Article View: alt.comp.virus
Article #323Hard-drive destroying virus 'Chernobyl' set to strike
From: Erik McDarby
Date: Sat, 24 Apr 1999 00:00
Date: Sat, 24 Apr 1999 00:00
355 lines
16742 bytes
16742 bytes
This is a multi-part message in MIME format.
------=_NextPart_000_000A_01BE8E9F.96005120
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hard-drive destroying virus 'Chernobyl' set to strike
As said Saturday, April 24, 1999 in The Express-Times of Pensylvania and =
New Jersey
WASHINGTON, D.C. ---- Experts are warning of a malicious computer virus =
set to strike Monday, dubbed "Chernobyl," that can erase a computer's =
hard-drive and prevent the equipment from restarting.
But they also reassured the public that off-the-shelf anti-virus =
software can prevent infection, and several companies offered free =
inoculation tools on their Web sites.
"It's pretty much just another virus. It's been around for quite a =
while," said Kathy Fithen, manager of the Computer Emergency Response =
Team at Carnegie Mellon University.
"As long as people stay current with their anti-virus software, =
they should be in good shape."
The most common version of the Chernobyl virus, also known as =
"CIH," was programmed to activate on computers using Windows 95 and =
Windows 98 on Monday, the 13th anniversary of the nuclear disaster in =
Ukraine.
Another version, less common, strikes computers on the 26th day of =
any month.
The viruses, believed to orginate in Taiwan, attempt to erase a =
computer's hard-drive and write gibberish to the computer's system =
settings, called its Bios, that would prevent the machine from being =
restarted.
But warnings from many experts lacked any sense of panic or =
impending doom because the virus was discovered last summer, giving =
anti-virus companies many months to develop free software updates to =
identify and destroy it.
Users of those products will be protected only if they've retrieved =
the free updates.
Network Associates Inc., for example, said its popular McAfee =
software recognized Chernobyl as early as June last year, and Symantec =
Corp. said its Norton Anti-virus program identified Chernobyl before =
August.
CERT issued a warning this week about the virus because of =
questions from computer users.
"We're getting requests for information about it rather than =
reports of machines infected with it," Fithen said.
"This has been around so long that the anti-virus vendors have =
picked this up."
Unlike the recent "Mekissa" scare, which automatically propagated =
via e-mail, this virus doesn't spread as quickly because it requires a =
person to launch an infected program file to contaminate a computer.
Carey Nachenberg, chief researcher at Symantec's Anti-virus =
Research Center, said one big risk stems from a potential infection on a =
computer network, which could then spread to individual computers.
"If it gets on a corporate network and the volumes are not =
protected, it could spread very, very rapidly, Nachenberg said.
Gene Hodges, a vice president for security at Network Associates, =
said the company was hoping for the best but bracing for worse.
"It can be fairly significant," Hodges said.
"You don't know until the bomb actually goes off."
-------------------------------------------------------------------------=
-------
INOCULATION TOOLS AVAILABLE
-------------------------------------------------------------------------=
-------
Free inoculation tools to protect a computer against the so-called =
"Chernobyl" virus, set to strike Monday:
a.. http://www.symantec.com/avcenter/kill-cih.html
b.. =
http://www.sophos.de/companyinfo/pressrel/uk/19990310chernobyl.html
c.. http://www.pspl.com/download/cleancih.htm
d.. http://download.mcafee.com
-------------------------------------------------------------------------=
-------
I have a question for those who may know about anti-viruses. I have =
downloaded an anti-viruse called "ThunderByte Anti-virus", and all I =
need to know is that would it be affective against the so-called =
"Chernobyl" virus. Thank you very much for the information.
