Wow, the timing of your post is incredible! I just finished Mark Russinovich's book Zero Day and am thinking your customer is another one of the victims in his story. :-)
http://www.zerodaythebook.com/ MBS> It can certainly SET one if one isn't currently set. That MBS> capability is exposed in WMI (although not all vendors may MBS> implement the necessary API hooks). MBS> Regards, MBS> Michael B. Smith MBS> Consultant and Exchange MVP MBS> http://TheEssentialExchange.com MBS> From: Crawford, Scott [mailto:[email protected]] MBS> Sent: Monday, March 28, 2011 3:27 PM MBS> To: NT System Admin Issues MBS> Subject: RE: wild wild west of small clients. MBS> Unlikely, but malware could change the bios password. MBS> From: Bill Humphries [mailto:[email protected]] MBS> Sent: Monday, March 28, 2011 2:17 PM MBS> To: NT System Admin Issues MBS> Subject: Re: wild wild west of small clients. MBS> Yeah. It took a couple of conversations to make her understand MBS> that this BIOS suddenly having a password isn't something that MBS> just happens and would only happen if someone took deliberate MBS> steps to make it happen. I'll be surprised if anyone ever admits to tampering with it. MBS> Jonathan Link wrote: MBS> For some reason, when I read your story, I think of House M.D. MBS> Clients lie. MBS> On Mon, Mar 28, 2011 at 12:24 PM, Bill Humphries MBS> <[email protected]<mailto:[email protected]>> wrote: MBS> Craziness, I say. MBS> So Friday evening I get a call from a very, very small client MBS> that is break/fix. It seems that the phone system was having MBS> issues and she had someone from her church come out and check out MBS> the system . But now the network is down and the PCs aren't MBS> connecting to the internet. She doesn't really know why it is, MBS> but the church friend has her trying to login to one of the three MBS> workstation because he says the problem can be fixed from that MBS> PC. I tell her that makes no sense and asks if she wants me to MBS> come out. She says Monday morning is fine. MBS> I show up Monday and the SBS server doing DNS and DHCP and AD MBS> has a BIOS password set on it and isn't booting into windows. I MBS> open it up, change jumpers and erase the password. Everything up now. MBS> No one has any idea how a BIOS password was set. Her church MBS> friend did tell her she should contact ATT and get a new DSL MBS> modem because the new ones will increase speed by several times MBS> and the yellowing of the plastic enclosures of the AVAYA cards MBS> means her cards are going bad. She claims the closet with SBS is MBS> always locked, but I don't think it has ever been locked when I was there. MBS> Happy Monday, all. MBS> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ MBS> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
