Computing.Net > Forums > Security and Virus > Win32/CIH on Windows XP?

Win32/CIH on Windows XP?

Reply to Message Icon

Original Message
Name: malice_iw
Date: November 13, 2006 at 00:05:07 Pacific
Subject: Win32/CIH on Windows XP?
OS: Windows XP Pro
CPU/Ram: Pentium 4
Model/Manufacturer: Dell
Comment:

Yesterday I ran an old CD with a game. After the game was installed, my antivirus reported finding a Win32/CIH virus in an .exe file, which i immediately deleted. I've not heard about this virus for years - can it cause any damage to PCs using Windows XP OS? Of course, I scanned my PC thoroughly afterwards, but considering the Win95.CIH notoriety in the past I'd like to be sure. If there's any danger, can anyone recommend any tool to do an extra check
Thx a lot


Report Offensive Message For Removal


Response Number 1
Name: jboy
Date: November 13, 2006 at 01:06:44 Pacific
Subject: Win32/CIH on Windows XP?
Reply: (edit)

Ah, 'Chernobyl'

According to Symantec:

Systems Affected: Windows 95, Windows 98, Windows Me

.. as well

CIH is a virus that infects the 32-bit Windows 95/98/NT executable files, but can function only under Windows 95/98 and ME. It does not function under Windows NT or Windows 2000.

Still, seems unlikely to have come from a factory issued CD, may have been a false positive - you might've uploaded the file to Jotti for confirmation. If you're still concerned, try an online scan such as Panda, Kaspersky, etc - although, as mentioned, that bug doesn't function under NT

If I know the answer I'll tell you the answer, and if I don't, I'll just respond, cleverly

--Donald Rumsfeld


Report Offensive Follow Up For Removal

Response Number 2
Name: malice_iw
Date: November 13, 2006 at 06:45:10 Pacific
Subject: Win32/CIH on Windows XP?
Reply: (edit)

False positive - this is what I thought, it may have contained what I saw called 'CIH remnants'. Once I had a factory issued cd which did contain a virus. I don't want to take any chances this time, so I'll perform a couple of online checks, thanks for the tip.


Report Offensive Follow Up For Removal

Response Number 3
Name: jboy
Date: November 13, 2006 at 16:59:19 Pacific
Subject: Win32/CIH on Windows XP?
Reply: (edit)

That'd be my take. A pretty nasty piece of work, but only dangerous to DOS based Win32 systems.

Sure, an online scan uses the most current definitions, and may find something missed by your resident program - won't hurt, at any rate

If I know the answer I'll tell you the answer, and if I don't, I'll just respond, cleverly

--Donald Rumsfeld


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Win32/CIH on Windows XP?

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




How often do you use Computing.Net?

Every Day
Once a Week
Once a Month
This Is My First Time!


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge