Toshiba Said is a VIRUS that put in a password

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

-This message is Posted as a Follow Up to "Built-in HDD Password."

Just got off the phone with Toshiba TEch support and described the problem
and they said it was a virus that Changes the BIOS and set a HDD Password.

Does anyone know how to remove a VIRUS and save my data? (It could be the
Sasser worm based on what some descriptions say)
 
There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

There is NO virus that sets a password.

There are viruses that will change the CMOS settings of computers or completekly wipe the
WIPE of Flash ROM BIOS.

If you are worried, perform the following...

1) Download the following three items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt377.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode and shutdown as many applications as possible
4) Using both the Trend Sysclean utility and Stinger, perform a Full Scan of your
platform and clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform using both.
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point


* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| -This message is Posted as a Follow Up to "Built-in HDD Password."
|
| Just got off the phone with Toshiba TEch support and described the problem
| and they said it was a virus that Changes the BIOS and set a HDD Password.
|
| Does anyone know how to remove a VIRUS and save my data? (It could be the
| Sasser worm based on what some descriptions say)
|
|
 
CRYING said:
-This message is Posted as a Follow Up to "Built-in HDD Password."

Just got off the phone with Toshiba TEch support and described the problem
and they said it was a virus that Changes the BIOS and set a HDD Password.

Does anyone know how to remove a VIRUS and save my data? (It could be the
Sasser worm based on what some descriptions say)

See if this link helps:

http://corky.net/2600/computers/reset-bios-password.shtml

There are no viruses I've ever heard of that can reset BIOS passwords.
As is unfortunately the usual case, telephone tech support for
manuafacturers is lacking and some "techs" make crap up like this or
worse. I had one "tech" claim that a system had a virus that hid itself
in the IDE ribbon cable!

Steve
 
Steve said:
See if this link helps:

http://corky.net/2600/computers/reset-bios-password.shtml

There are no viruses I've ever heard of that can reset BIOS passwords.
As is unfortunately the usual case, telephone tech support for
manuafacturers is lacking and some "techs" make crap up like this or
worse. I had one "tech" claim that a system had a virus that hid itself
in the IDE ribbon cable!

Steve

Here's another link:

http://www.uktsupport.co.uk/reference/biosp.htm

BTW, a Google search on

Toshiba laptop reset CMOS

got these and more in the first few hits.

Steve
 
Thanks Steve, I actually have been to those site and am trying to find a
backdoor BIOS password that works. So far NADDA!

Someone said that the Boot(HD) password and the BIOS Password are not the
same. IF this is the case, Will accessing my BIOS help?

I have tried hitting the following keys during boot up to access the BIOS to
NO avail:

esc
F2
left shift key
F5 plus left shift

This is a Toshiba Saltalie PRo 6100 series

Any other suggestions?
 
David-Thank you for your time and effort but I cannnot even boot the
commputer as it just keeps giving me the Built-in HDD password prompt (with
the flashing curser) in MSDOS. I have tried to access the BIOS by trying
several seqeunces to no avail. It will not boot in safe mode either.

Someone said to remove the CMOS battery for a few minutes and it would reset
and password would be blank. In your Opinion, is there any truth to this. I
found that newer laptops have no internal battery.

Any other suggestions? Thank You.
 
F8 is the BIOS setup key for your PC.

CRYING OUT LOUD said:
Thanks Steve, I actually have been to those site and am trying to find a
backdoor BIOS password that works. So far NADDA!

Someone said that the Boot(HD) password and the BIOS Password are not the
same. IF this is the case, Will accessing my BIOS help?

I have tried hitting the following keys during boot up to access the BIOS
to
NO avail:

esc
F2
left shift key
F5 plus left shift

This is a Toshiba Saltalie PRo 6100 series

Any other suggestions?
 
R. McCarty said:
F8 is the BIOS setup key for your PC.
Watch the screen closely, and determine if you have
Phoenix, AMI or AWARD. If AMI, try using DEL during POST to
open the BIOS setup. If all else fails you may need to open
your PC and locate the reset BIOS jumper and close it
momentarily with the power off. This will completely reset
the bios, and allow access so you can reset it.
 
There are two ways to get a platform to forget a BIOS password --
1. Set a jumper on the motherboard (depends on motherboard manufacturer)
2. Remove the CMOS battery for 10~15 mins. However, many modern motherboards use
rechargeable batteries that are soldered onto the motherboard.

