ticalc.org
Basics Archives Community Services Programming
Hardware Help About Search Your Account
   Home :: Archives :: News :: Win95.CIH Spotted In 83PlusAsm v1.01

Win95.CIH Spotted In 83PlusAsm v1.01
Posted by Nick on 23 March 2000, 23:37 GMT

Well.. this is a piece of sour news. From bombing the chem test to getting waitlisted at Washington University to this. Last night, a file was added that contained the Win95.CIH virus. THIS FILE WILL CAUSE YOUR SYSTEM TO CEASE FUNCTIONING ON THE 26TH OF ANY MONTH! For those of you who can't tell the emboldened red text apart from everything else, this is a very bad thing. The program was called 83PlusAsm v1.01; it had 255 downloads before we removed it from our archives. If you downloaded this file, do a virus scan of your machine IMMEDIATELY or head to this page to get an online scan of your system. If you have any problems with disinfecting your system, head over to this page or email me.

DO THIS PROMPTLY - Win95.CIH WILL RENDER YOUR MACHINE INOPERABLE AFTER MARCH 26TH!

We apologize for any problems this may cause anyone. Any other TI sites - scan your systems if you added this file. Once again, if you have ANY problems with getting this virus off your computer, email me and I'll try to make my response as prompt as possible.

Update (Nick): An esteemed colleague, David Hall, has informed me of a free virus scanner with free updates. You can find a copy of it here.

Update (Nick): Another kind-hearted person, Matt, has given me the linkage to a disk recovery tool called SpinRite. This can even be used after the virus goes off. I don't know how much it can help people, but it's there. (Updated with correct link)

 


The comments below are written by ticalc.org visitors. Their views are not necessarily those of ticalc.org, and ticalc.org takes no responsibility for their content.


Re: Win95.CIH Spotted In 83PlusAsm v1.01
Alapanamo  Account Info
(Web Page)

Glad I didn't download this, although I do have McAffee Virus Scan. In the news item, Nick linked to a site that would scan your system, and he linked to a site that would tell you about the virus...but what about removing the virus?? Well, you can download a program to do so in my URL...hopefully it doesn't contain the virus...:-) Hurry! Only 3 more days left!

     24 March 2000, 05:00 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Zachary  Account Info

I got this virus a few days ago from this site and I used the cleancih.exe from the link given above. It removed the virus from many files, but I got mcafee deluxe the next day, and it found (and eradicated) the CIH virus in three other executables that cleancih.exe didn't detect it in.

The Point: Use the newest McAfee antivirus software. It works better than cleancih.exe.

     24 March 2000, 23:50 GMT


Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Alapanamo  Account Info

Yeah, I myself didn't use the cleancih program since I didn't get the virus, but I'd have to say that McAfee is the best all around virus scanner/remover. Use that for all your viral needs (hmmm, now that's got a nice ring to it, doesn't it?).

     25 March 2000, 04:14 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
Philip Ringsmuth  Account Info
(Web Page)

I knew there was SOME reason that I'm the only person out there who actually uses a Mac. Phew, I guess this is where it pays off...

-Fil

     24 March 2000, 05:27 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Etec  Account Info
(Web Page)

Long Live the Mac. I use a Mac and a PC, I rember several times that I was saved by the fact that I used a mac from viruses, trojans, etc. I have had a virus on my PC (removed by McAfee) (I also have not long ago purged my hard drive) which I have only had for 1 year and one of my Macs has never been infected and I've had it for about 5 years and yes it was connected to an ISP. Does anyone see the irony in that.

     26 March 2000, 00:33 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
Paul Zipfel  Account Info
(Web Page)

i had this bug on my computer about 3 months ago. i didn't really do that much, but i guess that i cleaned it up before it had a chance. and just to be fair to the person that uploaded it, it may have been an accident. they may not have known about it and the virus probly attached itself to the file. i didn't find out about the virus till nearly 2 weeks after getting. so just in case, lets not jump to conclusions.