Best Regards,
Erik McDarby
People like me, we're targets. Every morning, Its "Okay, who wants to =
sue
me today". "What we have is a breech of contract!" People used to defend
me, now only wanted to defame me. "They had no reason, this mouse has
not hurt anyone". They say fame has a price. Well, it sure isn't a blue =
light
special.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
WARNING: This article is protected by "Edmond Bunny Security" for the
reason of recent harassment of the sender of this article. The sender of =
this
article is the owner of "Erik Mouse", the mouse who has been through a =
lot
at the hands of various trolls. For more information on this, please go =
to:
http://members.xoom.com/erikmouse/index.htm
For the reason of this protection, I ask that none of you post any =
idiotic
replys to this article. This article is just to warn you of the =
so-called
"Chernobyl" virus, if you haven't heard about it yet. Any idiotic replys =
to
thia article will be handled and reported to your ISP by Edmond Bunny
Security, and may result in the termination of your e-mail account. =
Thank
you for understanding about this security measure and we mean you no
problems. Thank you very much, Edmond Bunny Security.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
------=_NextPart_000_000A_01BE8E9F.96005120
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
<HTML>
<HEAD>
<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3110.7"' name=3DGENERATOR>
</HEAD>
<BODY>
<DIV><STRONG><FONT face=3D"Times New Roman" size=3D5>Hard-drive =
destroying virus=20
'Chernobyl' set to strike</FONT></STRONG></DIV>
<DIV><STRONG><FONT face=3D"Times New Roman" size=3D2><FONT face=3D"" =
size=3D2>As said=20
Saturday, April 24, 1999 in The Express-Times of Pensylvania and New=20
Jersey</FONT></FONT></STRONG></DIV>
<DIV><STRONG><FONT face=3D"Times New Roman" size=3D2><FONT face=3D""=20
size=3D2></FONT></FONT></STRONG> </DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2>WASHINGTON, D.C. ---- =
Experts are=20
warning of a malicious computer virus set to strike Monday, dubbed=20
"Chernobyl," that can erase a computer's hard-drive and =
prevent the=20
equipment from restarting.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
But they also=20
reassured the public that off-the-shelf anti-virus software can prevent=20
infection, and several companies offered free inoculation tools on their =
Web=20
sites.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"It's=20
pretty much just another virus. It's been around for quite a =
while," said=20
Kathy Fithen, manager of the Computer Emergency Response Team at =
Carnegie Mellon=20
University.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"As long=20
as people stay current with their anti-virus software, they should be in =
good=20
shape."<BR> The most common version of the=20
Chernobyl virus, also known as "CIH," was programmed to =
activate on=20
computers using Windows 95 and Windows 98 on Monday, the 13th =
anniversary of the=20
nuclear disaster in Ukraine.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Another=20
version, less common, strikes computers on the 26th day of any=20
month.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
The viruses,=20
believed to orginate in Taiwan, attempt to erase a computer's hard-drive =
and=20
write gibberish to the computer's system settings, called its Bios, that =
would=20
prevent the machine from being restarted.<BR> =
But=20
warnings from many experts lacked any sense of panic or impending doom =
because=20
the virus was discovered last summer, giving anti-virus companies many =
months to=20
develop free software updates to identify and destroy it.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Users of those=20
products will be protected only if they've retrieved the free=20
updates.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Network=20
Associates Inc., for example, said its popular McAfee software =
recognized=20
Chernobyl as early as June last year, and Symantec Corp. said its Norton =
Anti-virus program identified Chernobyl before August.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
CERT issued a=20
warning this week about the virus because of questions from computer=20
users.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"We're=20
getting requests for information about it rather than reports of =
machines=20
infected with it," Fithen said.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"This has=20
been around so long that the anti-virus vendors have picked this=20
up."</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Unlike the=20
recent "Mekissa" scare, which automatically propagated via =
e-mail,=20
this virus doesn't spread as quickly because it requires a person to =
launch an=20
infected program file to contaminate a computer.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Carey=20
Nachenberg, chief researcher at Symantec's Anti-virus Research Center, =
said one=20
big risk stems from a potential infection on a computer network, which =
could=20
then spread to individual computers.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"If it=20
gets on a corporate network and the volumes are not protected, it could =
spread=20
very, very rapidly, Nachenberg said.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
Gene Hodges, a=20
vice president for security at Network Associates, said the company was =
hoping=20
for the best but bracing for worse.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"It can=20
