ticalc.org
Basics Archives Community Services Programming
Hardware Help About Search Your Account
   Home :: Archives :: News :: Win95.CIH Spotted In 83PlusAsm v1.01

Win95.CIH Spotted In 83PlusAsm v1.01
Posted by Nick on 23 March 2000, 23:37 GMT

Well.. this is a piece of sour news. From bombing the chem test to getting waitlisted at Washington University to this. Last night, a file was added that contained the Win95.CIH virus. THIS FILE WILL CAUSE YOUR SYSTEM TO CEASE FUNCTIONING ON THE 26TH OF ANY MONTH! For those of you who can't tell the emboldened red text apart from everything else, this is a very bad thing. The program was called 83PlusAsm v1.01; it had 255 downloads before we removed it from our archives. If you downloaded this file, do a virus scan of your machine IMMEDIATELY or head to this page to get an online scan of your system. If you have any problems with disinfecting your system, head over to this page or email me.

DO THIS PROMPTLY - Win95.CIH WILL RENDER YOUR MACHINE INOPERABLE AFTER MARCH 26TH!

We apologize for any problems this may cause anyone. Any other TI sites - scan your systems if you added this file. Once again, if you have ANY problems with getting this virus off your computer, email me and I'll try to make my response as prompt as possible.

Update (Nick): An esteemed colleague, David Hall, has informed me of a free virus scanner with free updates. You can find a copy of it here.

Update (Nick): Another kind-hearted person, Matt, has given me the linkage to a disk recovery tool called SpinRite. This can even be used after the virus goes off. I don't know how much it can help people, but it's there. (Updated with correct link)

 


The comments below are written by ticalc.org visitors. Their views are not necessarily those of ticalc.org, and ticalc.org takes no responsibility for their content.


Re: Win95.CIH Spotted In 83PlusAsm v1.01
Scott Reid  Account Info

I noticed the CIH virus on the file as soon as you guys posted it becuase I downloaded it. Luckily I became aware of and deleted the virus the second I opened the zip file. I probably should of warned you guys but I havent got around to it.

     24 March 2000, 00:26 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
cppbman  Account Info
(Web Page)

same here. If anyone is wondering, I am using McAffee VirusScan, which caught the virus the second I downloaded it. On another note, don't you (ticalc.org) have a record of who posted what when and from what IP? Can't you throw this person off? Thank you also for caring enough to post a news item on this. ticalc.org is my favorite calc site (before and after this virus).

     24 March 2000, 01:34 GMT

Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jxxh67  Account Info

im sure they do, but an IP address wouldnt do any good unless the jerk that did this has a fixed internet connection, like DSL, Cable or a T1. Most ISP's use a server-assigned IP number, meaning that they buy a pool of IP's and give you an IP they own everytime you dial up. So chances are we can't prevent this from happening again, unless ticalc scans any files uploaded before they post it. Although, thats just worse case senario. Maybe im wrong, I hope so.

     24 March 2000, 04:54 GMT


Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Kirk Meyer  Account Info
(Web Page)

Technically, if someone committed a crime, you can almost figure out who it was. The only way is if they did it from an internet cafe or public library where people might not know who used the computer when. Dialup providers keep time and IP logs as well as source telephone numbers.

But anyway, ticalc.org does run all of their files through a virus checker before being posted. Chances are that theirs just wasn't updated enough. (I'd imagine that virus checkers for Linux are somewhat harder to find...)

     24 March 2000, 07:28 GMT


Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jeff Chai  Account Info

I did not, repeat, did not put a virus in this program. Did Nick accuse anyone of being responsible for this?!! I am not a criminal!! If I were a "jerk", you'd think I would have shut down my e-mail address and gone into hiding. But I am innocent until proven guilty!!

     24 March 2000, 22:15 GMT


Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jxxh67  Account Info

hey, if you say that you didnt put the virus in there on purpose, then Im not accusing you of being a "jerk". I only assumed that it was placed in objhex for the wrong reason. I mean, correct me if im wrong, but arent viruses bad?? If it somehow happened on accident, then dont worry about it. Im not going to condemn you, stuff happens. But dont expect everyone to just forget about this, because if they downloaded it and dont take care of the virus by the 26th, well...someone is going to want some answers...