     24 March 2000, 05:32 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jeff Chai  Account Info

Thanks for understanding. I really didn't know I uploaded a virus.

     24 March 2000, 13:10 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
DWedit  Account Info
(Web Page)

Web page link for free KILL_CIH.EXE

Don't know if it works though.

     24 March 2000, 06:03 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
DWedit  Account Info
(Web Page)

What is the specific string found in CIH?

     24 March 2000, 06:06 GMT

Re: Win95.CIH Spotted In 83PlusAsm v1.01
Laura Thompson  Account Info
(Web Page)

This is a great way to spread a virus, include it in a program and upload it to a web page where people will download it. The responsible party should be rewarded for their genious, and then should be promptly shot.

Laura

     24 March 2000, 06:08 GMT

Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Magnus Hagander  Account Info
(Web Page)

See comment above about our virus scanning policies.

     24 March 2000, 12:16 GMT


Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Jeff Chai  Account Info

Laura,

I am not responsible for deliberetly putting the virus in the program. I know how upset everyone is, I am too. The only thing I know is this, Win95.cih will automatically attach itself to an unsuspecting file (mine). The orignal program (see above) is not a virus infected file of mass destruction. It is a harmless utility for converting Obj to Hex. Now that my reputation has been ruined, you'd think I never show my face agian. You're wrong. Not when people are wrongly acussing me of trying to infect everyones computer. Not now! Not ever!

Jeff

     24 March 2000, 22:23 GMT


Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
The_Professor  Account Info
(Web Page)

This is just a natural reaction: Something bad happens, and everyone wants someone to blame. People don't like it when they don't have any idea who did something (usually something bad), so they blame the most likely (in their opinion) suspect, without doing any research. Besides, if you are going to be downloading programs off the internet, then you should have a virus scanner.

Also, people will probably forget about the virus in a week or two, so your reputiation won't be ruined.

Also, ISPs should have virus scanning at the server level (And keep it updated), (Although it might not work if the virus was in a zip file) and / or give all customers a free Virus Scanner, or at least a discount on buying one.

     25 March 2000, 01:10 GMT


Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Magnus Hagander  Account Info
(Web Page)

Since the file never passed through any ISPs server, that would not have helped. It went from the uploaders client directly to the ticalc.org server.
*We* should've scanned it. We did. With a scanner that was, unknown to us, outdated.

     25 March 2000, 14:20 GMT


Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
ikecam  Account Info
(Web Page)

It still would have had to go through an ISP on the way. For example, this message has to run through an ATT internet service server on it's way to the ticalc.org server.

If by posting this comment I have betrayed some unexcusably large amount of ignorence as to the way computers connect to web servers, I apologize.

     25 March 2000, 16:31 GMT


Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
Andy Lundell Account Info
(Web Page)

I don't think it would be practical to scan for viruses at the router level. Rememeber this would all take time. Personaly I don't want them adding a couple extra 100ms to my Quake pings because they're scaning every single packet for viruses.

Besides the vast majority of packets wouldn't carry a virus anyway. Think of all the stuff you do with your interenet. How much of that time are you downloading programs? Vs Web surfing,playing quake,IRC/AIM/ICQ and whatnot.

     25 March 2000, 21:20 GMT


Re: Re: Re: Re: Re: Re: Re: Win95.CIH Spotted In 83PlusAsm v1.01
ikecam  Account Info
(Web Page)

I wasn't saying they should scan. In fact, I agree, it would be very inconvienient for ISPs to scan for viruses. I was just clarifying that files do have to pass through an ISP server.

     27 March 2000, 04:33 GMT

Getting Wait-Listed @ Wash U
Fuzz  Account Info
(Web Page)

hey man, dont worry about it. i was wait listed too. but you'll prolly get my spot, b/c i'm gonna send them a letter saying that i'm not going and to pull my app. i'll prolly go to Rice or CMU instead, seeing as i'm accepted and all

     24 March 2000, 06:32 GMT


Re: Getting Wait-Listed @ Wash U
Nick Disabato  Account Info
(Web Page)

Actually I'll probably end up declining my position in the wait list anyway.
I already got into CWRU, and if I get into CMU, there's no contest.

