My laptop shows Power-On Authentication while opening

[jessicakulmala]

Hi!

My laptop got hackered last year, in August if i remember right. We saw someone moving the mouse and then we performed a factory reset on the computer, after which we tried to check the computer’s performance information to see if there were any details about downloaded files. My boyfriend may have deleted some suspicious applications.

Shortly after that, my computer now shows a white screen with “Power-On Authentication” when logging in. I used to be able to log in with my fingerprint, but now I can’t. Additionally, the computer makes loud “beep” sounds. How can I log into my computer, and is it possible to take it somewhere for inspection?

When I tried to find out what operating system was installed on the computer, it showed iOS 1.8x, and I have never had an iOS system on my computer. Is it possible that someone else has been using my computer?

Thank you very much for your help!

Jessica

[TheOldMan]

It seems that whomever was/is invading your laptop is still there.  Getting the intruder out may be more than a novice can can do, but it will not hurt to try.  Assuming that there was some form of antivirus software installed, then run a scan to see what it shows.  If there was not antivirus software installed, then the most reasonable thing to do is to try the install some, Windows has a "built-in" version.  See this to start.

https://support.microsoft.com/en-us/windows/stay-protected-with-the-windows-security-app-2ae0363d-0a...

[Bill_To]

Greetings @jessicakulmala 

Welcome to the HP Forum.

Malware does exist which can leverage low level system vulnerabilities to infiltrate the MB's UEFI. The malware can then freely migrate to the OS without detection.

This type of infection would not be observable at the operating system level by security software.

You have also indicated your Windows PC may now be running an Apple OS. And you can't sign in to the operating system. I would say confidence is very high that the PC is not under your control at this time.

Have you been carefully checking for any consequential signs of identity theft?

Maybe a local PC Tech can check the PC.

Doing a BIOS update and OS installation outside of the existing OS might help. Or a MB replacement and a clean OS installation vs a reset using local Windows recovery files would be an option.

Regards

[TheOldMan]

Yes, what @Bill_To is indicating as to the iOS being installed and the malware might be in the sub-system.

To do some further investigation, I would remove the hard drive and, if present the M.2 SSD card, then boot to a Linux live OS.  See if there is any indication of the malware being present or someone using the PC.  You can boot to the live Linux and run tests to see.  A live Linus can do almost everything Windows can do, just using the present hardware.

If you need help with the Live Linux on a USB drive, do the making of that on a different computer than the one that is  infected.

[Bill_To]

Greetings @jessicakulmala 

Good point using a Linux Live distro to examine all storage devices recently connected to the PC @TheOldMan .

But I would also treat any storage device connected to this PC for a reasonable time prior to detecting something was amiss as a hot potato.

There is no telling where the malware is hiding.

I hope the OP has prior data backups. I would not rely on any data retained on any storage device recently connected to this PC.

All drives will have to be wiped.

Flashing the BIOS may remove the malware if it is resident in the BIOS. But the malware could be hanging out in a non-programmable area on the chip.

Replacing the MB and sanitizing all associated storage devices would be a very reliable procedure to get rid of the malware.

Worked on a PC last year suspected of being hit with UEFI malware due to the LogoFAIL vulnerability. It was decided to wipe all associated storage devices and replace the MB.

Regards