     25 March 2000, 02:07 GMT


Re: Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
David Hall  Account Info
(Web Page)

Come on! Give him a break - that virus attaches itself to unsuspecting files - it could easily happen to ANYONE who uploads files to TiCalc.org, OK?
The only way to prevent it is to get a decent virus scanner. You can download InoculateIT for free at http://antivirus.cai.com/ and I use that - it got a good score in a PC Magazine virus scanner labs test, so its not bad, and you get free updates.

     25 March 2000, 11:40 GMT


Re: Re: Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jxxh67  Account Info

Just in case you can't figure it out, I realize that its not his fault!! I dont care, obviously it happened on accident! The whole point of what I said earlier was that someone whose BIOS gets screwed over isn't going to be as forgiving....

     25 March 2000, 18:20 GMT


Re: Re: Re: Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jeff Chai  Account Info

I can see why people would not be as forgiving if their BIOS is "screwed". But, they must understand that this was something that I could not have prevented. It is the lone responsibility of the downloader to scan all files with a reliable virus detector.

If anyone knows anyone who may have downloaded the File but has not removed it, e-mail them, call them, anything to make sure that thier computer will not be damaged tommarow!

     26 March 2000, 01:18 GMT


Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Andy Lundell Account Info
(Web Page)

Maybe, but what would that accomplish? I suppose if you found him you could email him and let him know his computer was infected. But since he read it here, it wouldn't realy accomplish anything.

     25 March 2000, 21:25 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
mike marantis  Account Info

i am just curious. was this file sent to you and uploaded or uploaded by the person who made it? if it was uploaded by you then do you virus scan the files? just a question

     24 March 2000, 00:34 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Magnus Hagander  Account Info
(Web Page)

Just to set the record straight. We normally scan *all* files before they are admitted into our archives, no matter who uploads them. But for some reason, the virus signature update has not worked as it shuold lately, so our virus signature database was out of date, and missed this one.
I'm running a rescan of every file in our archives now to be sure that there is nothing else in there.

     24 March 2000, 12:16 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
BrandonAGR  Account Info
(Web Page)

I noticed the infection as soon as I downloaded it, I promptly deleted. I then emailed the author and he said that 20 other people had told him the file was fine...

     24 March 2000, 00:55 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jeff Chai  Account Info

It's the truth Brandon. 20 people did e-mail me telling me they scanned the file, telling me it was safe. I'm sorry if I dissapointed everyone.

     24 March 2000, 13:07 GMT


Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
rob smith  Account Info
(Web Page)

on i have 3 scanners
A. Virus found
B. Virus Found (wrong one tho)
C. No virus Found
different scanners have different patterns

     24 March 2000, 16:42 GMT


Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
nova  Account Info

3 virus scanners...wow!!!
Unless you have incredible amounts of memory, your system resources must be really low.
I have Mcafee, which serves its purpose if you keep it up to date.

     25 March 2000, 08:05 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
Michael Brunner  Account Info
(Web Page)

Hey... I've heard of this one! Boys, I'd like you to meet the Chernobyl virus. Chernobyl really only infects executables. Chernobyl is a stealthy little bugger, because it hides itself in unused portions of the host file, making it difficult to detect, because the host file size remains the same. If you did inadvertantly download this file, you're running out of time, cause in a couple more days, you can say "Auf Wiedersehen" to your computer.
I do hope they find the jerk who created this virus in the first place. Although I do have the knowledge and ability to create a really nasty and wicked virus, I would never do so, since it is morally wrong. Anyone who would create anything to destroy other peoples' investments should be taken out back and hung.

     24 March 2000, 00:58 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Etec  Account Info
(Web Page)

No, no, don't hang him, thats not painful enough, you mutilate them slowly, and pour salt over their wounds. Finally you then shoot him 15 times. Thats the right thing to do to a virus maker that sets it loose to unsuspecting victums. Notice I said virus maker and then sets loose, it was not the authors fault.

     26 March 2000, 00:00 GMT

Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
[SANiTY]  Account Info

I've heard that paper cuts and lemon juice do good as well. BTW, I have two TI-83, one rom version 1.07 the other 1.08.

