Dr Solomon`s Software, the worldwide leader in computer virus detection, identification and disinfection, has announced the immediate availability of a fix for the destructive CIH virus, set to trigger on July 26.
The CIH virus (which only works under Windows 95 and Windows 98) corrupts the BIOS, a vital component required by the computer to boot up, on the 26th of any month. Once attacked the computer is no longer bootable - even from a floppy disk. The only way to fix a damaged PC is to physically open it and replace the BIOS chip.
Dr Solomon`s have developed a routine that detects, intercepts, and disinfects files infected by CIH. The protection routine can be downloaded from http://www.drsolomon.com/vircen/valerts/win32cih.html and works in conjunction with all of Dr Solomon`s workstation, server and groupware anti-virus products.
"We`ve taken the unusual step of issuing a press release about this virus. We don`t want to cause panic or alarm - but it is important that computer users know that this virus has been seen in companies and can cause significant damage", said Graham Cluley of Dr Solomon`s, "We recommend companies check their networks with Dr Solomon`s, or another anti-virus product capable of detecting this virus, before the 26th of the month" Further Information on Flash BIOS
Most recent machines, from later 486`s through to Pentium II`s have a Flash BIOS. On most machines there is no easy way to tell other than reading the manufacturer`s documentation or referring to their website or technical support service.
Some machines have hardware write protection for the BIOS (via a jumper on the motherboard) but most don`t, and although there are software calls to write protect the BIOS, these are easily circumvented. Again depending on the BIOS author and the computer or motherboard manufacturer (refer to the documentation) it may be possible to backup the BIOS, and if you know what you`re doing you may be able to recover from this situation, but in most instances erasure of the BIOS is likely to be catastrophic and require the machine or motherboard being returned to the manufacturer or replaced.
Dr Solomon`s engineers are examining various BIOS code and hardware at the moment, and will publish more precise information, and any other methods for protecting the BIOS code, as these become available.
Share