Home > Ask the Security Experts > Questions & Answers > Symptoms of the Chernobyl virus
Ask The Security Expert: Questions & Answers
EMAIL THIS

Symptoms of the Chernobyl virus

Ed Yakabovicz EXPERT RESPONSE FROM: Ed Yakabovicz

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 08 May 2002
I have a problem with a virus. It struck at just past midnight on April 26. In that respect it resembles the CIH virus. The problem is that when it disabled my system, it identified itself with a Windows protection fault-type screen but it had text on it that read, "chernobyle 2, something RUSSIA , Made by Prism and I think W32." That's only part of it that I can remember, because I did not write it down, and now Windows only gets a blue screen. "cdromdrive" also refused to stay closed earlier in the day. All attempts to load or run virus software are cut short by blue screens, as well.

The Symantec site has a CIH remedy, but their description of the messages that one would be getting are diferent than what I am getting. (Non-System Disk when boot from hard drive and invalid media when trying to boot from floppy) I get a Windows blue screen. Can you help?


>

Sorry to say, but I think your Chernobyl has melted down and done irreparable harm to your drive. If you have floppy booted and you are still BSoD (blue screen or scream of death) your system may be long gone. You have a variant of the CIH virus that did it's job well and may have removed every piece of valid code on your computer.

Depending on the version of the OS, hardware and other variables, you may be able to reload the OS or at least the boot portion. That doesn't mean the MTA, FAT or other method to map the drive is still valid or the boot sector is even on the system. Furthermore, ensure you are totally disconnected from any valid system while attempting to recover. You do not want to damage other systems on your network.

I know this is not much help, but I feel what you have explained may be unredeemable at this point.


For more information on this topic, visit these other SearchSecurity resources:
News & Analysis: Chernobyl virus set to wake up
Definition: Chernobyl virus
Best Web Links: Malware


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts