Deep Freeze 8.20

  • I have deep freeze, and i had tried your meltdown and it doesnt work. The message is DeviceIoControl reports failure (1), please help me, i need to close deep freeze. Thanks in advance. ( and excuss my english).
  • Deep Freeze Enterprise is a Commercial software in the category System Utilities developed by Faronics Corporation. The latest version of Deep Freeze Enterprise is 8.20.220, released on. It was initially added to our database on. Deep Freeze Enterprise runs on the following operating systems: Windows.
  • DOWNLOADED 10069 TIMES File Name: Deep Freeze Enterprise Full With Keygen - 2DC.rar 38.23 MB It will only get better! Free ANSWERS and CHEATS to GAMES and APPS.
  • C: Program Files (x86) Faronics Deep Freeze Enterprise DFAdmin.exe /uninstall is the full command line if you want to uninstall Deep Freeze Enterprise. The program's main executable file is titled DFConsole.exe and its approximative size is 22.36 MB (23450935 bytes).
  1. Deep Freeze Standard 8.20 Download
  2. Deep Freeze 8.20 Full

The same steps can be used to enable (Freeze) Deep Freeze. The only change is to select 'Boot Frozen' instead of “Boot Thawed”. B) Remotely via Deep Freeze Command Line Control (Deep Freeze Enterprise only): Deep Freeze Command Line Control (DFC.EXE) can be used to Thaw/Freeze Deep Freeze through a script or batch file.

tl;dr - DeepFreeze is still buggy and one-time passwords can be easily generated. Download link:

What was changed in DeepFreeze version 8.31?

Well, two things.

First, they made an attempt to stop Meltdown from generating correct One Time Passwords (OTP). While doing so, they added a new vulnerability - similar to the one that Meltdown used to obtain password for Deep Freeze Standard version 7.x and older.
Second, they added a licensing mechanism that requires each workstation to be activated. While doing so, they created a new local privilege escalation vulnerability.

What is this new (old) vulnerability?

The problem is in data exchange between driver and the UI component. It's done using DeviceIoControl calls and data are encrypted using changing XOR key. However, the overall communication protocol is badly designed.

So, let's start with the Deep Freeze Standard versions 5.x to 7.x. Communication between UI (frzstate2k.exe) and the driver goes like this:
Obviously, it's easy to extract password from the information provided by driver. That's what Meltdown originally did.

Faronics fixed that in Deep Freeze Standard v8.10:
Makes total sense, right? I looked at the communication protocol and concluded that the issue is fixed. End of story.

Deep Freeze Enterprise is a different story:
This communication makes sense. But all the information necessary to generate OTP was present in dfserv.exe and other executables. So, Meltdown didn't even have to communicate with the driver.

But in the latest version (v8.31) the information to generate OTP is not present in dfserv.exe or other executables. However, Faronics added a new feature to the driver:
Where have I seen this design before? smile So, I updated Meltdown to obtain information necessary for OTP generation from DeepFreeze driver. Easy as pie.

Local privilege escalation

Deep Freeze 8.20

It's so good, it deserves a separate blog post.

What do you think about Faronics?

I get this question a lot lately. People who see Meltdown ask that. IT managers who bought DeepFreeze ask that. And even some reverser friends have asked me that. But I'd rather not say anything and let the facts speak for themselves.

Deep Freeze Standard 8.20 Download

  • 2013-Mar-06 - Meltdown is published.
  • 2014-Mar-31 - Faronics closes the vulnerability in DeepFreeze Standard v8.10. No mention of any security issues in the changelog. No security bulletins published. This vulnerability had existed since very early versions of DeepFreeze and it suddenly got fixed. To me, it indicates that Faronics was aware of Meltdown at this moment of time.
  • 2014-Jun-24 - Changes in DeepFreeze Enterprise v8.11 break existing versions of Meltdown. Release notes say 'Resolved a security issue that could result in the user accessing Deep Freeze without authorization.' No security bulletins published.
  • 2015-May-11 - User reported that Meltdown wasn't working anymore. It took me few hours to add that new round of 'extra secure' xor encryption.
  • 2015-Dec-31 - Changes in DeepFreeze Enterprise 8.31 break existing versions of Meltdown. Changelog says 'Secured One-Time Password functionality from potential vulnerability.' No security bulletins published. They introduce 2 new vulnerabilities in this version.
  • 2016-Jan-12 - Meltdown is updated with another round of xor encryption and 2 new calls to DeviceIoControl API.

You can compare Faronics' behavior and response time to other software companies and make your own conclusions.

Download link for Meltdown 1.6:

Deep Freeze 8.20 Full