Computing.Net > Forums > Security and Virus > driverguide.com download: Win32/CIH

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

driverguide.com download: Win32/CIH

Reply to Message Icon

Name: Michelle
Date: March 5, 2003 at 10:12:59 Pacific
Comment:

Was downloading a driver for my ATI Radon 9600 from your affiliate www.drivergude.com, AVG came up and said that Setup.exe is infected with Win32/CIH. I did some search through google since AVG did not remove it and found out that even the cleancih.exe, mcafee, and norton products - dont not remove it, so what do i do. Am i f---ed? I have already called in microsoft to activate my windows xp computer twice in the last 3 weeks dont make me do it again, please.



Sponsored Link
Ads by Google

Response Number 1
Name: Johns
Date: March 5, 2003 at 10:55:39 Pacific
Reply:

When you run a scan does it find files infected?

No not install that driver on you system!

Download the driver from ATI.

http://www.ati.com/

If you know the manufac and dont have to do research using model #'s and FCC ID's and such to find out what device it is always download the driver from the Manufac's web page.


0

Response Number 2
Name: Trip
Date: March 5, 2003 at 10:56:28 Pacific
Reply:

Do not trust the downloads you get from user uploaded files like at driverguide.com.

just go to ati.com and get the driver from there.


0

Response Number 3
Name: michael2
Date: March 5, 2003 at 13:36:16 Pacific
Reply:

This bug has several names...
Chernobyl, PE_CIH, Win95.CIH, Win32.CIH, W95/CIH.1003, CIH.Spacefiller

If this is what you have...

1. Download and run the CIH removal tool, according to the instructions on the download page. Do not restart the computer until you are instructed to do so.

http://securityresponse.symantec.com/avcenter/venc/data/kill_cih.html


2. Run LiveUpdate of Norton AV (in your case AVG) to make sure that you have the most recent virus definitions.
3. Start NAV (AVG)and make sure that it is configured to scan all the files. For instructions, read the document, "How to configure Norton AntiVirus to scan all files."
4. Run a full system scan.
5. If any files are detected as infected by W95.CIH, click Repair. If NAV reports that a file cannot be repaired, write down the file name, and then click Delete.

It appears from Symantecs site, the removal tool deletes the virus from the memory, but your updated AV removes the virus from files.

Symantecs state, running your AV before useing the removal tool will spread the infection.

Good luck and sorry you picked up a virus from a site designed to help people !


0

Response Number 4
Name: michael2
Date: March 5, 2003 at 13:38:14 Pacific
Reply:

I should have added.... get rid of the virus before you think of sorting the driver problem.



0

Response Number 5
Name: ShutMeUpOrDown
Date: March 5, 2003 at 14:01:47 Pacific
Reply:

Also.. the driverguide site doesnt warn you until your ready to download the driver.

"Warning: download and use this file at your own risk! DriverGuide.com has not checked this file. DriverGuide.com assumes no responsibility for personal or property damage associated with using this file. We recommend that you check this file for viruses before using. Please report any incorrect drivers or information to us immediately at uploads@driverguide.com."

User uploads are iffy but you should be careful when downloading from anywhere. Any site can be cracked into and have legit files replaced with malicious ones.


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon

Router Logs: What do you ... AVG plugin for Eudora



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: driverguide.com download: Win32/CIH

trojan downloader win32 renos.io and bloodhou www.computing.net/answers/security/trojan-downloader-win32-renosio-and-bloodhou/26457.html

Win32/CIH on Windows XP? www.computing.net/answers/security/win32cih-on-windows-xp/19892.html

Win32.Fontra.C HELP! www.computing.net/answers/security/win32fontrac-help/20815.html