[LINUX:5574] CIH hakkinda

Mustafa Akgul (akgul@bilkent.edu.tr)
Mon, 26 Apr 1999 21:26:42 +0300 (EET DST)

23 nisan tarihli NT-HAPPENING'den.
bazilariniz icin cok gec ama.

Virus epeydir biliniyordu, ama ...
Saygilar
Mustafa Akgul
------------------------------

Date: Mon, 26 Apr 1999 07:49:21 -0500
From: Gleason Sackman <gleason@rrnet.com>
Subject: MISC> CERT on CIH/Chernobyl Virus

From: Telecom Regulation & the Internet
[mailto:CYBERTELECOM-L@LISTSERV.AOL.COM] On Behalf Of Robert Cannon
Sent: Saturday, April 24, 1999 6:22 AM
To: CYBERTELECOM-L@LISTSERV.AOL.COM
Subject: CERT on CIH/Chernobyl Virus

http://www.cert.org/incident_notes/IN-99-03.html
CERTŪ Incident Note
IN-99-03

The CERT Coordination Center publishes incident notes to provide
information about incidents to the Internet community.

CIH/Chernobyl Virus

Thursday, April 22, 1999
Friday, April 23, 1999 -- Updated vendor information

Overview

We have received a number of information requests about a computer
virus
named CIH. Anti-virus vendors have given this virus the following
names:
CIH, Win95.CIH, PE_CIH, Win32.CIH, and W95/CIH.1003. The virus has
also been
called the Chernobyl virus. Some versions of the CIH virus become
active on
April 26, 1999 which is the 13th anniversary of the Chernobyl
disaster.

Description

The CIH virus infects executable files and is spread by executing an
infected file. Since many files are executed during normal use of a
computer, the CIH virus can infect many files quickly.

There are several variants of the CIH virus. Some activate every month
on
the 26th, while other variants activate just on April 26th or June
26th.
Once the CIH virus activates, the virus attempts to erase the entire
hard
drive and to overwrite the system BIOS. Some machines may require a
new BIOS
chip to recover if overwritten by the CIH virus. CIH only affects
Win95/98
machines.

More technical details about the CIH virus can be found at the
following site.

http://www.virusbtn.com/VirusInformation/cih.html

Solutions

Many motherboards have a "jumper" that will enable or disable the
ability to
write to the BIOS. To prevent the CIH virus or any other program from
writing to your computer BIOS, we recommend that you set the
motherboard
jumpers so that the BIOS can not be modified. Some motherboards
vendors may
ship with the jumper set in the writable/programmable mode for the
BIOS.

This is a known virus and anti-virus vendors are able to detect the
CIH
virus. To detect and remove current viruses, you must update your
scanning
tools and anti-virus software with the latest virus signatures or
definitions. To properly clean the CIH virus we recommend booting an
infected computer from a clean floppy diskette (one that is not
infected)
and then run anti-virus software.
~~~~~~~~~~~~~~~~~~~
Internet Telecom Project
www.cybertelecom.org
cannon@world.oberlin.edu

------------------------------

Date: Mon, 26 Apr 1999 07:48:44 -0500
From: Gleason Sackman <gleason@rrnet.com>
Subject: RESOUR> A new search engine: Google

From: Amnon Till [mailto:amnont@hotmail.com]
Sent: Friday, April 23, 1999 4:44 PM

A new search engine: Google
http://www.google.com

Here is the philosopy of this new search engine:

Google returns the right results first.
Google uses a complicated mathematical analysis, calculated on
more than a billion hyperlinks on the web, to return
high-quality
search results so you don't have to sift through junk. This
analysis
allows Google to estimate the quality, or importance, of every
web
page it returns. The importance of a web page is entirely
independent
of any query. A page like www.google.com has high importance if
1.Other pages with high importance point to www.google.com
2.Lots of other pages with high importance point to
www.google.com
This definition seems circular, and it is. Nonetheless, it
yields a well-defined notion of importance that makes finding
high
quality sites easy.

This site was found by John Tracy McGrath
I personaly still like Inference Find (http://www.infind.com) more
then Google but.. it is always nice to try new search engine for a
change.

Bye
Amnon
amnont@hotmail.com


Listeden cikmak icin:
unsub linux
mesajini listeci@bilkent.edu.tr'a gonderiniz.
Lutfen Listeci icin MIME / HTML / Turkce Aksan kullanmayin.
Liste arsivinin adresi: http://listweb.bilkent.edu.tr/