You got the letter from CMU already? I didn't.. probably means I'm denied, too :(

--BlueCalx

     24 March 2000, 15:15 GMT


Re: Re: Getting Wait-Listed @ Wash U
jamin  Account Info

I got waitlisted at Wash U too. I guess the fact that my parents and grandparents went to Wash U and my high grades in hs weren't enough to get in. They charge too much anyway, especially for my specific major - they have a crappy architecture program.

     24 March 2000, 18:35 GMT


Re: Re: Re: Getting Wait-Listed @ Wash U
Nick Disabato  Account Info
(Web Page)

Heh.
I didn't have any of that ;P
GPA: 3.18 out of 4.0, 3.87 weighted out of 5.0
SAT: 790m/670v
ACT: 31e/36m/34r/34s, 33 composite.

*sigh*
My grades killed me if anything.

--BlueCalx

     25 March 2000, 00:12 GMT

Re: Re: Re: Re: Getting Wait-Listed @ Wash U
nova  Account Info

I am a freshman and I have a 4.14
This is because I am in AP computers. Does anyone have any idea how to do a binary-tree based heap?

     25 March 2000, 08:25 GMT


Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
JaggedFlame

i'm a freshman with a 4.5... but i'm not in any ap classes. weird.

     25 March 2000, 18:58 GMT


Re: Re: Re: Re: Getting Wait-Listed @ Wash U
ikecam  Account Info
(Web Page)

Yeah, the problem is definately not your SATs. If my 710v/690m got me into MIT, yours should get you in about anywhere. The 3.18 is probably what did you in.

But don't worry; I'm sure you'll get into *somewhere* you want to go. Good luck! :-)

     25 March 2000, 16:23 GMT


Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Flymaster Account Info

Well...my 790v/800m didn't get me into MIT....SATs have very little to do with it. Oh well...GO RPI!!! :D

     25 March 2000, 19:36 GMT

Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Jxxh67  Account Info

...i would think a 1590 would get you anywhere...

     26 March 2000, 04:52 GMT


Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Flymaster Account Info

You're not the only one who thought that :(

     26 March 2000, 05:55 GMT


Re: Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Jxxh67  Account Info

At least tell me that you got a free ride to RPI ???
i mean, 1590 of a possible 1600, that deserves something.

     26 March 2000, 07:59 GMT


Re: Re: Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Flymaster Account Info

Not free, but I did get a good chunk of change.

     26 March 2000, 20:55 GMT


Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
ikecam  Account Info
(Web Page)

What's your GPA and extra-curriculars? That might matter the most.

     26 March 2000, 20:51 GMT


Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Flymaster Account Info

I graduated #2, and was President of NHS...3 years varsity track...the cruel fact of life is that there's a LOT of people with the same type of acheivements out there...EVERYONE get's waitlisted somewhere..don't worry about it too much.

     26 March 2000, 21:28 GMT

Re: Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
Nick Disabato  Account Info
(Web Page)

I'm a bit more concerned with CMU than Washington, though. It's just the principle of the thing - I don't even think I'll accept my spot on the waitlist.

Go to my (Web Page) link for a few brief rants on college admissions stuff.

--BlueCalx

     26 March 2000, 22:13 GMT


Re: Re: Re: Re: Re: Re: Re: Re: Getting Wait-Listed @ Wash U
ikecam  Account Info
(Web Page)

Hmmm, that's weird. I also got into Swarthmore College, which has a tough acceptence rate (arguably tougher than MIT's). And yet, you seem to be much better qualified than I am...

     27 March 2000, 04:37 GMT

1  2  3  4  5  6  

You can change the number of comments per page in Account Preferences.

  Copyright © 1996-2012, the ticalc.org project. All rights reserved. | Contact Us | Disclaimer