Windows Forum / Windows XP / Security and Administration / September 2004
Restore BIOS settings?
|
|
Thread rating:  |
Sue - 27 Sep 2004 15:11 GMT I purchased a new Gateway 510s in July. It's supposed to be a standalone computer, but now it appears to be running on a network I didn't create. Is there anyplace to find the original BIOS settings? I've called Gateway, but little help. Is there anyway to restore the original BIOS settings if indeed, my BIOS has been changed or replaced and I'm hooked up to a corporate network? This is a real security issue for me--any help would be appreciated. Thank you, Sue
Gordon - 27 Sep 2004 15:20 GMT > I purchased a new Gateway 510s in July. It's supposed to be a standalone > computer, but now it appears to be running on a network I didn't create. Is [quoted text clipped - 3 lines] > network? This is a real security issue for me--any help would be appreciated. > Thank you, Sue What symptoms are occurring that make you think it's "running on a network"? If it is not physically connected to any other machine, then it can't POSSIBLY be "running on a network".
Sue - 27 Sep 2004 15:31 GMT A number of BIOS settings were enabled for LAN, and everytime I shut down, a little box appears that says "closing network connections" even though I'm not using my ISP.
> > I purchased a new Gateway 510s in July. It's supposed to be a standalone > > computer, but now it appears to be running on a network I didn't create. [quoted text clipped - 11 lines] > If it is not physically connected to any other machine, then it can't > POSSIBLY be "running on a network". Gordon - 27 Sep 2004 15:38 GMT > A number of BIOS settings were enabled for LAN, and everytime I shut down, a > little box appears that says "closing network connections" even though I'm [quoted text clipped - 15 lines] > > If it is not physically connected to any other machine, then it can't > > POSSIBLY be "running on a network". Then just go into the BIOS and disable the LAN settings. Are you on Broadband by any chance?
Sue - 27 Sep 2004 15:51 GMT I have a dial up connection, not DSL. I have gone into BIOS and disabled anything with LAN. I'm just at a loss to know how this happened. I've got XP Pro, and when first got the computer used gpedit to disable anything to do with remote administration. Other user was set up with a limited account. However, device manager showing device by connection and hidden devices showed a 1394 ARP client at the top of the list. I've disabled all devices I can think of, so connection might not be working. But I want to restore the original BIOS and then password it so it can't be changed again.
> > A number of BIOS settings were enabled for LAN, and everytime I shut down, > a [quoted text clipped - 23 lines] > Then just go into the BIOS and disable the LAN settings. Are you on > Broadband by any chance? Gordon - 27 Sep 2004 16:22 GMT > I have a dial up connection, not DSL. I have gone into BIOS and disabled > anything with LAN. I'm just at a loss to know how this happened. I've got [quoted text clipped - 32 lines] > > Then just go into the BIOS and disable the LAN settings. Are you on > > Broadband by any chance? is there not a "Default Settings" option in the BIOS?
Sue - 27 Sep 2004 16:49 GMT When I F2 into BIOS, there's an F9 key for setup defaults. When I enter that, it says "load optimal defaults." But over in exit column, there are choices for "load optimal defaults" or "load custom defaults". I didn't want to load the wrong thing. I've disabled the PXE to LAN. I just want to make sure the orignal BIOS is mine and hasn't been replaced. I don't want to load someone else's default BIOS settings (if that's possible).
> > I have a dial up connection, not DSL. I have gone into BIOS and disabled > > anything with LAN. I'm just at a loss to know how this happened. I've [quoted text clipped - 43 lines] > > is there not a "Default Settings" option in the BIOS? Ekrem - 27 Sep 2004 17:09 GMT If you didn't update your BIOS, It does not going anywhere, if you load BIOS defaults, it makes this as factory settings and the changes you did before has gone. Meanwhile if there is a password protection at your BIOS, after you did I said, you must change the setting that relates password.
