08-07-2019 09:42 AM - last edited on 03-06-2024 07:50 PM by ROGBot
08-13-2019 06:46 AM
08-13-2019 09:54 AM
08-13-2019 10:39 AM
08-13-2019 11:03 AM
08-14-2019 01:08 AM
08-14-2019 07:50 AM
adr82 wrote:
Yeah that update looks like them attempting to deal with the aftermath of having their certificate compromised in March.
I'm sure what's happened here is that although they've updated tools like AI Suite etc, they have overlooked the need to compile a new version of BIOSRenamer.exe signed with the new certificate. Since it's such a trivial app there would normally be no reason for it to need updated on each BIOS release, so they'll likely have just kept distributing the original versions of it with every BIOS on their website.
I just checked the latest C7H BIOS download (2501) out of interest, and yep, its copy of BIOSRenamer is signed with the revoked certificate! If you were able to get their support team to pay attention then hopefully it will eventually be fixed for new BIOS downloads at least (I'm not sure if they'll actually go to the trouble of repackaging all existing BIOS zip files...)
08-14-2019 08:28 AM
R5Eandme wrote:
Thank you adr82, for a perfectly logical explanation. I hope ASUS gets around to all their legacy downloads that still have revoked certificates.
Still I wonder why the unzipped filename for ??BIOSRenamer.exe is preceded by two non-standard characters. Not heard yet from ASUS support.
Even if there was malware in BIOSRenamer, do you think it is safe to unzip the bundled files in order to get the BIOS CAP file, and delete the BIOSRenamer?
08-14-2019 09:05 AM
adr82 wrote:
Sure, just unzip and delete the .exe without running it. Or even better just extract the .CAP file alone - if you're using the Windows zip file handler, click to open the zip file, select only the .CAP, hit Ctrl-C, go to another folder and do Ctrl-V to paste it there.
I have no idea what the deal is with the extra characters before the real filename - if I had to guess I'd say it's some unintended side-effect of whatever process they use to compile the application, and they just haven't bothered to fix it (in true Asus style).
08-14-2019 12:10 PM
R5Eandme wrote:
do you think it is safe to unzip the bundled files in order to get the BIOS CAP file, and delete the BIOSRenamer?