be fairly significant," Hodges said.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2> =
"You=20
don't know until the bomb actually goes off."</FONT></DIV>
<DIV><FONT face=3D"Times New Roman" size=3D2></FONT>
<HR>
</DIV>
<DIV align=3Dcenter><STRONG><FONT face=3D"Times New Roman">INOCULATION =
TOOLS=20
AVAILABLE</FONT></STRONG></DIV>
<DIV align=3Dcenter>
<HR>
</DIV>
<DIV><FONT color=3D#000000 face=3D"Times New Roman" size=3D2>Free =
inoculation tools to=20
protect a computer against the so-called "Chernobyl" virus, =
set to=20
strike Monday:</FONT></DIV>
<UL>
<LI><FONT color=3D#000000 face=3D"Times New Roman" size=3D2><A=20
=
href=3D"http://www.symantec.com/avcenter/kill-cih.html">http://www.symant=
ec.com/avcenter/kill-cih.html</A></FONT></LI>
<LI><FONT color=3D#000000 face=3D"Times New Roman" size=3D2><A=20
=
href=3D"http://www.sophos.de/companyinfo/pressrel/uk/19990310chernobyl.ht=
ml">http://www.sophos.de/companyinfo/pressrel/uk/19990310chernobyl.html</=
A></FONT></LI>
<LI><FONT color=3D#000000 face=3D"Times New Roman" size=3D2><A=20
=
href=3D"http://www.pspl.com/download/cleancih.htm">http://www.pspl.com/do=
wnload/cleancih.htm</A></FONT></LI>
<LI><FONT color=3D#000000 face=3D"Times New Roman" size=3D2><A=20
=
href=3D"http://download.mcafee.com">http://download.mcafee.com</A></FONT>=
</LI></UL>
<DIV><FONT color=3D#000000 face=3D"Times New Roman" size=3D2>
<HR>
<FONT size=3D3>I have a question for those who may know about =
anti-viruses. I have=20
downloaded an anti-viruse called "ThunderByte Anti-virus", and =
all I=20
need to know is that would it be affective against the so-called=20
"Chernobyl" virus. Thank you very much for the=20
information.</FONT></FONT></DIV>
<DIV><FONT color=3D#000000 face=3D"Times New Roman" size=3D2><FONT=20
size=3D3></FONT></FONT> </DIV>
<DIV><FONT face=3D"Times New Roman">Best Regards,</FONT></DIV>
<DIV><FONT face=3D"Times New Roman"></FONT> </DIV>
<DIV><FONT face=3D"Times New Roman"></FONT> </DIV>
<DIV><FONT face=3D"Times New Roman">Erik McDarby</FONT></DIV>
<DIV><FONT face=3D"Times New Roman"></FONT> </DIV>
<DIV><FONT face=3D"Times New Roman">People like me, we're targets. Every =
morning,=20
Its "Okay, who wants to sue</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">me today". "What we have =
is a breech=20
of contract!" People used to defend</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">me, now only wanted to defame me. =
"They=20
had no reason, this mouse has</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">not hurt anyone". They say fame =
has a=20
price. Well, it sure isn't a blue light</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">special.</FONT></DIV>
<DIV><FONT=20
face=3D"Times New =
Roman">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">WARNING: This article is protected =
by=20
"Edmond Bunny Security" for the</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">reason of recent harassment of the =
sender of=20
this article. The sender of this</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">article is the owner of "Erik=20
Mouse", the mouse who has been through a lot</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">at </FONT><FONT face=3D"Times New =
Roman">the=20
hands of various trolls. For more information on this, please go=20
to:</FONT></DIV>
<DIV><FONT face=3D"Times New Roman"><A=20
href=3D"http://members.xoom.com/erikmouse/index.htm">http://members.xoom.=
com/erikmouse/index.htm</A></FONT></DIV>
<DIV><FONT face=3D"Times New Roman">For the reason of this protection, I =
ask that=20
none of you post any idiotic</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">replys to this article. This article =
is just=20
to warn you of the so-called</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">"Chernobyl" virus, if you =
haven't=20
heard about it yet. Any idiotic replys to</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">thia article </FONT><FONT=20
face=3D"Times New Roman">will be handled and reported to your ISP by =
Edmond=20
Bunny</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">Security, and may result in the =
termination of=20
your e-mail account. Thank</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">you for understanding about this =
security=20
measure and we mean you no</FONT></DIV>
<DIV><FONT face=3D"Times New Roman">problems. Thank you very much, =
Edmond Bunny=20
Security.</FONT></DIV>
<DIV><FONT face=3D"Times New Roman"><FONT=20
face=3D"Times New =
Roman">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D</FONT></FONT></DIV></BODY></HTML>
------=_NextPart_000_000A_01BE8E9F.96005120--
Technical Details
Message-ID:
<37227ae6@news3.enter.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa874,e74f7c06b46402df,start X-Google-Attributes: gidfa874,public X-Google-Thread: fc7b2,e74f7c06b46402df,start X-Google-Attributes: gidfc7b2,public X-Google-Thread: fcd68,e74f7c06b46402df,start X-Google-Attributes: gidfcd68,public From: "Erik McDarby" <spiderman@enter.net> Subject: Hard-drive destroying virus 'Chernobyl' set to strike Date: 1999/04/24 Message-ID: <37227ae6@news3.enter.net> X-Deja-AN: 470551156 X-Original-NNTP-Posting-Host: 207.18.10.42 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000A_01BE8E9F.96005120" X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 X-Trace: 24 Apr 1999 22:16:06 -0400, 207.18.10.42 Organization: Village of Miracles MIME-Version: 1.0 Newsgroups: alt.comp.virus,ba.internet,alt.internet.services