> When I F2 into BIOS, there's an F9 key for setup defaults. When I enter > that, it says "load optimal defaults." But over in exit column, there are [quoted text clipped - 50 lines] > > > > is there not a "Default Settings" option in the BIOS? Sue - 27 Sep 2004 17:21 GMT I have not updated my BIOS, but I think someone else may have. Is there any way to check that? Some time ago when I accessed by admin account, there was a "blue screen" error that a fatal system error was made. Stop error had to do with ACPI BIOS not compatible with computer settings. Message went away after a couple of days. Now, I don't want to go to the manufacturer's website to update my BIOS for fear it isn't mine! Setup shows the BIOS number, can Gateway tell me if that's the right BIOS installed in my machine?
> If you didn't update your BIOS, It does not going anywhere, if you load BIOS > defaults, it makes this as factory settings and the changes you did before [quoted text clipped - 55 lines] > > > > > > is there not a "Default Settings" option in the BIOS? D.Currie - 27 Sep 2004 17:45 GMT >I have not updated my BIOS, but I think someone else may have. Is there >any [quoted text clipped - 9 lines] > can > Gateway tell me if that's the right BIOS installed in my machine? If you didn't update your bios, did you let someone else have access to the computer who would have repaired it for you? Like a repair shop, a teenage son, or someone else? If you didn't let anyone else work on the computer, then the bios hasn't been changed.
And all of this worry about the bios being "yours" is a bit unfounded. It's not specific to your computer, it's the bios that Gateway put on thousands of computers with that particular motherboard. And an updated bios isn't something evil or devious, it's just a software upgrade to the hardware. Sort of like a driver update, but more permanent.
As far as you updating the bios -- I don't suggest it. If you do it wrong, you're going to end up with a completely dead computer. Unless you're having some specific problem that a bios update will fix, you don't need to update the bios. To find out what the bios updates are for, you can read about them at the manufacturer's website, along with specific instructions as to how to do the update.
Sue - 27 Sep 2004 18:29 GMT The other user only has access to a limited account, but that didn't keep him from making system changes somehow, I'm guessing through internet access. All I want to do is eliminate the unwanted network connection, which hopefully I've done. I also disabled "onboard LAN" in BIOS, and don't want to end up with a dead computer, so perhaps I should leave well enough alone. Thanks for all your suggestions.
> >I have not updated my BIOS, but I think someone else may have. Is there > >any [quoted text clipped - 27 lines] > at the manufacturer's website, along with specific instructions as to how to > do the update. D.Currie - 27 Sep 2004 22:32 GMT Bios access isn't affected by restrictions in place in Windows, so if you have another person with physical access to the computer - not on the Internet, but right there, hands-on, he/she could made bios changes no matter what restrictions you had on the Windows account.
As far as the unwanted network connection, I really think you're misunderstanding the messages you're reading on the computer. If you didn't have a network cable plugged into the computer, with the other end plugged into another computer or into a router or something it doesn't matter if LAN is enabled or not. There's got to be a physical connection, unless you've got wireless, which doesn't seem to be the case.
And while it's possible that a hacker *might* get into your computer through the Internet, it would be a pretty bored hacker who would bother with a home computer with a dial-up connection. Most of them are after more interesting targets. And I doubt they'd bother making random system changes.
If you're talking about someone who has physical access to your computer, if they have some knowledge of computers and a little bit of time, they could make system changes even if the account you gave them was limited.
It's also possible that you've got viruses or spyware that's causing problems. That's a lot more likely than a hacker.
