To read all comments associated with this story, please click here.
How are the download restrictions enforced? Will it let you download other files but not executables? Are they enforced using policies on the machines themselves, or at the network level?
Can you receive files via email?
You could try to introduce the executables to the systems via some kind of removable media...
You could try embedding executables in a word document or similar..
Also see if you can access a command prompt and download files using ftp..
Can the machine boot from removable media? If you can do that, you could run 0phcrack and get all the admin passwords which will probably be the same on all the boxes. If not, can you remove the HD or connect it to another machine, maybe a laptop and a usb to ide adapter - take a copy of the drive and crack the passwords..
From a boot cd, you could probably remove the malware too, but that would do nothing to prevent the machines getting quickly reinfected.
Or you could equip every box with a linux livecd, which would probably be far more useful and safer.
How are the download restrictions enforced? Will it let you download other files but not executables? Are they enforced using policies on the machines themselves, or at the network level?
Can you receive files via email?
You could try to introduce the executables to the systems via some kind of removable media...
You could try embedding executables in a word document or similar..
Also see if you can access a command prompt and download files using ftp..
Are the download restrictions based on filenames? many such things are, and you can download files by renaming them on the server and renaming them back once downloaded. Or you could perhaps download a zipfile if that's permitted?
Can the machine boot from removable media? If you can do that, you could run 0phcrack and get all the admin passwords which will probably be the same on all the boxes. If not, can you remove the HD or connect it to another machine, maybe a laptop and a usb to ide adapter - take a copy of the drive and crack the passwords..
From a boot cd, you could probably remove the malware too, but that would do nothing to prevent the machines getting quickly reinfected.
Or you could equip every box with a linux livecd, which would probably be far more useful and safer.





Member since:
2005-07-06
Nuke... orbit