Security Basics mailing list archives
WG: Any solution for a virus in the BIOS?
From: "Sascha Roeske" <Service () Sascha-Roeske de>
Date: Mon, 19 Nov 2007 17:02:25 +0100
Hello, I had already some similar problems. Has your Mother Board PS/2 connectors? Often the USB Keyboards will be only detected by the OS and doesn't work in the BIOS. These Keyboard converters are a big Problem, too, because the USB Keyboard is made for the USB communication, not for others. I had only 6-7 Keybords out of 20 which works on these converters. So my advice is to use a PS/2 Keyboard and Mouse. _____________________ Mit freundlichen Grüßen Sascha Roeske Tel: 0 21 71 - 71 0 72 2 Fax: 0 21 71 - 710 905 http://www.Sascha-Roeske.de -----Ursprüngliche Nachricht----- Von: listbounce () securityfocus com [mailto:listbounce () securityfocus com] Im Auftrag von Dev Null Gesendet: Samstag, 17. November 2007 16:57 An: security-basics () securityfocus com Betreff: Any solution for a virus in the BIOS? Hello ALL I have come across a computer system with some strange behaviour. Keyboard of the system gives intermittent problem. Whenever the system is booted, the three light [NUM, CAPS, SCROLL] of the keyboard flash and it gets detected [the OS does not give two beeps]. However, immediately afterwards it does not work. The three LEDs go off and do not turn on again. Keyboard seems to be dead. Only sometimes, it starts working completely. I took the keyboard off of the serial port it is connected to and plugged it into a USB-to-serial port converter [connected to the USB port on the computer] which is known to work alright. Keyboard gives the same problem again. This behaviour was tested with various functional keyboards. Obviously it is not the serial port which is a problem nor is the hardware circuitry. The USB port works fine with other devices, so again it is not the circuitry again. It is the BIOS? I wanted to update the BIOS over the net. However, I cannot go into the CMOS setup so as to switch the system into normal booting rather than intel rapid boot so that I can see the BIOS version as the keyboard does not work. Also the windows does not boot any longer on this system so that I could get this information from the "System Information". I tried to boot the system with knoppix, but again it is not of help as the keyboard does not work. It just works only sparingly. May be once or twice in twenty or so attempts. For a clue, the system is infected with a virus which creates an exe file in folders. Exe file is created with the name of the folder in which it is created. So, an infected folder FOLDER will have an exe file FOLDER.exe. Is this something which has infected BIOS? If so, what should I do so that a keyboard starts working with the system and I can perform the BIOS update and perform other maintenance tasks. Thanks for any help. -- devj
Current thread:
- WG: Any solution for a virus in the BIOS? Sascha Roeske (Nov 19)