Talk:CIH (computer virus)

It is not necessary to use professional data-recovery services to recover from the CIH virus; this page < http://www.grc.com/cih.htm > has a free recovery utility written by Steve Gibson.

If someone who is more familiar with wikipedia formatting standards and writing style could add this information? >.>

explanation on why file size does not grow

Okay, I don't know everything, but I have done low level programming and have a good understanding of how viruses work, and I have no idea what this page means when it talks about file sizes that don't increase because the virus uses "methods of jumping from processor ring 3 to 0" .. processor ring???

Here's an explanation I found that actually makes sense. Someone feel free to add this in, though not in these exact words unless you enjoy plagiarism.

Files infected by CIH may have the same size as the original files because of CIH's unique mode of infection. The virus will search for empty, unused spaces in the file. Next it will break itself up into smaller pieces and inserts them in these unused spaces.

I'm sure a portion of the virus does become memory resident.. it no doubt has its own ISR .. it no doubt hooks a system call or two, but I have no idea what a processor ring is.

About the "processor ring" terminology, I believe the writer was referring to privilege rings, see this page: http://en.wikipedia.org/wiki/Ring_(computer_security)155.92.110.93 (talk) 00:24, 24 March 2009 (UTC)

Contradiction

Is this line not a contradiction?

"By April 26, 2000, much of the damage was happening in Asia, but the virus was not as widespread there."

Also, this article seems to claim the virus was a big disaster and wide spread, but several other sources i have viewed say the virus was mostly contained because it was spotted so early. I don't know which view is correct?

81.110.10.170 15:09, 5 November 2005 (UTC) Oliver Philpott

Effects Windows XP

I have windows XP, and my computer was defineltly infected with the CIH virus, affecting my BIOS.

• I need a documented media source stating this. Otherwise we cannot say this. WhisperToMe (talk) 04:14, 4 June 2008 (UTC)

Under "History"

"It was honar who droped CIH v1.2 into the system as part of its payload." Can anybody tell me what, exactly, that is supposed to say? Ahanix1989 21:15, 1 December 2006 (UTC) Mellisa was a virus, also??

Merger proposal

I propose to merge the virus author's bio into this article. WP:1E clearly applies here. I'm one of the cited sources, so my beliefs in NPOV compel me to propose first rather than to be bold. Rob Rosenberger (talk) 03:19, 20 June 2009 (UTC)

Anjulie Worm?

I have never even heard of the Anjulie Worm. Can someone make a article about it? If no one does, I eill remove the part about it. --Fivexthethird (talk) 04:15, 30 August 2009 (UTC)

File:CIH.png Nominated for speedy Deletion

An image used in this article, File:CIH.png, has been nominated for speedy deletion at Wikimedia Commons for the following reason: Copyright violations What should I do? Don't panic; deletions can take a little longer at Commons than they do on Wikipedia. This gives you an opportunity to contest the deletion (although please review Commons guidelines before doing so). The best way to contest this form of deletion is by posting on the image talk page. If the image is non-free then you may need to upload it to Wikipedia (Commons does not allow fair use) If the image isn't freely licensed and there is no fair use rationale then it cannot be uploaded or used. If the image has already been deleted you may want to try Commons Undeletion Request This notification is provided by a Bot --CommonsNotificationBot (talk) 19:31, 31 August 2011 (UTC)

External links modified

Hello fellow Wikipedians,

I have just added archive links to one external link on CIH (computer virus). Please take a moment to review my edit. If necessary, add {{cbignore}} after the link to keep me from modifying it. Alternatively, you can add {{nobots|deny=InternetArchiveBot}} to keep me off the page altogether. I made the following changes:

• Added archive http://web.archive.org/web/20160105200923/https://www.f-secure.com/cih/ to http://www.f-secure.com/cih/#database

When you have finished reviewing my changes, please set the checked parameter below to true or failed to let others know (documentation at {{Sourcecheck}}).

This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}} (last update: 18 January 2022).

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—^{cyberbot II}_{Talk to my owner:Online} 06:12, 28 February 2016 (UTC)

external link

Is it OK to add to the article a link to clip on YouTube that shows how the CIH affects both Windows and the BIOS?

--37.30.17.85 (talk) 13:26, 25 March 2020 (UTC)

Infobox Image?

In the infobox at the head of the article, there was a picture and caption referring to an artist in Ukraine. It's fine that the artist made a digital representation of his vision of the virus, but it doesn't belong at the head of a technical article. I replaced it with an image showing an A/V intercept message (apparently taken off an old Win95 system). Wikipedia should not be used for promotion, of an artist or anyone/anything else. — UncleBubba ^{( T @ C )} 15:24, 8 August 2020 (UTC)

• Wikipedia can be used to provide information that is relevant to the topic and backed by a story. Even if you don’t put at the head of the article, then you need to put the image in the section, and not delete it. Therefore, since you deleted the image, now put it in the appropriate section yourself. Respect someone else's time at least. And you don't need to look everywhere for the deception, there are people who see the world through the prism of culture. Therefore, where the culture is appropriate, I will always introduce it. And I advise you to also go to museums and start studying art. This will give your life more sense. --Art of Odessa (talk) 13:37, 11 August 2020 (UTC)

Art of Odessa was a sockpuppet, so this discussion seems to be done.ThatMontrealIP (talk) 18:48, 13 August 2020 (UTC)

Yep. That was kinda predictable. Coming around full-circle on this, a couple of people questioned (in the Computer virus article) why you would want a mention of interpretive art in a technical article like this, and I agree. I'm removing the "Facts" section. A more appropriate place for it would be a section on "Visualizing Malware" (or something similar) in a WP page on Computer Art. — UncleBubba ^{( T @ C )} 20:45, 13 August 2020 (UTC)