CIH computer virus may hit on April 26

Variants of CIH, one of the most destructive computer viruses, may hit business and home PCs on April 26, computer security firms warned yesterday.

CIH virus, developed by a Taiwanese man, affected more than 300,000 computers in Korea last year, causing an estimated 30 billion won damage, according to Dr. Ahn's Anti-virus Laboratories.

The CIH virus - so called because the letters appear in the code - has three versions, 1.2, 1.3 and 1.4. The first two are programmed to strike on April 26 every year and the third is activated on the 26th of every month.

The virus sneaks into computers running on Windows operating system and stays dormant in a PC until the set date.

As soon as the PC's clock displays the date, the virus will set about attack on the hard disk and basic input and output system.

It erases all programs on the hard disk by writing rubbish inro their code. It also rewrites the BIOS - the basic programming setup which allows a PC to boot up and then recognize its various parts such as keyboard, mouse and screen - so that the machine cannot be rebooted.

"Restoring the damaged system could cost 220,000 won to 700,000 won," the company said. Free prevention programs are available from local anti-virus houses, such as Dr. Ahn's Anti-virus Laboratories (www.ahnlab.com), High Antivirus Research Inc. (www.hauri.co.kr) and Simantec (www.sarc.com).

For a temporary fix, Dr. Ahn's recommends changing computer clocks to other dates.

Updated: 04/14/2000 by Hwang Jang-jin Staff reporter

http://www.koreaherald.co.kr/news/2000/04/__10/20000414_1033.htm

-- Carl Jenkins (Somewherepress@aol.com), April 16, 2000