Originally from : "Budi Lewiyanto" <[EMAIL PROTECTED]>
Originally dated: Tue, 23 Nov 1999 07:05:11 +0700
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<e-Software>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~Forum Diskusi Software dan Internet untuk Kristen-Katholik~~~~~~~
Win32.Kriz aka the "Christmas Virus"
It just seems that viruses keep getting nastier and nastier. Kriz infects
Executables on any Windows 95/98 system. The way it does this is by first
infecting the file C:\WINDOWS\SYSTEM\KERNEL32.DLL so that it can hook over a
dozen different functions related to file management in order to infect
other executables as well.
Unfortunately, once you have discovered Kriz on your system, to ultimately
remove it, you need a clean copy of KERNEL32.DLL. If you don't have another
clean machine availible, you will need to reinstall Windows 95/98 in order
to get that file back. Yet another reason why you should keep backups.
Oh yes, this virus has a payload too. On December 25th, it activates and
does the following nasty things:
Erase the CMOS (battery backed up memory holding basic system information)
Erase the BIOS, similar to what CIH does.
Erase parts of the hard drive.
So please, this is yet one more reason to keep your anti-virus software
updated, or else you could end up with a very un-merry Christmas instead. If
you would like more information about this virus, you can read a technical
description on Network Associates' website or read the entry from the AVP
Virus Encyclopedia.
I-KAN %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% e-Software
Permulaan hikmat adalah takut akan TUHAN! Mazmur 111:10a / Amsal 9:10a
-----------------------------------------------------------------------
WEB---> http://hub.xc.org/scripts/lyris.pl?enter=i-kan-software
SUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
UNSUBSCRIBE---> To: [EMAIL PROTECTED], Isi/Body: kosong
Ayo. Mampir di Muara Informasi Kristen [MIK] http://www.sabda.org
