If you want to prevent your BIOSes get infected by viruses, place a password to them and disable the BIOS option "BIOS Update" or something similar. Of course if they have physical access while you are not home, there isn't any protection. If what you said is true, you are not dealing with a cracker alone.