Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Manually uninstalling Deep Freeze workstation through ubcdlive

16 Mar 2015   #1
microzee

windows 7 and 8, 64 bit.
 
 
Manually uninstalling Deep Freeze workstation through ubcdlive

I was given a computer that came installed with a deepfreeze workstation program.

The password was not known, so deep freeze can not be uninstalled the traditional way. I am determined to uninstall it manually so none of the files are lost.

The workstation was from an licensed enterprise deepfreeze console. If you don't know much about deepfreeze it can be found here:

System Restore Software for Enterprise: Deep Freeze Enterprise

I installed a trial version of enterprise and created my own workstation executable on another computer. I then installed the workstation executable on a virtual machine and traced the install using revo uninstaller.

I read the trace and wrote down all of the files and registry items that looked important.

Then I booted the computer using ubcd live beta found here:

https://www.ultimatebootcd.com/ubcdlive.html

The reason for using this is it comes with a built in gui registry editor.


Here are the list of important looking files that it installs:

C:/
Persi0.sys
Persi0.dsk
Soft~on.dsk

Program Files (x86)/
Faronics (whole folder)

System32/Drivers/
DeepFrz.sys
DfDiskLo.sys
DFFilter.sys
FarDisk.sys
FarSpace.sys

Windows/SysWOW64/
DFC.exe

I can delete all of those just fine. But then the mouse and keyboard is frozen on the computer screen.

On to the important looking registry entries:

HKLM/system/currentcontrolset/control/class:

They are also created in all of the currentcontrolsets e.g. currentcontrolset001 and 003. Still a little confused as to why.

Starting with:
4D36E967: this is the Disk Drives class
4D36E96B: this is Keyboard class
4D36E96F: this is Mouse class
71A27CDD: this is Storage Volumes class


In the Disk Drives class, it adds LowerFilters with a multi_sz of DfDiskLo. It modifies the already existing UpperFilters by appending DeepFrz to the beginning.

In the Keyboard it modifies the already existing UpperFilters by appending DeepFrz to the beginning.

In the Mouse class it modifies the already existing UpperFilters by appending DeepFrz to the beginning.

In the Storage Volumes class, it adds UpperFilters with a multi_sz of DeepFrz and FarSpace.

Those are the main registry entries that I believe do all of the dirty work. Some more though that are still important:

system/currentcontrolset/control/services:

DeepFrz
DfDiskLo
DFFilter
FarDisk
Farspace


What I did next was delete all of the upperfilters and lower filters, and add them back with their default windows values. Then windows would say starting windows, never load the logo and give me a bsod.


What now? The registry was what I thought would fix it. I created a backup of the registry by copying system in system32/config so I could restore it.

Here I've attached the workstation file so you can try tracing it as well.

https://drive.google.com/file/d/0B_u...ew?usp=sharing


My System SpecsSystem Spec
.
17 Mar 2015   #2
rvcjew

7 Pro x64, 10 Pro x64
 
 

It is designed to not be able to be removed without disabling it like Norton ghost is. You can try this I installed Deep Freeze and forgot my password; can you give me a password to turn Deep Freeze off? - Powered by Kayako Help Desk Software see if you can generate a OTP.
My System SpecsSystem Spec
17 Mar 2015   #3
microzee

windows 7 and 8, 64 bit.
 
 

Yes, but deep freeze is disabled if you boot the computer with something other than windows. I am booting it with a debian linux based live cd, which boots the computer with deep freeze disabled. Now I just need to figure out which files are the right files to delete, which I believe I have already achieved. It's the registry class stuff that I need help with.

Thank you for your input, but that answer is not possible without the access to the original enterprise console (which I don't have).

If someone could take the same steps I took, and look at the trace, maybe I'm missing something.

You can trace it using a trial of revo uninstaller. Just make sure you install it on a vm so you dont freeze your own machine.
My System SpecsSystem Spec
.