> The other user only has access to a limited account, but that didn't keep > him [quoted text clipped - 48 lines] >> to >> do the update. Jules - 28 Sep 2004 03:42 GMT Hi Sue.. I have the same problem as yourself Sue...only my problem has been with me for alot longer. I have asked for help so many times and to various entities ranging from my ISP to the local police!! My machine is also supposed to be standalone but is on a network I never created either. As I am the only user and no-one has ever had access to my computer...not physically anyway...but remotely yes. I have had my system compromised ...remote takeover...and the things that they are able to do is quite unbelievable. I have had the harddrive reformatted so many times only to have the problem again. That is with all firewalls and security in place prior to accessing the Net. When I realised I could use the F9 key in Bios to restore to default settings I was thankful...but when trying to use this a second time, after the remote admin had changed system to the point where I was hardly able to access anything, I found that the same had been applied to my Bios settings. All I have permission to alter is the date!! Every other setting requires my "system supervisor" or has been disabled. Original Message-----
>I purchased a new Gateway 510s in July. It's supposed to be a standalone >computer, but now it appears to be running on a network I didn't create. Is [quoted text clipped - 4 lines] >Thank you, Sue >. Gordon - 28 Sep 2004 07:34 GMT Jules cogitated deeply and scribbled thusly:
> Hi Sue.. > I have the same problem as yourself Sue...only my problem [quoted text clipped - 3 lines] > My machine is also supposed to be standalone but is on a > network I never created either. How do you mean "on a network I never created"? Unless your machine is PLUGGED IN to a network via a network cable it is NOT ON A NETWORK!
As I am the only user
> and no-one has ever had access to my computer...not > physically anyway...but remotely yes. I have had my [quoted text clipped - 3 lines] > the problem again. That is with all firewalls and > security in place prior to accessing the Net. Oh yeah? IMPOSSIBLE! If your firewall is any way near half decent, NO ONE can access your machine without you knowing about it.
> When I realised I could use the F9 key in Bios to restore > to default settings I was thankful...but when trying to [quoted text clipped - 3 lines] >I found that the same had been applied > to my Bios settings. A "remote admin" CANNOT POSSIBLY alter the BIOS settings, because that is done even before the computer boots up into windows, and having windows running is s pre-requisite for remote access.
All I have permission to alter is
> the date!! Every other setting requires my "system > supervisor" or has been disabled. I'm afraid I find your description of your "problems" extremely far-fetched and almost totally unbelievable, certainly for the reasons you give. Are you sure that your log-in account is not a Limited user? Are you ABSOLUTELY sure that no one has logged on as The Administrator and changed things? Try logging on as The administrator and changing (or even putting in!) the password.
Sue - 28 Sep 2004 14:29 GMT I've been watching these groups for over a year trying to understand changes made to my computer by another user. Having trashed my last one trying to get rid of them, I'm hesitant to do anything drastic. To Jules, I know you're not crazy. However, my problem stems from a user with physical access. I thought I had locked down the computer well enough that he couldn't make changes, but I think Internet access was used to download programs that allowed the network setup. After researching the PXE found in my BIOS settings, I understand it can act with a network card to boot up the machine. I have used Device Manager, showing devices by connection and hidden devices, as well as my manufacturer's website showing my current configuration, to selectively disable certain devices that don't have an apparent effect on my computer use. Also, in BIOS I turned off "onboard LAN" and PXE to LAN. When I tried to rid my last computer of this connection, I had to take ownership of files before I could even run System Restore, and then many programs didn't work properly. This time I'm considering a clean install of XP Pro with the restoration CD from manufacturer, but my last computer didn't allow me to do that. My advice to Jules is go through and disable any remote services (netmeeting, terminal services, etc.), but knowing that it may be too late to help. Thanks to the forum, Sue
> I purchased a new Gateway 510s in July. It's supposed to be a standalone > computer, but now it appears to be running on a network I didn't create. Is [quoted text clipped - 3 lines] > network? This is a real security issue for me--any help would be appreciated. > Thank you, Sue Mr.IT - 30 Sep 2004 20:35 GMT You have a spyware program probaly connecting to its SERVER!
You need a spyware scanner because it will connect without your permission and it will probaly charge you. And it is affecting your whole system- definately have proper software and the restore disk handy cos' you'll have to do your syetm again with proper scanners and all this rubbish before you connect to your ISP
Stephen
> I've been watching these groups for over a year trying to understand changes > made to my computer by another user. Having trashed my last one trying to [quoted text clipped - 24 lines] > > network? This is a real security issue for me--any help would be appreciated. > > Thank you, Sue
|
|
|