RE: Chernobyl remembered

["Richards, David" <david.richards@rfets.gov>]

It's officially it's called CIH 1.2. I just tried to help an individual
whose hard drive was apparently erased this morning. No luck and he lost
over three weeks of critical data files. He had Norton AV loaded but
couldn't remember the last time he updated the signatures or the software.
(My guess is over a year). A good commercial for frequent backups though.

As I understand the virus, it will first attempt to scramble your flash BIOS
if you have one. It then moves on to erase the first 100 mb of every hard
drive on your system. The spokesperson for ICSA calls it "...the most
destructive [code] out there..."

Two places for info are:

www.wired.com/news/news/technology/story/19280.html

and

www.icsa.net/services/consortia/anti-virus/cih-bulletin.shtml

The Norton site at www.symantec.com also has info and a "kill_CIH" program
for download.

DJ Richards
Y2k Contingency Planning Manager
Rocky Flats Environmental Technology Site
David.Richards@rfets.gov
djrichards@earthlink.net

> -----Original Message-----
> From:	Dan Hill [SMTP:dhill%mde.state.md.us@inet.rfets.gov]
> Sent:	Monday, April 26, 1999 11:50 AM
> To:	Multiple recipients of list
> Subject:	Chernobyl remembered
> 
> In remembrance of one of the worst accidents at nuclear reactor power
> facilities, I heard a news story today about a "Chernobyl" virus which is
> supposed to attack PC's beginning today.  Is there any info on-line about
> the virus, virus detection or protection?
> 
> ************************************************************************
> The RADSAFE Frequently Asked Questions list, archives and subscription
> information can be accessed at http://www.ehs.uiuc.edu/~rad/radsafe.html
************************************************************************
The RADSAFE Frequently Asked Questions list, archives and subscription
information can be accessed at http://www.ehs.uiuc.edu/~rad/radsafe.html