Q

Symptoms of the Chernobyl virus

I have a problem with a virus. It struck at just past midnight on April 26. In that respect it resembles the CIH

virus. The problem is that when it disabled my system, it identified itself with a Windows protection fault-type screen but it had text on it that read, "chernobyle 2, something RUSSIA , Made by Prism and I think W32." That's only part of it that I can remember, because I did not write it down, and now Windows only gets a blue screen. "cdromdrive" also refused to stay closed earlier in the day. All attempts to load or run virus software are cut short by blue screens, as well.

The Symantec site has a CIH remedy, but their description of the messages that one would be getting are diferent than what I am getting. (Non-System Disk when boot from hard drive and invalid media when trying to boot from floppy) I get a Windows blue screen. Can you help?


Sorry to say, but I think your Chernobyl has melted down and done irreparable harm to your drive. If you have floppy booted and you are still BSoD (blue screen or scream of death) your system may be long gone. You have a variant of the CIH virus that did it's job well and may have removed every piece of valid code on your computer.

Depending on the version of the OS, hardware and other variables, you may be able to reload the OS or at least the boot portion. That doesn't mean the MTA, FAT or other method to map the drive is still valid or the boot sector is even on the system. Furthermore, ensure you are totally disconnected from any valid system while attempting to recover. You do not want to damage other systems on your network.

I know this is not much help, but I feel what you have explained may be unredeemable at this point.


For more information on this topic, visit these other SearchSecurity resources:
News & Analysis: Chernobyl virus set to wake up
Definition: Chernobyl virus
Best Web Links: Malware


This was first published in May 2002

Dig deeper on Malware, Viruses, Trojans and Spyware

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close