Defense+ doesn't block the attempt to flash in a new firmware into a DVD drive

Learn about Computer Security Leak Testing/Attacks/Vulnerability Research
#1

Tested on Seven x64: When I run the flashing tool with administrator rights D+ gives a warning about direct disk access but that doesn’t prevent the tool to fulfill its purpose. When I start the flashing tool without administrator rights D+ doesn’t complain at all although most likely it still could flash in the new firmware.

I’m going to attach a picture what happens when I try the same with Kaspersky IS.

Edit: Here are the pictures:

http://www.ld-host.de/uploads/thumbnails/febfe8bf1d5271f0dc19f31ef4a20801.png

http://www.ld-host.de/uploads/thumbnails/1f372bdbe6665f59b7cfe00b2b0d6401.png

And here is the flashing tool:

[attachment deleted by admin]

#2

I can’t confirm.

I tested it under Win 7 RC (7100). I blocked the disk access request and it complained about not having admin privileges.

#3

32 or 64 bit?

#4

32 bits.

#5

We need a 64 bit tester here, please.

#6

Interseting. What about a BIOS rootkit installer? :o

#7

Windows 7 32 bit.

[attachment deleted by admin]

#8

Now we need another Seven 64 and also Vista 64 tester.

Don’t be anxious, I suppose you won’t take any risks unless you press the “Flash” button, what is not necessary.

#9

Here it fails also on Vista 64. Will mention it at the next beta test.