Re: WAY OT--Crisis...virus! Need help

Leo Papandreou (leo@talcom.net)
Mon, 26 Apr 1999 16:38:36 -0400


On Mon, Apr 26, 1999 at 01:53:01AM -0400, James Willard wrote:
> Seeing the same thing with two of my Win95 boxes and a friend's computer (we
> don't even share files between ourselves). It wipes out the partition table.
> ICK! Where did it come from, and is there any way to recover the data?

My understanding is that it writes to your cmos, not the hard disk.
If so, the disk will probably come up again once you flash the BIOS.

I may be wrong, but its worth pusuing if you've been hit.

>
> James
>
> james@whispering.org
>
> >
> >
> > Oh, boy. Yeah, it is the Chernobyl virus most likely. I think this one
> > destroys the OS.
> >
> >
> > On Mon, 26 Apr 1999, Nicholas Henke wrote:
> >
> > > A friend of mine here at Penn has a weird problem. I think it may have
> > > been caused by a virus. He normally runs windows, and this evening after
> > > midnight, he tried to play a game and his computer froze up. After
> > > reboot he couldnt get anything to work. I booted with 2.0.36 and 2.2.6
> > > off of boot disks. Everything goes normal...the chipset is setup
> > > correctly. It barfs when it gets to checking the partitions. The swapper
> > > (pid 1 process nr: 1) gives a general protection fault. What can I do to
> > > further check out his drive. Is this looking like his chipset/hard drive
> > > firmware is corrupted. We had a campus email that came out thise week on
> > > the "Chernobyl Virus" I cant remember the exact message, but i remember
> > > that the virus was toting bios corruption and motherboard frying. I
> > > dismissed it as FUD, but maybe it is true. Anyhelp would be much
> > > apprecitated because he has papers due for finals this week. I also
> > > appologize for being so far off topic, but maybe this will give insite
> > > to those of us wishing to diagnose nasty HD problems.
> > > Thank you
> > > Nic
> > > --
> > > Nicholas Henke
> > > University of Pennsylvania
> > > Class of 2002
> > > 215-417-5665
> > > (ht/ft)tp://bs28-222-095.resnet.upenn.edu
> > > ----------------------
> > > Life is like bein' on a mule team.
> > > Unless you're the lead mule, all the scenery looks about the same.
> > >
> > > -
> > > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> > > the body of a message to majordomo@vger.rutgers.edu
> > > Please read the FAQ at http://www.tux.org/lkml/
> > >
> > >
> >
> > George Bonser
> >
> > Support The THING -- http://shorelink.com/~grep/THING.html
> >
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> > the body of a message to majordomo@vger.rutgers.edu
> > Please read the FAQ at http://www.tux.org/lkml/
> >
>
>
> --
> James D. Willard | Linux/FreeBSD/OpenBSD/Novell/Win/DOS/Minix User
> james@whispering.org | finger james@whispering.org for PGP Public Key
> #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
> $/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
> lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
> .,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,.,-=-,
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
> Please read the FAQ at http://www.tux.org/lkml/

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/