Article View: alt.comp.virus
Article #48Re: Stoned Virus
From: GroundHog
Date: Fri, 05 Jun 1998 00:00
Date: Fri, 05 Jun 1998 00:00
47 lines
3010 bytes
3010 bytes
Again, I suggest to talk to McAfee or Dr Solomon about exact details - I remember some time ago (last year) I came across a virus spec sheet, on the Net, which listed some (more than one) cmos viruses. I disagree with the statement that the cmos would be corrupted if a virus or any other mini pgm would install in unused space! - Writing to *unused* space never corrupts! I am not going into hardware details as this would be foolish considering the numerous different mobo designs on the market! Stefan -- *COSA IT Solutions /MS-OEM/MS-SBNL2 http://www.ozemail.com.au/~billis/cohp/cohp.htm *Billi's Designer Studio http://www.users.bigpond.com/kreidi/Studio/billishp.htm ___________________ Nostradamus once said: "Quia non est nostrum noscere tempora nec momenta" [It is not for us to know the times or the instants] Richard RUDEK wrote in message <3576bee2.55962514@news.zeta.org.au>... >"GroundHog" <kreidi@bigpond.com> wrote: > >>CMOS viruses are real - no doubt for me! I suggest to contact McAfee or the >>like for more detailed answers - there are quite some large virus families >>with cmos subtypes! Depending on the cmos chip there is more or >>less 'waste' space, not used by the bios, which can be used by viruses if >>the space is sufficient! > >[snip] > >I was going to leave this one alone, but your getting way off track now. A >virus using "unused" CMOS RAM to store itself is crazy. Sure, some systems >do contain 2KB or more. But the keyword here is *SOME*. > >Now apart from anything else, if a virus did install itself into CMOS RAM, >a standard system could in no way execute code out of CMOS, therefore it is >no longer a virus. About the only thing it could do, is corrupt this RAM, >which is typically used for BIOS configuration settings. That's probably >enough though. RAM timming Chipset features etc, etc would be effected. > __ __ _______________________________ > //)) //)) | Richard RUDEK. MicroDek. | Insert sh, ah, >//\\ //\\ | Chatswood, Sydney. Australia. | witty comment here. :) > `-------------------------------'
Technical Details
Message-ID:
<35778811.0@139.134.5.33>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33> <3576bee2.55962514@news.zeta.org.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10d683,70a58627a995bf35 X-Google-Attributes: gid10d683,public X-Google-Thread: fcd68,70a58627a995bf35 X-Google-Attributes: gidfcd68,public From: "GroundHog" <kreidi@bigpond.com> Subject: Re: Stoned Virus Date: 1998/06/05 Message-ID: <35778811.0@139.134.5.33> X-Deja-AN: 359728826 Content-Transfer-Encoding: 7bit References: <356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33> <3576bee2.55962514@news.zeta.org.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3007.0 Organization: Billi's Designer Studio/COSA Newsgroups: alt.comp.virus,aus.computers.ibm-pc