Article View: alt.comp.virus
Article #53Re: Stoned Virus
From: Richard RUDEK
Date: Thu, 04 Jun 1998 00:00
Date: Thu, 04 Jun 1998 00:00
24 lines
1916 bytes
1916 bytes
"GroundHog" <kreidi@bigpond.com> wrote:
>CMOS viruses are real - no doubt for me! I suggest to contact McAfee or the
>like for more detailed answers - there are quite some large virus families
>with cmos subtypes! Depending on the cmos chip there is more or
>less 'waste' space, not used by the bios, which can be used by viruses if
>the space is sufficient!
[snip]
I was going to leave this one alone, but your getting way off track now. A
virus using "unused" CMOS RAM to store itself is crazy. Sure, some systems
do contain 2KB or more. But the keyword here is *SOME*.
Now apart from anything else, if a virus did install itself into CMOS RAM,
a standard system could in no way execute code out of CMOS, therefore it is
no longer a virus. About the only thing it could do, is corrupt this RAM,
which is typically used for BIOS configuration settings. That's probably
enough though. RAM timming Chipset features etc, etc would be effected.
__ __ _______________________________
//)) //)) | Richard RUDEK. MicroDek. | Insert sh, ah,
//\\ //\\ | Chatswood, Sydney. Australia. | witty comment here. :)
`-------------------------------'
Technical Details
Message-ID:
<3576bee2.55962514@news.zeta.org.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10d683,70a58627a995bf35 X-Google-Attributes: gid10d683,public X-Google-Thread: fcd68,70a58627a995bf35 X-Google-Attributes: gidfcd68,public From: NoMailThanks@FollowupInstead.com (Richard RUDEK) Subject: Re: Stoned Virus Date: 1998/06/04 Message-ID: <3576bee2.55962514@news.zeta.org.au> X-Deja-AN: 359509195 References: <356AA597.1F258B7D@nettrek.com.au> <356bab16.0@139.134.5.33> <6kiae9$r2i@news.microsoft.com> <35724303.0@139.134.5.33> <WIwc1.1061$iY6.4913559@news.itd.umich.edu> <6l3g80$cva4$1@newssvr04-int.news.prodigy.com> <35760c6a.0@139.134.5.33> Organization: Zeta Internet, http://www.zeta.org.au/ Newsgroups: alt.comp.virus,aus.computers.ibm-pc