🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #48

Re: Stoned Virus

#48
From: GroundHog
Date: Fri, 05 Jun 1998 00:00
47 lines
3010 bytes
Again, I suggest to talk to McAfee or Dr Solomon about exact details - I
remember some time ago (last year) I came across a virus spec sheet, on the
Net, which listed some (more than one) cmos viruses. I disagree with the
statement that the cmos would be corrupted if a virus or any other mini pgm
would install in unused space! - Writing to *unused* space never corrupts!
I am not going into hardware details as this would be foolish considering
the numerous different mobo designs on the market!

Stefan
--
*COSA IT Solutions /MS-OEM/MS-SBNL2
http://www.ozemail.com.au/~billis/cohp/cohp.htm
*Billi's Designer Studio
http://www.users.bigpond.com/kreidi/Studio/billishp.htm
___________________
Nostradamus once said:
"Quia non est nostrum noscere tempora nec momenta"
[It is not for us to know the times or the instants]

Richard RUDEK wrote in message <3576bee2.55962514@news.zeta.org.au>...
>"GroundHog" <kreidi@bigpond.com> wrote:
>
>>CMOS viruses are real - no doubt for me! I suggest to contact McAfee or
the
>>like for more detailed answers - there are quite some large virus
families
>>with cmos subtypes! Depending on the cmos chip there is more or
>>less 'waste' space, not used by the bios, which can be used by viruses if
>>the space is sufficient!
>
>[snip]
>
>I was going to leave this one alone, but your getting way off track now. A
>virus using "unused" CMOS RAM to store itself is crazy. Sure, some systems
>do contain 2KB or more. But the keyword here is *SOME*.
>
>Now apart from anything else, if a virus did install itself into CMOS RAM,
>a standard system could in no way execute code out of CMOS, therefore it
is
>no longer a virus. About the only thing it could do, is corrupt this RAM,
>which is typically used for BIOS configuration settings. That's probably
>enough though. RAM timming Chipset features etc, etc would be effected.
>  __   __   _______________________________
> //)) //)) | Richard RUDEK. MicroDek.      | Insert sh, ah,
>//\\ //\\  | Chatswood, Sydney. Australia. |  witty comment here. :)
>           `-------------------------------'
Technical Details
Message-ID: <35778811.0@139.134.5.33>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33> <3576bee2.55962514@news.zeta.org.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10d683,70a58627a995bf35
X-Google-Attributes: gid10d683,public
X-Google-Thread: fcd68,70a58627a995bf35
X-Google-Attributes: gidfcd68,public
From: "GroundHog" <kreidi@bigpond.com>
Subject: Re: Stoned Virus
Date: 1998/06/05
Message-ID: <35778811.0@139.134.5.33>
X-Deja-AN: 359728826
Content-Transfer-Encoding: 7bit
References: <356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33> <3576bee2.55962514@news.zeta.org.au>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3007.0
Organization: Billi's Designer Studio/COSA
Newsgroups: alt.comp.virus,aus.computers.ibm-pc