On Sun, 26 Jul 1998, Conrad Wei-Li Song wrote:
> .... UT has made two very big mistakes about this virus:
>
> 1. It disclosed information that a lethal virus had infected their
> computers without determining how the virus actually spreads. I doubt
> anyone has taken the Win32/CIH and dissected it to see exactly what it
> does.
Wrong.
The lab tech supervisor for ACITS has been examining the virus since
at least Monday. He suspected something was up the previous week. When
he tested it on a Win95 system, it corrupted the partition tables making
the drive useless. The virus can also supposedly affect flash BIOSes
rendering the whole system useless unless you've backed up your BIOS. He
hasn't been able to duplicate that yet.
An ACITS' Windows developer has also been testing the virus on Win3.1,
and WinNT systems. He said although it does not affect NT, it can infect
NetBEUI shares and *REINFECT* 95/98 systems that access those shares.
> 2. It conscientiously worked with only ONE virus-scanning software
> company to detect/remove the CIH virus, which happens to be Dr.
> Solomon's an coincidentally part of the UT-Connect software.
Wrong again.
Dr Solomon's v 7.85 CANNOT DETECT the virus. They've said v7.86 will
when it comes out. You have to download an update which only works for
versions 7.83 and up.
There are OTHER programs to remove the virus. (We've been using some
of them within ACITS for the labs.)
> ....it seems highly unlikely that all of the SMF computers
> could acquire the virus within the period of a month....
> ....especially if the computer systems.... are completely restored
> from a network drive....
Wrong yet again.
The disk image used to rebuild the 95 systems was infected and
consequently infected ALL the SMF 95 systems.
********************************************************************
Marty Combs Was das ist, ist verursacht
ACITS, (E26 2.316) durch das was war,
The University of Texas und das, was sein wird,
Austin, TX 78712 hat das was ist zur Ursache.
Tel: 512-232-3521 -Reme der Gourmont
********************************************************************
(Opinions expressed are TOTALLY mine.)
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]
