Win95 CIH and other destructive viruses question.

blue_fyre · 10-26-2009, 10:57 PM

When http://www.fireav.com/virusinfo/library/cih.htm says Win95 CIH "directly attacks the code stored in the flash ROM chip and makes the computer unbootable," does that mean that BIOS will be unable to start or just Windows? And in that event, will one who has experienced its payload be able to reinstall Windows and use it [after formatting the drive(s)].

**afccarl666** · 10-27-2009, 06:07 AM

If you have no BIOS, you have no startup of the PC, and therefore no OS can be booted. From my understanding, the BIOS (Basic Input Output System) is a system that basically starts up everything and then hands over to the OS. So no BIOS =

Thats what makes flash updating the BIOS so risky.

tetonbob · 10-27-2009, 08:53 AM

Pretty old infection, is this still seen in the wild? Targeted Windows 9x systems...how many are out there still?

blue_fyre · 10-27-2009, 01:28 PM

So once I flash my BIOs and get it infected with virus, I have to get a new motherboard or something?
I there such virus that flashes the BIOs without your permission? Are BIOs infecting viruses detectable (if they are, who detects them?)?

10-26-2009, 10:57 PM	#1 (permalink)
blue_fyre Registered User Join Date: Aug 2009 Posts: 36 OS: Windows XP Service Pack 3	Win95 CIH and other destructive viruses question. When http://www.fireav.com/virusinfo/library/cih.htm says Win95 CIH "directly attacks the code stored in the flash ROM chip and makes the computer unbootable," does that mean that BIOS will be unable to start or just Windows? And in that event, will one who has experienced its payload be able to reinstall Windows and use it [after formatting the drive(s)].

10-27-2009, 06:07 AM	#2 (permalink)
afccarl666 TSF Enthusiast Join Date: Jul 2009 Location: Birmingham, UK Posts: 756 OS: XP SP3 + Linux Ubuntu 9.10 My System	Re: Win95 CIH and other destructive viruses question. If you have no BIOS, you have no startup of the PC, and therefore no OS can be booted. From my understanding, the BIOS (Basic Input Output System) is a system that basically starts up everything and then hands over to the OS. So no BIOS = Thats what makes flash updating the BIOS so risky. __________________

10-27-2009, 08:53 AM	#3 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,570 OS: 2000 Pro; XP Pro; XP Home	Re: Win95 CIH and other destructive viruses question. Pretty old infection, is this still seen in the wild? Targeted Windows 9x systems...how many are out there still? __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

10-27-2009, 01:28 PM	#4 (permalink)
blue_fyre Registered User Join Date: Aug 2009 Posts: 36 OS: Windows XP Service Pack 3	Re: Win95 CIH and other destructive viruses question. So once I flash my BIOs and get it infected with virus, I have to get a new motherboard or something? I there such virus that flashes the BIOs without your permission? Are BIOs infecting viruses detectable (if they are, who detects them?)?