     26 March 2000, 14:13 GMT


Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Michael Brunner  Account Info
(Web Page)

Umm... Psycho... =)
But I do agree with you. You just forgot the flesh-eating ants, and the ant eating locusts, and the locust eating stink bugs that make you smell worse than a skunk and make you go "EWW! EWW! GET THEM OFF! GET THEM OFF!" and then you pass out, and when the mortician comes, he is overwhelmed by your strong odor, that he passes out, and the whole process repeats until everyone turns into skeletons in the dirt. =)

     26 March 2000, 23:28 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
alex cooke  Account Info
(Web Page)

Wow, thanks for warning me! At least I printed everything. (I know, I'm a freak.) This is what distinguishes ticalc.org from the rest of the TI sites. They care about their users enough to warn them about things like this and they do it all for free.

     24 March 2000, 01:03 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
George Limpert  Account Info
(Web Page)

Being that I am in charge of the news for Ti-Files, I consider what you said to be a slap in the face. It's not the policy of Ti-Files (usually) to post news that is about the business of other sites. I violated this policy once but only to make a point about the TI-News hack being disgusting. Ticalc.org was the only site to post this file so naturally they would be the only one to alert you that it was infected with the CIH virus. TI-News has different policies so when I talk about other sites, I am referring to Dimension-TI and Ti-Files.

     24 March 2000, 01:28 GMT

Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jonah Cohen  Account Info
(Web Page)

Well maybe not news that's the business of other sites, but what about just shamelessly ripping their news in general? I mean, you still have the #$&* news item about the TI-83+ start-up app that was released in November! Ticalc.org had that posted for only fifteen minutes before they pulled it, realizing their mistake. Also, you copied their news item about TI looking for jobs. If TI had enough respect for TI-Files to have actually emailed them the way they did Dim-TI and ticalc.org, then you would've known that TI wanted it worded exactly the same way (hence why Dim-TI and ticalc.org had identical news items). Another case of botched up stealing.

This has been going on for months and even years. You steal ticalc.org's news, and you can't even do it effectively! Before you get all indignant about other people critizing TI-Files, think about how you're treating them.

     25 March 2000, 04:59 GMT


Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
alex cooke  Account Info
(Web Page)

Thank you for the backup. I'm not trying to be biased or start a ticalc.org vs. ti-files.org war, but my personal opinion is this:
Sites' Ranks
1. Ticalc.org-(now has the biggest archive)/covers wide range of topics/original/caring/frequent updates\recognized by Texas Instruments
2. Tigalaxy.com-frequent updates/caring/quick responses for help
3. Calc.org-screenshots for all files/caring/covers wide range of topics/recognized by Texas Instruments
4. TI-Files.org-2nd largest archives

Downfalls

1. Ticalc.org-a few of the links (such as hardware go to sites like calc.org)
2. Tigalaxy.com-Hard to navigate/not very original news
3. Calc.org-almost no updates (even though they've been up and running for well over a month)
4. TI-Files.org-almost no originality/almost no updates/terribly out-of-date

Now I know I'll get some agreements and some disagreements from some mature and some immature people who are simply insulted by someone's personal opinion and can't be mature enough to disagree appropriately. I accept people's arguments and disagreements that are stated maturely, so don't think I'll hate you if you disagree, it depends how you disagree.

     25 March 2000, 20:40 GMT


Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Etec  Account Info
(Web Page)

Not to be mean or anything but TI-Files really is not the biggest archive like they say on their site. Also I bet they are caring but just have never been able to prove it, hey they only are a files download site, TI-Calc has a wider range of things to do on their site, including a Poll and web hoasting.

     26 March 2000, 00:07 GMT


Ha Ha Ha
deuist Account Info

You're head of the news program? Isn't that like being MVP of the New York Jets? TI-files is going down the crapper and its members don't even care. Twice I have written Mat Chris offering my help and both times he has never responded. TI-files deserves every bit of these flames.

     26 March 2000, 00:51 GMT


Re: Ha Ha Ha
alex cooke  Account Info
(Web Page)

Not to be crude or mean, but this was exactly the point I was trying to get across in my earlier statements in a polite fashion. So in reply to this comment, I'm sorry but I have to agree totally.

     26 March 2000, 03:13 GMT

1  2  3  4  5  6  

You can change the number of comments per page in Account Preferences.

  Copyright © 1996-2012, the ticalc.org project. All rights reserved. | Contact Us | Disclaimer