Jump to content

Odd Computer Reset


Necromanhcer
 Share

Recommended Posts

Hey guys! I know I am brand new to the forum but I am not brand new to the security field. Then again, I'm not close to a pro.

I have a computer that whenever you shutdown it will re-image itself and reset to a standard computer. You can locally logon or you can use a net logon. I was wondering how you'd go about RATing that. Would a rootkit remove the reset function but still leave it lookings like an ordinary one?

Thanks!

Link to comment
Share on other sites

You would need to infect the image that the computer is booting from

Or infect the bios which isn't impossible but is definitely not easy

If you have access to the bios settings maybe there is a setting in there for network boot which you could disable

Edited by newbi3
Link to comment
Share on other sites

Sounds like it's running a deep freeze like program, or it's netbooting an image.

Or a VM that resets after every boot, like school training stations. Thin clients can be setup to do this, but I also thought of the DeepFreeze as you mentioned since I remember Johnny Long using it to protect workstations he setup for the schools in Uganda.

Either way, sounds like someone has a reason for doing this; even honeypots are setup like this sometimes.

@Necromanhcer - ask the admin who set it up ;)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...