Anyone know something about a virus called W95.CIH?

[Skyfox]

Surprisingle i just got this virus and none of the files can be repeared with either Norton Anti Virus or McAfee. The only otpion i'm left with is run system scan and delete the virus file-by-file, and believe me there are alot of these files. Any feedback is appreciated.

[Noir Pouvoir]

re: Chernobyl Virus
Read this


http://www.symantec.com/avcenter/venc/data/cih.html


[This message has been edited by Noir Pouvoir (edited 09-06-2000).]

[KevinM]

The win9x.cih is a killer virus, it attaches itself to all EXE's that you run when it's in your memory and usually they aren't recoverable. Also it tries to delete your bios on the 26th of the month, on some strands, not sure if it's the one you have. Norton has a program that clears out your memory so you can either reformat or what not. Goodluck...oh one more thing, Steve from GRC has some sort of program, check it out. http://grc.com/cih.htm

[PhrostByte]

bad juju

[bug]

Your files are probably hosed. Better hope it did not infect you Mobo BIOS. Where did you pick up this nasty critter? You could try the info and fix listed here (http://www.pspl.com/download/cleancih.htm)

[Storm90]

Your best bet if you know you have it would be before it gets to the bios and motherboard. Would proubly be to do a reformat and install that way you know for sure you killed the little nasty bug.

[chase]

if you have the nortons anti virus start up disk that it tells you to make your fine... Just follow the instructions by placing disk 1 and reboot your pc... it will walk you thru and clean your system in dos. How ever if you failed to not make the disk when your system was clean than... c:format is about your only choice that i know of .

[Cable Guy]

Yeesh,thats a BAD bug!

------------------
Its the CableGuy!

[joker12578]

If your runing windows95 open your window and throw your computer out, it onlonger matters. If that virii has been on your system to long it will kicked the cr@p out of the cmos and bios. I just have one question about this one. I work on a lot of computers hell viruses are cool if there not on your computer, they can be less then 200bytes and kick you @ss. I cant help but to think if I would have debug could I have saved that system with cih. to late now.
so-be-it

[smaier69]

i would agree. in this day and age, we are somewhat lucky that many of the new virii are larger "scripts" using vb, and the like. making them too big to hide themselves in something like the keyboard buffer. big gnarly scripts are a concern, yes, but IMO, its the tiny little virii like cih that make me worry.

------------------
"Those who do not acknowlege the past are condemned to relive it"

- Jim Jones

[dmsmed]

Do .vcf files pose a particular threat?

[smaier69]

thats a really good question. since i dont really know exactly how vcards and vcalanders work, i cannot say for sure if they present any real particular threat. in other words, i am not sure if there is any program execution happening on the reader's end (after it recieves/opens/reads the .vcf file).

there is source code available for people to build creators/readers, so i would assume that in itself could facilitate .vcf-bourne virii.

malicious coders TYPICALLY (important word in this context) preffer common modes of transport/execution, and so if vcards and vcalanders become commonplace, it could be an easy exploit for the creators of virii and trojans and the like.

i have not heard of .vcf files being used as a mode of transport up to this point, so my guess would be, at this time, probably not be a significant worry.

------------------
"Those who do not acknowlege the past are condemned to relive it"

- Jim Jones