Some manufacturers like Dell have backdoor passwords. I don't know if this is the case for
Toshiba.

--
Dave




| David-Thank you for your time and effort but I cannnot even boot the
| commputer as it just keeps giving me the Built-in HDD password prompt (with
| the flashing curser) in MSDOS. I have tried to access the BIOS by trying
| several seqeunces to no avail. It will not boot in safe mode either.
|
| Someone said to remove the CMOS battery for a few minutes and it would reset
| and password would be blank. In your Opinion, is there any truth to this. I
| found that newer laptops have no internal battery.
|
| Any other suggestions? Thank You.
|
| "David H. Lipman" wrote:
|
| > There are anti virus News Groups specifically for this type of discussion.
| >
| > microsoft.public.scripting.virus.discussion
| > microsoft.public.security.virus
| > alt.comp.virus
| > alt.comp.anti-virus
| >
| > There is NO virus that sets a password.
| >
| > There are viruses that will change the CMOS settings of computers or completekly wipe
the
| > WIPE of Flash ROM BIOS.
| >
| > If you are worried, perform the following...
| >
| > 1) Download the following three items...
| >
| > McAfee Stinger
| > http://vil.nai.com/vil/stinger/
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt377.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same directory as
| > SYSCLEAN.COM.
| >
| > 2) Disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 3) Reboot your PC into Safe Mode and shutdown as many applications as possible
| > 4) Using both the Trend Sysclean utility and Stinger, perform a Full Scan of your
| > platform and clean/delete any infectors found
| > 5) Restart your PC and perform a "final" Full Scan of your platform using both.
| > 6) Re-enable System Restore and re-apply any System Restore preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| > 7) Reboot your PC.
| > 8) Create a new Restore point
| >
| >
| > * * * Please report back your results * * *
| >
| > --
| > Dave
| > http://www.claymania.com/removal-trojan-adware.html
| >
| >
| >
| >
| > | > | -This message is Posted as a Follow Up to "Built-in HDD Password."
| > |
| > | Just got off the phone with Toshiba TEch support and described the problem
| > | and they said it was a virus that Changes the BIOS and set a HDD Password.
| > |
| > | Does anyone know how to remove a VIRUS and save my data? (It could be the
| > | Sasser worm based on what some descriptions say)
| > |
| > |
| >
| >
| >
 
Thanks for your response Lester. The only screen is goes to during the boot
up is the Toshiba Splash screen and then sits fo ra minute and goes to MS Dos
with the HDD password prompt. So I really dont know what I am working with.
I will try the del key as well. Any other suggestions?

Thanks Again.
 
David said:
There are two ways to get a platform to forget a BIOS password --
1. Set a jumper on the motherboard (depends on motherboard manufacturer)
2. Remove the CMOS battery for 10~15 mins. However, many modern motherboards use
rechargeable batteries that are soldered onto the motherboard.

Or use a bios password cleaner ie no need to pop the box. ie assuming
its a password to access the bios and not a system password.
 
See if this link helps:

http://corky.net/2600/computers/reset-bios-password.shtml

There are no viruses I've ever heard of that can reset BIOS passwords.
As is unfortunately the usual case, telephone tech support for
manuafacturers is lacking and some "techs" make crap up like this or
worse. I had one "tech" claim that a system had a virus that hid itself
in the IDE ribbon cable!

Steve

Given that the IDE cable is flat, and that is was probably not a
virus, but a worm, then you computer had a flatworm.

:)
 
Thanks for your response Lester. The only screen is goes to during the boot
up is the Toshiba Splash screen and then sits fo ra minute and goes to MS Dos
with the HDD password prompt. So I really dont know what I am working with.
I will try the del key as well. Any other suggestions?

Thanks Again.

I have a system with a similar option, a Motion tablet PC. The manufacturer
has some very explicit directions about removing the password. They include
a warning that it's possible to lockup the hard drive to the point that it
will require Motion's help (or a service center's assistance) to regain
access to the hard drive.

You should check the Toshiba website or your system documentation for
directions on working with this feature on your system.

Below is a link to the Motion document on this topic. Doesn't specifically
apply to your system but should give you a better idea about what you're
dealing with: http://selfhelp.motioncomputing.com/Kbase/33-251658415.aspx
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top