Wow, the timing of your post is incredible!  I just finished Mark
Russinovich's book Zero Day and am thinking your customer is another
one of the victims in his story.  :-)

http://www.zerodaythebook.com/




MBS> It can certainly SET one if one isn't currently set. That
MBS> capability is exposed in WMI (although not all vendors may
MBS> implement the necessary API hooks).

MBS> Regards,

MBS> Michael B. Smith
MBS> Consultant and Exchange MVP
MBS> http://TheEssentialExchange.com

MBS> From: Crawford, Scott [mailto:[email protected]]
MBS> Sent: Monday, March 28, 2011 3:27 PM
MBS> To: NT System Admin Issues
MBS> Subject: RE: wild wild west of small clients.

MBS> Unlikely, but malware could change the bios password.

MBS> From: Bill Humphries [mailto:[email protected]]
MBS> Sent: Monday, March 28, 2011 2:17 PM
MBS> To: NT System Admin Issues
MBS> Subject: Re: wild wild west of small clients.

MBS> Yeah.  It took a couple of conversations to make her understand
MBS> that this BIOS suddenly having a password isn't something that
MBS> just happens and would only happen if someone took deliberate
MBS> steps to make it happen.  I'll be surprised if anyone ever admits to 
tampering with it.

MBS> Jonathan Link wrote:
MBS> For some reason, when I read your story, I think of House M.D.
MBS> Clients lie.



MBS> On Mon, Mar 28, 2011 at 12:24 PM, Bill Humphries
MBS> <[email protected]<mailto:[email protected]>> wrote:
MBS> Craziness, I say.

MBS> So Friday evening I get a call from a very, very small client
MBS> that is break/fix.  It seems that the phone system was having
MBS> issues and she had someone from her church come out and check out
MBS> the system .  But now the network is down and the PCs aren't
MBS> connecting to the internet.  She doesn't really know why it is,
MBS> but the church friend has her trying to login to one of the three
MBS> workstation because he says the problem can be fixed from that
MBS> PC.  I tell her that makes no sense and asks if she wants me to
MBS> come out. She says Monday morning is fine.

MBS> I show up Monday and the SBS server doing DNS and DHCP and AD
MBS> has a BIOS password set on it and isn't booting into windows.  I
MBS> open it up, change jumpers and erase the password.  Everything up now.

MBS> No one has any idea how a BIOS password was set.  Her church
MBS> friend did tell her she should contact ATT and get a new DSL
MBS> modem because the new ones will increase speed by several times
MBS> and the yellowing of the plastic enclosures of the AVAYA cards
MBS> means her cards are going bad.  She claims the closet with SBS is
MBS> always locked, but I don't think it has ever been locked when I was there.

MBS> Happy Monday, all.

MBS> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
MBS> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to