I have a Dell Inspirion 5558 running Ubuntu 20.04.02. While staying in a hotel ("free Wi-Fi")
someone scooped up my username/password and used it to install a small script that, upon
immediately booting past the Dell logo presents a page the claims it is from Dell Security and
requests username/password to access the computer.
The problem is that the entire screen is filled with a black border that offers no options, etc.
I cannot get to any funtionality. Even when I boot and hit f12, a brief "preparing for one-time
boot" appears it is then covered with this full-page screen. I can't get to the bios set-up
to set the order of boot device (to format the disk).
I'm stuck. Any suggestions on getting past or under this script?
Additional information posted as an answer
The former behavior was: power on, display Dell logo, go to page
asking to unlock sda1 (with a password because the entire disk is
encrypted), if that passes, go to normal Ubuntu user login.
Now the behavior is: power on, display Dell logo (it will not
accept f12 so no access to BIOS to change boot order) then the
page with the info box appears claiming to be a Dell security app
claiming no access unless administrative password, etc. is entered
on that page. There is NO way out of that page; I can't go further.
I've removed the hard drive and the same behavior occurs so I think
some hacker flashed some firmware. I removed the coin cell battery
and shorted out its terminals. The machine started briefly, POST
beeped 3d times, but the display was off.
I've put the coin cell back in but i will take it out again and
perform the suggested method of holding down the power button for
20 seconds or more (to drain any remaining charge). Then I will
put the coin cell back in (but not the disk drive) and boot to
see if the malware is still on the system. That's the only thing
I can try. The fact that this malware display page isn't booting
from anything (no HD, no CD, no USB,etc.) makes me think it is
in firmware and is executed before any attempt to boot occurs.
I will try to esc at the Dell logo to get to Grub but I think
think the keyboard is disabled until the malicious page demanding
admin password is displayed. I can fill in the line on that page
with a bogus password but the page just reports the password is
invalid and to try again. Nasty. If the malware is in firmware on
the motherboard I don't know how to get to it.
Thanks