Win32/CIH Virus Alert - Extremely Lethal

From: Bruce Speyer (bruce.speyer@obgyn.net)
Fri, 24 Jul 1998 10:36:45 -0500


Hello everybody,

I don't normally send out virus alerts to everyone because there are so many and most aren't really that serious. But, there is a new virus called Win32/CIH which is scheduled to go off the 26th of each month which is Sunday.

This virus affects Win95 and Win98 machines (not WinNT). The virus will overwrite the flash-bios on the machine which may wreck the hard drive and will make the machine inoperable and unfixable. Furthermore, manufacturer warranties do not typically cover the case of damage from viruses.

This virus was just released at the beginning of June. The University of Texas here at Austin has issued a top level alert because they found all 115 machines in there undergraduate computer lab were infected.

You can read their alert at http://www.utexas.edu/cc/ds/alerts/win32cih.html

WHAT YOU CAN DO

Dr. Solomon antivirus July 15th virus signature upgrade detects and cleans out this virus. Also, the McAfee July 15th virus signature upgrade handles this virus. Note, that you must update to the very latest 7/15 virus signature .dat or driver file to catch this virus! Also note that the 7/15 McAfee update does not list that they handle this virus but I called and they do have it covered.

For other virus scan programs check with their websites for more information.

Also, McAfee has issued a standalone utility to detect and clean this virus. You can find it at http://beta.mcafee.com/public/stand_alone/ To run this utility you need to exit windows and run it at the DOS prompt so that you don't get sharing violations. See the instructions that comes with it.

If you don't have a virus scanner you can download an evaluation 30 day version from McAfee at http://www.mcafee.com or buy it for $40. The McAfee program has a nice feature where it can update itself over the Internet automatically so you don't have to remember to do it each month.

Once you've installed it run the scan32 utility. It is going to ask you if you want to upgrade. Say yes because the version installed is from May 15th and you will need the latest July 15th update to catch Win32/CIH. Then scan at least all the executables on your system (Win32/CIH infects executables).

Good Virus Hunting Bruce

--
Bruce Speyer				Home of OBGYN.net
Elecomm Internet Applications		Physician Directed Network
512-231-0810, FAX: 512-372-4320		 for Women's Health
URL:   http://www.elecomm.com		http://www.obgyn.net
EMAIL: bruce.speyer@elecomm.com		bruce.speyer@obgyn.net

busca recomendada...
Google
OBGYN.net somente forums endozone.org Web
Entre as palavras-chaves para a busca:
Mensagens por tela: Mostrar apenas as mensagens que incluam todas as palavras-chave:

Voltar para  OBSTET-L World Wide Web page


Administrador da lista: flavio.monteiro.desouza@obgyn.net
Solicitações à lista: obstet-l-request@obgyn.net
Última atualização: Mon May 19 16:36:17 2008