Repository navigation
DeepThaw v2.2
Since there were quite a lot of updates, we skipped version 2.1 and went straight to version 2.2.
Now it can support
Deep Freeze Standard 7.73.020.0000-9.0.020.5760
Deep Freeze Server Standard 7.73.070.0000-9.0.070.5760 (The tool will directly recognize it as Deep Freeze Standard)
Deep Freeze Enterprise 8.32.220.0000-10.20.220.5844
Deep Freeze Server Enterprise 8.32.270.0000-10.20.270.5844 (The tool will directly recognize it as Deep Freeze Enterprise)
Reboot Restore Rx Standard\Reboot Restore Rx Enterprise 0.0.0.0-13.0.0.0
Rollback Rx Professional 0.0.0.0-12.9.0.0
Rollback Rx Server 0.0.0.0-12.7.0.0
On Windows 7 64-bit and later systems
Note: The file “DeepThaw_Kernel.sys” and "DeepThaw_ForInjection.dll" included in the archive are dependencies of this tool; without them, the tool will not run. You must ensure that “DeepThaw.exe” "DeepThaw_ForInjection.dll" “DeepThaw_Kernel.sys“ are placed in the same directory and that their filenames are not changed, otherwise the tool will fail to operate.
Additionally, to ensure the driver loads properly, the DeepThaw_Kernel.sys file included in this tool is signed with an expired certificate. Therefore, it may be flagged by antivirus software (especially Windows Defender) as a false positive.
Disclaimer: This tool is intended for research and learning purposes only. Do not use it for any illegal activities. The author shall not be held responsible for any consequences arising from illegal use of this tool.
Changelog:
1.Improved and re-enabled Force Mode
2.The “Disable Password Verification of Reboot Restore Rx (Rollback Rx)” feature now supports Windows 7
3.Rewrote driver loading
4.Improved version verification
Note: Please download the corresponding tool according to the operating system version you are using; otherwise, the tool will not work.
For Example:
If you are using Windows 10/11 64-bit, please download DeepThaw_v2.2_x64_ForWin10AndGreater.zip.
If you are using Windows 7/8.x 64-bit, please download DeepThaw_v2.2_x64_ForWin7.8.x.zip.
If the tool fails to open, please download and install the runtime from https://www.microsoft.com/en-us/download/details.aspx?id=48145.
For earlier versions of Deep Freeze, please use the “MeltdownDFC.exe” tool under Assets (I didn’t make this tool). It can directly reveal the passwords for Deep Freeze Enterprise 5.x–8.31 and Standard 6.00–7.72.
现在能支持
Windows 7 64位 及以后系统下的
Deep Freeze Standard 7.73.020.0000-9.0.020.5760
Deep Freeze Server Standard 7.73.070.0000-9.0.070.5760 (工具会直接识别为 Deep Freeze Standard)
Deep Freeze Enterprise 8.32.220.0000-10.20.220.5844
Deep Freeze Server Enterprise 8.32.270.0000-10.20.270.5844 (工具会直接识别为 Deep Freeze Enterprise)
Reboot Restore Rx Standard\Reboot Restore Rx Enterprise 0.0.0.0-13.0.0.0
Rollback Rx Professional 0.0.0.0-12.9.0.0
Rollback Rx Server 0.0.0.0-12.7.0.0
注意:压缩包中的"DeepThaw_Kernel.sys""DeepThaw_ForInjection.dll"是本工具的依赖,没有它工具将无法运行。你必须确保“DeepThaw.exe”""DeepThaw_ForInjection.dll""“DeepThaw_Kernel.sys”在同一目录下,且不能改名,否则工具无法运行
另外,为了正常加载驱动,本工具的“DeepThaw_Kernel.sys”使用了过期的签名进行签名,因此可能会被杀毒软件(点名Windows Defender)误报
声明:本工具仅作研究和学习使用,切勿用于非法用途。若因用于非法用途而造成损失,一切后果与本工具作者无关
更新日志:
1.改进并重新启用了强制模式
2.功能"Disable Password Verification of Reboot Restore Rx (Rollback Rx)"支持了Windows 7
3.驱动加载的重写
4.版本验证的完善
注意:请按照你使用的操作系统版本下载对应的工具,否则工具无法奏效
例如:如果你使用的系统是Windows 10/11 64位系统,请下载“DeepThaw_v2.2_x64_ForWin10AndGreater.zip”
如果你使用的系统是Windows 7/8.x 64位系统,请下载“DeepThaw_v2.2_x64_ForWin7.8.x.zip”
如果工具无法打开,请在 https://www.microsoft.com/zh-cn/download/details.aspx?id=48145 下载运行库并将其安装
对于较早期的Deep Freeze,请使用Assets下的“MeltdownDFC.exe”工具(这个工具不是我做的)。它可以直接查看DeepFreeze Enterprise 5.x-8.31, Standard 6.00-7.72的密码
PS: 如果你有兴趣,可以加入QQ群聊1041587773。反馈问题还是交流讨论都是允许的