17 Mar 2015   #4
pricetech

Windows 7 Professional 64 bit
 
 

My experience with Deep Freeze tells me it's bullet proof. Your best option is to ask for an installer from the console that originally installed Deep Freeze on the machine. That's the best way to remove it.
If you specified, I missed it; Is the machine "frozen" or "thawed" ??
My System SpecsSystem Spec
17 Mar 2015   #5
microzee

windows 7 and 8, 64 bit.
 
 

it's thawed, if I boot with something other than windows :P
I can change any file I want and it will stick when I start windows.

But when the machine boots windows, its of course in its frozen state. Unless I delete all the deep freeze files. Then deep freeze is off of the computer but the mouse and keyboard are frozen. because of the registry things I can't figure out how to fix.
My System SpecsSystem Spec
23 Mar 2015   #6
pricetech

Windows 7 Professional 64 bit
 
 

Something doesn't sound right. It's incredibly irresponsible of someone to sell, or give away, a computer with protection like Deep Freeze installed, without wiping the hard drive first.

Are you sure this computer isn't stolen ?? Not suggesting any wrongdoing on your part, but it just doesn't make sense. Frankly, I'd expect to lose my job if I let a computer out of here with an intact hard drive.

My suggestion, at this point, is to look more closely at the source of this computer and maybe even contact local law enforcement to determine if there is something amiss. That's what I'd do anyway.

I hope everything turns out okay and it's just a boneheaded move on the part of the previous owner.
My System SpecsSystem Spec
08 Apr 2015   #7
microzee

windows 7 and 8, 64 bit.
 
 

It was a mean prank someone pulled on one of my friends computers. They used a pirated version of deep freeze enterprise. Anyways, could someone please trace this program and see if you can do better?
My System SpecsSystem Spec
14 Apr 2015   #8
pricetech

Windows 7 Professional 64 bit
 
 

Oh wow. Nice "friend". I wish I could help, but I don't know of any way around the protection Deep Freeze offers.
My System SpecsSystem Spec
14 Apr 2015   #9
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

From post #7
Quote:
pirated version of deep freeze enterprise.
At this point Deep Freeze doesn't matter one way or the other.

Its a pirated version so the way out is to Clean Install Windows 7 and activate using a proper Windows 7 COA legal key.

We do not help fix systems using a pirated version of any anything.

Please read the forum rules.

http://www.sevenforums.com/misc.php?do=showrules
My System SpecsSystem Spec
Reply

 Manually uninstalling Deep Freeze workstation through ubcdlive




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
forgot password of Deep Freeze
Hello sir I would like to asked how to remove deepfreeze when you forgot the password?
Software
Boot Restore Protection (Faronic's Deep Freeze Standard)
Hey, I'm using Faronics Deep Freeze Standard (Boot Restore software) with Faronics Data Igloo (Data Retention software) and wondering if it's ok to exclude user profiles from being frozen ? Faronics Deep Freeze is suppose to protect users from malicious software but I'm more concerned with...
Backup and Restore
Wake-On-LAN Deep Freeze
Hello seven forums. I'm currently trying to make my computer Wake on LAN with Deep Freeze. I've followed this guide to it: Windows 7 Issues: Wake-on-Lan (WOL) for Windows 7 Made Easy! The message is getting sent from the Deep Freeze console computer, but the laptop doesn't start up from the...
Network & Sharing
Alternative for Deep Freeze?
hey guys some of you might know the program "Deep Freeze", it's a program which allows you to keep your system "frozen" or "unfrozen". I searched on Google but couldn't find anything useful. Source: Faronics Deep Freeze Windows Editions - ABSOLUTE System Integrity is there a worthy...
Software
Dual boot using Deep Freeze on both drives?
How to dual boot XP Pro and Win 7, on 2 separate drives, using Deep Freeze on both drives? Here is what I want to do. Install XP on one drive, I have done this already. Disconnect this drive and install Win 7 on the other drive. I want to use the bio's to choose the boot order. I spoke to a...
Installation & Setup
Deep Freeze STD Is Not Compatible
I recently installed Windows 7 build 7057, I always used the software Deep Freeze Standard, but it is not compatible with that Windows 7 5057 :confused: so, anyone know other software like Deep Freeze STD??
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:28.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App