Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 350
  • Last Modified:

Uncommanded BIOS upgrade

I have a fairly new Dell Latitude E5530 laptop.  It's never been used by anyone.  We had purchased it for a specific project and then that project was cancelled.

I was using it a week or so ago to diagnose our new Internet connection.  We had a new ISP and I was having trouble getting the new connection to work with our firewall.  While talking with the ISP's tech support they asked me to grab a laptop and plug it in directly to the modem...which I did.  I was concerned about connecting it directly to the Internet but I was diligent about not leaving it connected for more than a few minutes at a time.  After each test was completed I would unplug it from the modem while awaiting further instructions from the ISP tech.

At some point, the screen went black.  At first I thought it had shut down due to a depleted battery issue.  But then I could see it came back on and started booting.  The next thing I knew it appeared it was performing a BIOS upgrade.  Now I am concerned about whether it's safe to connect this system to our LAN and expose our network to possible malicious software embedded in the BIOS.

Do some Dell systems perform uncommanded BIOS upgrades???

Should I restore it to factory settings?  I'm not sure doing that will help if the BIOS has been compromised.
0
Kerry Wilson
Asked:
Kerry Wilson
1 Solution
 
garycaseCommented:
Restoring to factory settings won't have any impact on the BIOS.

The downloadable Dell BIOS updates work very nicely -- you just run them & they reboot the system and do the upgrade.

HOWEVER ... they do NOT do this unattended.    If you didn't do it ... and nobody else did either; then something is definitely "fishy."

I'd download the current Dell BIOS for that laptop (A13) -- on a different system;  then copy it to that laptop via a USB flash (NOT via network);  then run the update.   Let it replace the current BIOS -- even if it's already A13 -- and then you can be confident that you have the correct BIOS.

You may then want to do a factory restore, just to ensure the OS is also "pristine".

Did you by any chance allow the factory tech to control the laptop while you were working on it??     If so, it's probably likely that he did the BIOS upgrade and it simply installed the next time you rebooted.    But it certainly won't hurt to be diligent and both re-flash the BIOS and restore the OS to its factory state.
0
 
Kerry WilsonAuthor Commented:
A local network admin I know suggested the factory settings resolution.  Thank you for confirming that won't help if the BIOS has been compromised.  I'm sure he didn't think about that and I didn't think to ask him.

The ISP tech was not controlling the laptop.  We were just using it to confirm he could "see" it connected to the modem and could ping it.

I will take your suggestion and re-flash the BIOS using the procedure you outlined.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now