u/MrSasaki_M

Potential BIOS virus?

Hi. So I found myself in a bit of predicament. A customer brought to our shop PC which was infected by some kind of virus which was “stealing his information” and messing with the PC. He said that he already lost access to his Facebook account which he was using at the time on said PC.

Now what I can see:

After the time of infection there’s no boot screen, no motherboard or windows splash screen, no recovery nothing. There’s just black screen with no signal message from the monitor until windows boots up and suddenly there‘s login screen. Sometimes it doesn’t even boot at all.

After logging in it immediately shows black background saying “f*** you n******” which disappears after a moment. Cant scan it with windows defender because half way through the defender service stops working.

I can deal with messed up windows but the lack of boot screen worries me since I’ve never seen anything like it. Removing SSD did nothing, resetting bios also did nothing.

Tomorrow Im gonna bring my old Linux laptop and get some scanning going but for now it’s quarantined.

Do you have any idea if that’s really a bios level malware? Should flashing bios help or maybe should he take the motherboard back to the store where he has warranty and let them deal with it? Any advice would be appreciated.

Motherbord: GIGABYTE B760 DS3H AX DDR4 rev 1.2

Cheers!

reddit.com
u/MrSasaki_M — 1 day ago