Mick Fitzpatrick wrote:
>
> Hello
>
> Norton Utilities has just found a virus on my PC!!! It may have been there
> some time as I don't usually let Norton run. However, I cleaned it up and
> Norton told me it could not remove the virus from certain files and
> suggested deleting them. These files are Norton exe and W98 programme files
> so I'd prefer not to delete them. The virus (s) is called W95.CIH and
> W95.CIH 1075. This is the first time I've had a virus and I don't know what
> to do next!! any advise will be welcome...TIA
>
> Mick
>
Mick:
The Win95.CIH virus is a virus that infects 32-bit Windows 95/98/NT
executable files. When an infected program is run, the virus will infect
the computer's memory. This virus will attempt to modify or corrupt
certain types of Flash BIOS, software that initializes and managesthe
relationships and data flow between the system devices, including the
hard drive, serial and parallel ports and the keyboard. By overwriting
part of the BIOS program, the virus can keep a computer from starting up
when the power is turned on.
Symantec (maker of Norton AntiVirus) has a program called KILL_CIH.EXE
on their site that will disable the virus in memory so that you can
remove the virus with your software. Note that if the virus is NOT
disabled, you can and probably will spread the virus with your software.
Symantec also has a freeware version of their software available for
download, but don't download it until you download and run KILL_CIH.
You can get KILL_CIH.EXE at
http://ftp.symamtec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/kill_cih.exe
The instructions are at the same site, but end with kill_cih.txt.
The freeware version of Norton Antivirus can be found at
http://www.symantec.com/nav/navc.html
If you have problems getting the files, e-mail me directly and I can
sent the two KILL_CIH files to you directly.
Vince O'Connor
O'Connor Consulting
-----
PCSOFT mailing list - http://nospin.com
Bob Wright:[log in to unmask] - Drew Dunn:[log in to unmask]
|
