Questions about BIOS and viruses

Shinova · Post by **Shinova** » 2003-03-25 07:40pm

Are there such things as BIOS viruses? And do they wipe out the whole BIOS or do they just target certain aspects of the BIOS?

Post by **Darth Wong** » 2003-03-25 07:49pm

Shinova wrote:Are there such things as BIOS viruses? And do they wipe out the whole BIOS or do they just target certain aspects of the BIOS?

It's possible to make a regular virus which nukes the BIOS. The code might have to be a little different for each mobo manufacturer, however.

Post by **Dalton** » 2003-03-25 07:52pm

In that case, can't you just re-flash the BIOS?

Post by **Darth Wong** » 2003-03-25 08:00pm

Dalton wrote:In that case, can't you just re-flash the BIOS?

No. If the BIOS is hosed badly enough, the machine can't even boot or POST, so it will never achieve a state which allows you to flash the BIOS.

Shinova · Post by **Shinova** » 2003-03-25 08:01pm

Dalton wrote:In that case, can't you just re-flash the BIOS?

What's that? And how do you do it?

EDIT: Also, how do you protect your bios from outside flashing?

aerius · Post by **aerius** » 2003-03-25 08:22pm

Shinova wrote:
Dalton wrote:In that case, can't you just re-flash the BIOS?
What's that? And how do you do it?

The BIOS and BIOS settings on your computer is stored on a EEPROM chip. To re-flash means to erase and re-write all the info on this chip. This is done by running the BIOS utility program that comes with your motherboard when you boot your computer up to the command prompt.

Pu-239 · Post by **Pu-239** » 2003-03-25 08:41pm

Shinova wrote:
Dalton wrote:In that case, can't you just re-flash the BIOS?
What's that? And how do you do it?

EDIT: Also, how do you protect your bios from outside flashing?

There's a bios setting and/or a jumper or switch on the motherboard.

Some bioses have a permanant component that allows you to reflash blindly.

EmperorMing · Post by **EmperorMing** » 2003-03-26 12:43am

There have been virri in the wild which have been reported to do such a thing.

If you end up in this situation, you may have to order another bios chip from the manufacturer and swap it with the one in the mobo.

Better to keep 2 good antiviruses running and updated AND Outlook patched. Or switch to a different mail client.

Post by **RogueIce** » 2003-03-26 01:04am

What's a BIOS, and why is it bad if it gets screwed?

Spanky The Dolphin · Post by **Spanky The Dolphin** » 2003-03-26 01:16am

The set of routines stored in read-only memory that enable a computer to start the operating system and to communicate with the various devices in the system, such as disk drives, keyboard, monitor, printer, and communications ports.

Basically, screwing your BIOS is a little like cutting of your head. It basically kills your computer so it can't even turn on, I think.

EmperorMing · Post by **EmperorMing** » 2003-03-26 01:50am

RogueIce wrote:What's a BIOS, and why is it bad if it gets screwed?

The bios is what makes the hardware go. No bios, and nothing will load.

Also, see the post above mine.

Pu-239 · Post by **Pu-239** » 2003-03-26 06:55am

I almost got hit by one of those viruses a couple years ago- WIN32.CIH

Crayz9000 · Post by **Crayz9000** » 2003-03-26 07:08am

The only way to recover from a badly hosed BIOS is to reprogram it with an EEPROM burner, if I recall. Fortunately there aren't too many BIOS-attacking viruses... although a flash update gone wrong can also hose a BIOS.

phongn · Post by **phongn** » 2003-03-26 09:18am

Some motherboards have dual BIOS chips just in case, but those are rare. Others have a permanent ROM section that will allow booting in case the rest of the machine is hosed (and thus reflash it).

Pu-239 · Post by **Pu-239** » 2003-03-26 02:32pm

phongn wrote:Some motherboards have dual BIOS chips just in case, but those are rare. Others have a permanent ROM section that will allow booting in case the rest of the machine is hosed (and thus reflash it).

I thought the permanent part was only good for reflashing the motherboard blindly, since it won't drive the video card.

Post by **Dalton** » 2003-03-26 03:52pm

I got hit by Chernobyl/CIH a couple years ago, but it didn't damage my BIOS.

Shinova · Post by **Shinova** » 2003-03-26 06:32pm

One last question:

BIOS viruses tend to work by nuking the whole BIOS, or do some target only a specific part of the BIOS?

Cause the comp I have right now has this problem where if I turn on CPU Internal Cache, Windows either doesn't start or crashes sometime after loading. If I turn it off, it works but at a speed less than ~120MHz.

EmperorMing · Post by **EmperorMing** » 2003-03-26 11:47pm

Shinova wrote:One last question:

BIOS viruses tend to work by nuking the whole BIOS, or do some target only a specific part of the BIOS?

Cause the comp I have right now has this problem where if I turn on CPU Internal Cache, Windows either doesn't start or crashes sometime after loading. If I turn it off, it works but at a speed less than ~120MHz.

A bios virri would tend to nuke the whole bios, and not just part of it.

What you are experiencing may be correctable with an update.

phongn · Post by **phongn** » 2003-03-27 09:51am

Pu-239 wrote:
phongn wrote:Some motherboards have dual BIOS chips just in case, but those are rare. Others have a permanent ROM section that will allow booting in case the rest of the machine is hosed (and thus reflash it).
I thought the permanent part was only good for reflashing the motherboard blindly, since it won't drive the video card.

Correct. You usually had to use a bootdisk that autoflashed the BIOS (via autoexec.bat) for it to work.

StarDestroyer.Net BBS

Questions about BIOS and viruses

Questions about BIOS and viruses

Re: Questions about BIOS and viruses