PaulDotCom mailing list archives

Re: Bad Agent on encrypted disk


From: Jeremy Pommerening <theaudioman () yahoo com>
Date: Wed, 6 Oct 2010 07:57:26 -0700 (PDT)

I hate to tell you but we had a similar situation with Guardian Edge Full Disk encryption and IBM Rescue & Recovery 
software not playing nice together.  BSOD on multiple machines.  The only way we were able to recover was to call 
Guardian Edge support and get a copy of Guardian Edge utilities to decrypt the drives and remove the IBM software 
causing the conflict.  It was a major pain.



Jeremy Pommerening   GIAC GCFA,GPEN,GAWN & GCFW,   
  



--- On Tue, 10/5/10, Grymoire <pauldotcom () grymoire com> wrote:

From: Grymoire <pauldotcom () grymoire com>
Subject: [Pauldotcom] Bad Agent on encrypted disk
To: pauldotcom () pdc-mail pauldotcom com
Date: Tuesday, October 5, 2010, 4:13 PM

We have a problem. We use a full disk encryption product
that is
installed in the BIOS. The systems are Windows XP. The
product is
SafeBoot 4.2.

Our IT department deployed a new agent on all laptops too
aggressively,
This is what happens
        The system boots up
        The user gives the
BIOS username and password
        The Login console
shows
        2 seconds passes
        A Blue Screen
appears.

I'm trying to think of a way to intercept the login
process,
and delete the bad file/program, so we can fis the
systems.

Some systems use SafeBook 4.3, and we have a solution for
that.
But SafeBoot 4.2 doesn't even have a "Safe Mode" to boot
up.

Any ideas? Our IT department has not come up with a
solution, and we
have a lot of unhappy users with unrecoverable disks.
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



      
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: