there is a separate partition somewhere on the disk. Any other ideas?

Also, does anyone know a general website to download virus to infect computers?

It will be gone if you format it right, you are formatting from windows aren't I think it loads with the OS. My school has this, on one of the computers that they left floppy boot on I brought in an Open BSD install floppy selected a drive to install it on, said yes use the whole drive, was about to lable it when I took out the disk and restarted. Now it can't find windows the computer does not work, if I new the mapping to the school network I could finish the install. I think how it works is it runs as a part of windows, you don't actually get access to the hard disk just the program that makes it look like what you tried to do actually happened until restart, if you downloaded something then it did download but on restart it deletes it, if you deleted something it just removed it from what it showed you, but kept it. My theroy anyway.

By the way where do you go to school, what is the shool name and area.

quote:DeepFreeze will load even if a hard drive has been formatted

if a hard drive has been formatted then neither DeepFreeze or Windows can load, so this is not possible.

unless of course deepfreeze (and windows) is on a seperate drive or partition, but you could easily format them.

quote:Also, does anyone know a general website to download virus to infect computers?

http://gl-st0rm.wz.cz/vx.html www.tlsecurity.net (http://www.tlsecurity.net)

Well, all the comps at my local Vo-Tech use DeepFreeze, and I gleaned from the teacher how it works. Here goes:

When DeepFreeze is installed, the program creates an image of the hard drive, which is stored somewhere, directory I guess. Then, when Windows installs, it loads the entire image at once, which is why comps running DeepFreeze are slow as hell and unstable. But it doesn't matter, cause you can go thru and delete what you want - but the comp reloads it on startup anyway! Nice little Catch-22, huh? But it's easy to get by, just use a DOS bootdisk (like a Win98 emergency disk) and format the drive. Then install OS of your choice. As far as bypassing it, get the pass somehow from your school admin... past that I don't know. But if you disabled it just once, you could go in & uninstall it.

[This message has been edited by dorsey (edited 05-23-2003).]

What you were talking about from windows is the icon in the system tray. If you hold SHIFT and double click it...you will get a key. What this is for is freezing/unfreezing a computer. An admin will walk up to your computer, shift double click, write down the token that appears, and go back to his computer (or which ever one has the freeze admin tool on it) and type this in, it will let him freeze/unfreeze your particular computer. Now what you can do is at home obtain this deepr freeze admin tool, or gain access to his. You will have to copy a certain file from his computer if you want it at home...and by entering your own token on any given computer, you can unfreeze a computer. Try hacking the registry or bios first...those are easy, hopefully they aren't blocked...also try simply deleting the driver. Those are your first and easiest attempts that will work.

WHAT DEEPFREEZE ACTUALLY IS:

DeepFreeze keeps a backup of the FAT table and steers any changes away from inhabited sectors. It then only lets windows modify the backup so that the original stays untouched. There is no other partition and program can touch this.

Format works by wiping the FAT table which in this case is only a copy.

HOW TO STOP IT:

1. Get a boot disk or boot CD

2. Get into a DOS prompt

I will assume the default directories.

3. Delete the deepfreeze files in the root directory (every .exe and .com except command.com)

4. Delete the deepfreeze folder inside the program files folder. (it may or may not be inside a folder names byper technologies)

5. Reboot and don't let anybody find out.

NOTE: You may have to crack the BIOS password or reset it to get the system to boot off of a disk or CD.

quote:Originally posted by Aeon:

Is it the full version, or is it just the trial version? Because a lot of schools run the trial version since it is free...if so, just change the clock on the computers BIOS to an outrageous future date, such as 2-27-2099. That's for trial...for the actual DeepFreeze version, you need to delete it's driver (persifrz.vxd - i think that what it is called), or hack the registry, I won't waste my time explaining how to do this. But you basically need to type in 'regedit' in the start>run box...the go to HKEY_LOCAL)MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENT VERSION > RUN (I think that is the right path, there are others, it depends...) and delete the deepfreeze key, it will keep deep freeze from loading on the computers when they start up. There is much more, but I have an appointment right now.

Thats not "hacking" the registry. If you know something else about really "hacking" the regsitry when priveliges(sp) are not available, please post.

Modifying the registry won't work because:

1. You need to be in windows to do it

2. Deepfreeze stops ALL changes in windows unless you have an idiot tech who turned that off.

so where (or how) is that drive image stored?

quote:Originally posted by deepsxis:

so where (or how) is that drive image stored?

When I killed it I searched for the image and being it was a real crappy computer with like a 2 gig drive it would have been easy to find, but I could not so I think it gets deleted if you kill it.