Syntax: ntrights -u Users +r SeSystemtimePrivilege Or, use ntrights.exe from th Windows Server 2003 Resource Kitu> to grant yourself th SeSystemtimePrivilegeb>. It's a free download:ĭeep Freeze Evaluation -Trial Version - v5.60.120.1347 Yes, the same file is used to install and uninstall. It is uninstalled with the installation file, and ONLY with the installation file. Deep Freeze is not uninstalled through Add/Remove Programs. If you're using an evaluation version of Deep Freeze, here's how to perform this test:ġ) Switch to the System account, as described aboveĢ) Double-click the time in the system trayĥ) Use DeepFreezeSTDEval.exe to uninstall Deep Freeze.

Deep Freeze Evaluation versions can be taken off machines by an attacker by forwarding the system date past 60-days which will expire Deep Freeze, causing the computer to restart in thawed mode, allowing Deep Freeze to be uninstalled. If the machine reboots in thawed mode, your version of Deep Freeze is vulnerable, and you should take measures to provide additional security on your machines.ĭeep Freeze Evaluation versions are also vulnerable to this attack. Then run Deep Unfreezer, View Status, click on the Boot Thawed button, Save Status, and restart the machine. If you use ntrights, you must logoff and logon again for the privilege to take effect. Syntax: ntrights -u Users +r SeDebugPrivilege OR, use ntrights.exe from th Windows Server 2003 Resource Kitu>, a free download,, to grant yourself th SeDebugPrivilegeb>. To perform the test you must first acquire DebugPrivileges (removed by Deep Freeze) by escalating to NT_AUTHORITY (the System account) using Task Scheduler from the command line (Start/run, cmd):ġ) at 11:23pm /interactive taskmgr.exe (add one or two minutes from the current time)ģ) File / New Task (Run.), Enter explorer.exe to launch the explorer shell under the System account which has Debug PrivilegesĤ) Run Deep Unfreezer from the System account. It works on almost ALL versions of Deep Freeze, including the latest version, v5.60.120.1347, which recently came out (Oct-20-2005) to supposedly be immune to his program?it's not! You can use Deep Unfreezer to test for the vulnerability on you owni> machines:

A black-hat computer programmer in Argentina with a grudge against Faronics, Emiliano Scavuzzo, has written a program to thaw Deep Freeze without knowing the password.

Deep freeze unfreezer all versions