askvity

Does a Virus Affect a Motherboard?

Published in Motherboard Security 2 mins read

Yes, malware can affect a motherboard, although it's not typically referred to as a "virus" in this context. Certain sophisticated types of malware can embed themselves in the motherboard's BIOS/UEFI firmware.

How Motherboard Malware Works

  • Target: These threats target the BIOS/UEFI, which is firmware that's essential for booting your computer.
  • Mechanism: The malware rewrites parts of the BIOS/UEFI, allowing it to persist even if you reinstall the operating system or format the hard drive.
  • Persistence: This makes it incredibly difficult to remove, as it operates at a very low level within the system.

Examples of Motherboard Malware

While not as common as traditional viruses, BIOS-level malware has been observed:

  • LoJax: One of the first publicly known examples, LoJax, was used in targeted attacks and could rewrite the UEFI/BIOS.

Removal and Prevention

  • Difficulty: Removing motherboard malware is extremely difficult. Standard antivirus software won't be able to detect or remove it.
  • Flashing the BIOS: In some cases, flashing the BIOS with a clean image provided by the motherboard manufacturer might work. However, if the malware has compromised the flashing process itself, this may not be effective.
  • Hardware Replacement: The most certain way to eliminate the threat is often to replace the motherboard entirely.
  • Prevention: Keeping your BIOS/UEFI updated to the latest version is crucial. Manufacturers often release updates to patch vulnerabilities that malware could exploit. Secure boot also helps prevent unauthorized code from executing during startup.

Modern Motherboards and ROM Chips

The reference mentions that on some older motherboards, the ROM chip could be removed and replaced. This is generally not possible on most modern motherboards. BIOS/UEFI chips are usually soldered directly onto the board, making replacement impractical for the average user.

Related Articles