Ask the Expert

Symptoms of the Chernobyl virus

I have a problem with a virus. It struck at just past midnight on April 26. In that respect it resembles the CIH virus. The problem is that when it disabled my system, it identified itself with a Windows protection fault-type screen but it had text on it that read, "chernobyle 2, something RUSSIA , Made by Prism and I think W32." That's only part of it that I can remember, because I did not write it down, and now Windows only gets a blue screen. "cdromdrive" also refused to stay closed earlier in the day. All attempts to load or run virus software are cut short by blue screens, as well.

The Symantec site has a CIH remedy, but their description of the messages that one would be getting are diferent than what I am getting. (Non-System Disk when boot from hard drive and invalid media when trying to boot from floppy) I get a Windows blue screen. Can you help?


    Requires Free Membership to View

Sorry to say, but I think your Chernobyl has melted down and done irreparable harm to your drive. If you have floppy booted and you are still BSoD (blue screen or scream of death) your system may be long gone. You have a variant of the CIH virus that did it's job well and may have removed every piece of valid code on your computer.

Depending on the version of the OS, hardware and other variables, you may be able to reload the OS or at least the boot portion. That doesn't mean the MTA, FAT or other method to map the drive is still valid or the boot sector is even on the system. Furthermore, ensure you are totally disconnected from any valid system while attempting to recover. You do not want to damage other systems on your network.

I know this is not much help, but I feel what you have explained may be unredeemable at this point.


For more information on this topic, visit these other SearchSecurity resources:
News & Analysis: Chernobyl virus set to wake up
Definition: Chernobyl virus
Best Web Links: Malware


This was first published in May 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: