Skip to main content
122 votes
Accepted

Can a virus destroy the BIOS of a modern computer?

Modern computers don't have a BIOS, they have a UEFI. Updating the UEFI firmware from the running operating system is a standard procedure, so any malware which manages to get executed on the ...
Philipp's user avatar
  • 49.4k
60 votes
Accepted

Does adding a password to BIOS prevent malware from infecting it?

Absolutely not. The BIOS password is only an authentication mechanism presented when the system boots or when a manual change to the configuration is made during boot. Malware which overwrites the ...
guest's user avatar
  • 506
47 votes

Can a virus destroy the BIOS of a modern computer?

Yes, it is definitely possible. Nowadays, with UEFI becoming widespread, it is even more of a concern: UEFI has a much larger attack surface than traditional BIOS and a (potential) flaw in UEFI ...
Stephane's user avatar
  • 18.7k
30 votes

Can a virus infection spread from a PC to a PCB and back to a PC?

It's impractical for a PCB to be a vector for malware storage or attacks, but that's because PCBs don't do anything except route electrical signals between components. The components themselves... ...
CBHacking's user avatar
  • 49.3k
24 votes

Can a virus infection spread from a PC to a PCB and back to a PC?

That depends on the specifics of your PCBs, but in the absence of more information, I would follow your IT security team: they know more about them than us on this Q&A website. It is in theory ...
A. Hersean's user avatar
  • 10.6k
20 votes

Can a virus destroy the BIOS of a modern computer?

Practically speaking, a virus is software, so can do anything that any other software can do. So the simple way answer to this question, and all others of the class "Can viruses do X?" is to ask "...
Dewi Morgan's user avatar
  • 1,429
17 votes

Can BIOS malware be installed from OS?

Firmware configuration Writing to the BIOS is a privileged operation, only doable by the superuser. Many BIOSes attempt to prevent this, for example by locking the SPI write bit and limiting the ...
forest's user avatar
  • 66.9k
12 votes

Can a virus destroy the BIOS of a modern computer?

Yes, it is definitely possible. Here is an example of a malware OS update fraudulently signed with the manufacturer's private key: https://www.theregister.co.uk/2019/03/25/...
emrys57's user avatar
  • 221
12 votes
Accepted

Isn't "BIOS reset password" a security flaw?

It's a security feature for sure; it's good for data recovery if password is lost. Dell has implemented further security controls to guard against misuse: When contacting Dell Technical Support, you ...
Rodrigo Murillo's user avatar
11 votes
Accepted

Write-protection at hardware level for security

Quis custodiet ipsos custodes? Before I begin, I'd like to explain a bit about the term trust as it is used in an information security context. In infosec, trust often has the opposite meaning of what ...
forest's user avatar
  • 66.9k
10 votes

Isn't "BIOS reset password" a security flaw?

I believe it's just a feature that they're giving to their users. The link also says the below: For HDD Passwords: Share the Service Tag and the hard drive serial number that is mentioned at the top ...
pri's user avatar
  • 4,446
6 votes
Accepted

My Samsung SSD password is case insensitive, how does this affect Full Disk Encryption?

For reference, should anyone still be looking for an answer. Turns out it is because most BIOS' will use the scancodes of the keys it (the individual BIOS) supports for password input. The shift and ...
olditfart's user avatar
6 votes

How BIOS password stored internally?

Is password hashed before saving to CMOS? Depends on the BIOS. Which hash algorithm is used? Depends on the BIOS. How much storage is dedicated for passwords? Depends on the BIOS. What is ...
DepressedDaniel's user avatar
6 votes
Accepted

Is it safe to download BIOS firmware from any place online?

Let's admit that everything is possible. It's called zero-day attack. The serious matter to discuss about is if this possibility is high or low. It's very very low. Every motherboard company has a ...
Adamantios Marios Berzovitis's user avatar
5 votes

Does adding a password to BIOS prevent malware from infecting it?

