Re: Full Armor

[wargames () MAIL GEOCITIES COM (avarice)]

This would by my first post to bugtraq, but I have some experience with this
program so i thought maybe i could give my 2 cents worth... In addtion to this
exploit myself and some friends got bored one evening and found ourselves at
Walmart playing with thier display machines.. These machines were also running
Full Armor, which would have been our first encounter with teh program (as for
a time frame this would have been about a year ago, last summer).  After
playing for a few minutes we learned that Full Armor was the cause of all our
lockouts, we tried everytrhing against it, short of a boot disk to no avail..
Eventually we got passed it by waiting for the target box to boot up and then
turning it off...As anyone who runs '95 will tell you, when you turn it back on
scandisk comes up as well...it is possible to ctrl-break out of scandisk and
thus get an unprotected dos prompt, from there  you can modify whatever files
you want, including full armors and effectively disable its protection....I
hope taht someone finds this useful..

-la

Kimmie Dicaire wrote:

> Version: Full Armor Network Configurator and Full Armor Zero Administration
> Operating System: Win95/NT
>
> This is an alert for Full Armor made by Micah Software and rated very high
> in PC Week.  While being a part of a team that was to install and
> standardize all the desktops throughout a company this hack was
> discovered.  The software itself is a desktop protection software that has
> many many more options than the regular poledit that comes with Win95,
> although it does utilize and expand on the poledit program.  The
> problem/hack comes into play when you get the Full Armor warning that you
> don't have rights (or any other Full Armor dialog box) if instead of just
> clicking the ok button to remove the dialog box, instead you choose <ctrl>
> + <alt> + <del> to get to the task manager you can end task on Full Armor
> and remove all the protected areas, thus having full access to everything
> on your destop/PC.
>
> The has been tested on both 486 and Pentium machine's all running Win95
> and the hack is reproduced everytime. There is no current work around for
> this hack.
>
> I have been in contact with the software developer's at Micah and they are
> currently re-working the code that should have a fix for this by tomorrow
> morning (6-9-10).  If you are running Full Armor it is recommended that
> you get this fix when it becomes available.
> +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> K&R Information Technologies
> http://asd.dyn.ml.org/  --  http://asd.dyn.ml.org/asdw
> kdicaire () vic com  --   kdicaire () asd dyn ml org  -- paris () asd dyn ml org
> +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++