Question

Locked

BIOS VIRUS update

By dav6 ·
After reading some of the posts on this site can I tell you my BIOS tale.
This is a mad one it takes control and opens help pages fills out forms etc.
I formated both drives and then took the wires out started up and flashed the bios.Again.
The virus goes mad as if it is fighting bad flicking from page to page asking yes and save or yes no so you can not hit the tab you want.
Bios file is about70kb and the Asus P5K memery is 2mb.This leaves room for the virus I think, so how can you see the memery and how can you delete the virus. In XP I found Vundo andMonderb.xgr and lots more.

This conversation is currently closed to new comments.

10 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Try this

by Jacky Howe In reply to BIOS VIRUS update

Use an uninfected System to create this Bootable CD. Shut down the infected System and remove the power cable to the PSU. Press and hold the Power Switch on the System to drain the Capacitors and clear the Memory. Either use the clear CMOS jumpers or do it through the BIOS to reset the CMOS to defaults. Connect one Hard drive at a time and run DBAN.

DBAN will overwrite the hard drive filling it with 0's and 1's completly wiping the drive of information. You then create new Partitions, Format and install the OS without having to worry about a reinfection. Any traces of the Viral infection should be annihilated.

Darik's Boot and Nuke.

http://dban.sourceforge.net/

Autonuke should do it by running it at least 3 times.

Collapse -

Just to Expand

by TheChas In reply to BIOS VIRUS update

While not impossible, it is very unlikely that you have a BIOS virus. What you are more apt to have is a boot sector or hidden sector virus on the hard drive.

In a normal format, not everything is erased. Some sectors remain intact.

One way to verify this would be to disconnect your existing hard drives and install just a hard drive that never been part of this system. If the virus comes back, then it is in the BIOS.

If the virus does not return with a clean hard drive, then you know it is a boot sector virus.

If on the remote chance you do have an actual BIOS virus, the only sure way to get rid of it is to have the BIOS ROM replaced.

For a boot sector virus, the steps that Jacky gave you will remove it. They will also remove all of your files and data from the drive.

Chas

Collapse -

HDDs

by dav6 In reply to Just to Expand

Idisconected the drives took the wires out started the pc up went in to the setup and the virus flicked through the options and sub menus so fast that you could not get time to hit the tabs you want.
I flashed the bios and restarted and this made the systeme stable for a few mins. then it started again.
The problem is that when it is active it is so hard to do anything and it beeps al the time.

Collapse -

It could be a memory problem

by Jacky Howe In reply to HDDs

try reseating the RAM or using one stick at a time.
Start by turning off the power to the PC from the wall and remove the power lead from the PC. Remembering to ground yourself by getting into a position that will allow you to access the components without moving your feet and putting the back of your hand on the PSU after you have removed the PC's Cover. By not taking this precaution it is possible that you could inadvertantly cause damage to the PC from an electrostatic discharge. Disconnect the 20-24 pin power connector from the motherboard. Reinsert the 20-24 pin power connector to the motherboard. Remove the Memory and clean the golden edge of the cards with a soft rubber, remembering not to touch the golden edge.

You will have to work out the BIOS maufacturer and check the beeps against this comprehensive list.

BIOS beep codes list for desktops

http://whitepapers.zdnet.com/abstract.aspx?docid=172461

Collapse -

Well if it is a BIOS Infection you only have one option

by OH Smeg In reply to HDDs

You need to replace the BIOS IC and provided that you have a desktop you can buy these from a place like BIOSMan here

http://www.biosman.com/

Of course if you have a NB things get a Lot more expensive because BIOS Chips are generally soldered to the M'Board and are not easily replaced. The NB Makers will tell you that you need to replace the M'Board and unless you have access to a place with the right equipment to do Surface Mount Repairs they are correct. There are not many people who will spend 40 K + to but the correct equipment to repair 1 $300.00 M'Board.

But follow the above directions to rule out a Boot Sector Virus before you attempt replacing the BIOS Chip.

Just one addition here if you have SATA HDD then instead of Boot & Nuke you may find that Kill Disc is easier to use for you. Both do the same thing but with Kill Disc it makes things slightly easier for some people.

http://www.killdisk.com/downloadfree.htm

But if you have IDE Drives use Boot & Nuke it offers more options to wipe the HDD than Kill Disc does.

Col

Collapse -

That sounds more like a stuck key to me......

by ThumbsUp2 In reply to HDDs

... have you tried using another keyboard?

Collapse -

I will get back to you

by dav6 In reply to That sounds more like a s ...

I have taken the PC desktop to the best repair shop in town and I am waiting for the reply.
I will post this and this may help in the future.

Collapse -

Interesting

by TheChas In reply to HDDs

I understand why you think this is a BIOS virus.

But, I have to agree that it does sound like some sort of hardware issue.

I like the stuck key and failed memory answers myself.

Back to the BIOS virus issue. Most BIOS level viruses would either prevent you from entering setup, or lay in hiding until after you installed Windows and then take over the system. The last thing most modern virus writers want to do is call attention to themselves before the payload does it's job.

Generally speaking, it is more important for a virus to be able to spread than for it to prevent the user of the system from doing anything.

Chas

Collapse -

pc now up and running

by dav6 In reply to BIOS VIRUS update

As I said I would get back to you with a reply.
There was a virus and I got rid of that but the problem even when starting the pc without the HDs on was caused by a fault with the keyboard.
All that for a keyboard.{wireless]
Well thanks for the help hope this will help in the future.

Collapse -

I think you owe a Thumb to ThumbsUp2, don't you ...

by OldER Mycroft In reply to pc now up and running

She was the one who hit the proverbial nail on the head.

She deserves the Thumb!

Back to Malware Forum
10 total posts (Page 1 of 1)  

Related Discussions

Related Forums