BIOS passwords offer absolutely no protection against viruses. Its just there to slow people down who are trying to use your computer without your permission. Most computers have a "bios password ...
DennisH's user avatar
  • 51
5 votes
Accepted

Can BIOS/UEFI change OS code?

Technically, yes. The answer, in simple terms, is "yes" to all of your questions. The firmware (BIOS or UEFI) loads before the operating system. Typically, it looks for a boot sector on your storage ...
DoubleD's user avatar
  • 3,952
4 votes

My mouse sometimes move without reason. Could it be a virus persisting Ubuntu reinstalls?

Best guess is one or more of the following: touch pad picking up (electrical) noise mouse is picking up vibrations (most likely a fan) faulty drivers causing input when there is none You could try ...
CaffeineAddiction's user avatar
4 votes

Will setting a BIOS Password Protect the TPM?

Okay, so, after some more searching I solved my problem: Bitlocker does allow you to use an actual password (but they call it a PIN) - can't be more than 20 characters, but that's still pretty good. ...
clownfish's user avatar
4 votes

Never believed BadBios...but do now...is there help?

If the device is truly infected at BIOS level or below then I would be hesitant to say you could ever trust the device again. The normal methods for replacing the firmware involve interaction with ...
Hector's user avatar
  • 11k
4 votes

Can a virus destroy the BIOS of a modern computer?

Your question hints at a more deep subject that is rings and permissions of code on an operating system. On MS DOS the code could do whatever it wants. If the code wanted to write all 0x00's to a hard ...
scifi6546's user avatar
4 votes

Can a virus infection spread from a PC to a PCB and back to a PC?

It really depends a lot on what is on those boards, and probably more importantly what type of interface is used. If they are connected via USB, then nearly anything is possible. One could potentially ...
jcaron's user avatar
  • 3,635
4 votes

Isn't "BIOS reset password" a security flaw?

I believe you are referring to ATA password, in which case mistake here is to consider this a security feature. You will find lots of tools to bypass such password (for instance, here's a list). Not ...
user1532080's user avatar
3 votes

Detecting and removing Absolute persistence technology

The only way I know of is to contact Absolute Software and request removal of the agent. They are friendly enough, they will ask for some identifying information on the laptop, and then they will send ...
Morgan's user avatar
  • 31
3 votes

Unlock a computer bios?

Try entering random strings in the password field for some couple of times until a password key is displayed. Take this key code and: Go to https://bios-pw.org/ Key in the key code that you have in ...
hd84335's user avatar
  • 139
3 votes
Accepted

Could a computer turn itself on if the BIOS was modified even if it was turned off by holding the power button down?

Hard power-off of a Windows machine will ensure that wake-on-lan isn't functional, but there are two possible combinations of bios settings that can lead to machine waking up without power button ...
Grigory Sergeev's user avatar
3 votes

How not to be hacked through Computrace?

Although the vulnerabilities associated with Computrace provide a large attack vector, the simplest way of protecting yourself is by not buying a machine that comes with it pre-installed. It's ...
RF03's user avatar
  • 1,063
3 votes
Accepted

Explain how a BIOS/UEFI infection may compromise the security of the Operating System

Compromising the security of the Operating System through infecting the BIOS/UEFI is easier said than done though it really exists and a few samples have been seen in the wild. Taking control of the ...
Resonce's user avatar
  • 78
3 votes

Is knowing the BIOS password of help in hacking a computer *remotely*?

Usually not, but I can imagine some edge cases where it might matter. As another comment mentions, some vendors provide interfaces all the way into userspace (reachable by normal programs and malware)...
J.A.K.'s user avatar
  • 4,853
3 votes

Can a virus destroy the BIOS of a modern computer?

Potentially. It would be hard to do however, as it would more than likely have to masquerade as a legit BIOS update somewhere down the line. The method to do so will change depending on your mobo but ...
520's user avatar
  • 713

Only top scored, non community-wiki answers of a minimum length are eligible