How to Remove Deep Freeze if we forgot the Password
Posted by Hari Saryono on 23 March 2009
Deep Freeze, by Faronics, is an application suite for Linux, Mac OS X, and Microsoft Windows. Deep Freeze gives administrators the ability to protect the core operating system files and configuration files of an environment without eliminating the usability for (most) end users.
There’s many people complaint about this program, and usually with the same reason : I can’t uninstall Deep Freeze. Actually, Deep Freeze is very simple program with non simple result. If we aware of what we install, everything is fine. But most of us not aware of what we install, just a couple clicks without reading the TOS, clicking I agree and DONE. This is a side effect of simplicity, right? Even password, we usually forget about it.
Luckily, there’s a way to deal with this problem. But, as usual, let’s learn about what actually Deep freeze does, so we can make a theory about removing it. In this way, I propose 2 methods, Automatic and manual. I will put Automatic method first, because manual method is ‘rather’ difficult. It’s dealing with LOW LEVEL OPERATING SYSTEM. So, be careful (when everything is going wrong, the damage can be recover only by reformatting and reinstalling your hard disk. Always backup your important data in another partition or another media).
If your Deep Freeze version is listed below, you can use Deep Unfreeze program here. The procedure is as follows:
- Run the program
- Click load status, make sure that Log Deep freeze detected shown. If not, this program is not supported.
- Click Boot Thawed on Status on Next Boot to unfreeze on next boot.
- Click Save Status button and reboot your computer.
After you reboot, your Deep Freeze will be in Thawed Mode. To uninstall this program completely, you must have installer with the same version. Just choose Uninstall in the option.
List of detected Deep Freeze version in Deep Unfreeze 1.6
3.32.000.0534, 5.10.051.1089, 126.96.36.1995, 188.8.131.521, 5.40.051.1248, 5.50.051.1288, 5.50.051.1299, 5.50.051.1302, 184.108.40.2062, 5.60.051.1347, 220.127.116.117, 5.70.051.1372, 18.104.22.1682, 5.70.051.1378 and 22.214.171.1248
4.20.020.0598, 4.20.021.0613, 4.20.120.0604, 4.20.121.0613, 5.10.021.1089, 126.96.36.1995, 188.8.131.521, 5.40.021.1248, 5.50.021.1288, 5.50.021.1299, 5.50.021.1302 (not patched/patched), 184.108.40.2062 (not patched/patched), 5.60.021.1347 (not patched/patched), 220.127.116.117 (not patched/patched), 5.70.021.1372, 18.104.22.1682, 5.70.021.1378 and 22.214.171.1248
Disclaimer : I am not responsible on the loss and damage caused by this tutorial. You yourself responsible on what you do. This step for an expert only.
First, you should have AVAST BART PE, if you don’t, Download here, unzip and burn it in a CD.
PRELIMINARY : You should have at least 2 partition on your computer, 1 is freeze-d and one is not.
#1. If you know your deepfreeze version and having the installer but you forgot your password, try to :
- install deepfreeze on another computer
- remember it’s password
- copy persis00.sys to a flash disk and copy it to your target computer, but in another partition which is not freeze-d, for example in d:/ (coz you can’t copy it in c:/)
- use BART PE to reboot the target computer
- change your persis00.sys in c:/ with one in d:/
- Reboot in normal mode
- Your password is one you write in step 2
- NOTES : for security, you can rename your persis00.sys in c:/ to another name. Who knows, something going wrong, and you still able to change your file back again
#2. If you don’t know the version, and don’t have any installer whatsoever, try this:
On Windows 95/98/Me:
DeepFreeze is a VxD (Virtual Device Driver) located in
Just boot your computer using BART PE, find this file and rename it. Use Registry editor in BART PE to find registry referencing to persifrz.vxd. Export and save this registry value in another partition for a back-up. Delete the registry value.
Restart your computer in normal mode, see whether your Deep Freeze is running or not.
NOTES : If your computer is refuse to boot after this step, just rename this file to it’s original name, and import the registry value.
On Windows 2000/XP
On Windows 2000/XP, DeepFreeze consists of several important files: There are 2 drivers and 1 service
- DepFrzLo.sys (kernel driver)
- DepFrzHi.sys (filesystem driver)
- dfserv.exe (service)
- frzstate.exe (password dialog)
- persis00.sys (password file and "on/off switch")
Just boot your computer using BART PE, find this 3 file and rename it (the name is up to you). Use Registry editor in BART PE to find registry referencing to this 3 files. Export the registry to another save place, for example in d:/ partition before you delete it.
NOTES : If your computer is crash after this step, just rename the 3 files back to it’s original name, and import the registry value.