Finding the destruction principle of CIH, I want to know the simple principle of CIH destruction har

Such an old virus, I don't know. Destroy the motherboard chip.

The BIOS is a ROM CIH that writes redundant data to the BIOS in a similar way to refreshing the BIOS, resulting in BIOS read errors.

CIH virus species:

Also known as PE CIH, etc., it is a file-type virus.

Hazards of CIH:

It's not as scary as it seems. Nowadays, PCs basically use two kinds of read-only memory to store BIOS data, one is to use traditional ROM or EPROM, and the other is E2PROM. The BIOS is "burned" (also known as "cured") into these memories by a special means and then installed in the PC.

When we power on the computer, the programs and data in the BIOS are first executed and loaded, so that our system can correctly recognize the various hardware installed in the machine and call the corresponding drivers, and then the hard disk starts to boot the operating system. When the CIH virus occurs, on the one hand, it completely destroys the data on the hard disk of the computer system, and on the other hand, it rewrites the BIOS of some computer motherboards. After the BIOS is rewritten, the system cannot boot, so the computer can only be sent back to the factory for repair and replacement of the BIOS chip.

Because the CIH virus destroys data and hardware irreversibly, once the CIH virus breaks out, users can only watch the computer worth 10,000 yuan and the important data accumulated for many years be destroyed. The CIH virus is now recognized as the first virus capable of destroying the hardware of a computer system, and it is also the most lethal and malignant virus. From a technical point of view, the CIH virus achieves a perfect integration with the operating system.

CIH's method of attack:

In general, the data in this memory is not easily overwritten by the user, but it is possible to overwrite the data in the E2PROM by applying special logic and voltage. Using the CPU logic of the PC and the internal voltage of the computer, the E2PROM can be easily rewritten, which is the principle of updating the BIOS through software, and it is also the basic method for CIH to destroy the BIOS. Rewriting the data in the E2PROM requires certain logical conditions, and different PC systems may have different requirements for this condition, so CIH will not destroy all motherboards that use E2PROM storage BIOS, and only a few 5V motherboards such as Gigabyte and MSI have been reported, which is not to say that the quality of these motherboards is not good, but its E2PROM logic coincides with CIH, or the compiler of CIH may want to purposefully destroy some brands of motherboards.

Therefore, to determine whether CIH is harmful to your motherboard, you should first determine whether your BIOS is only burned in the ROM EPROM, or if some of it uses E2PROM. It is important to note that while CIH does not destroy all BIOS, CIH destroying all data on the hard drive on the "black" 26th is far more serious than destroying the BIOS - which is inevitable for every user infected with the CIH virus.

The most bullish virus in history, directly rewriting the BIOS information, after poisoning, it is basically wasted, and the recovery can only try to brush the BIOS, and the chance of success is not great.

CIH virus is a virus that uses the latest technology and will.

format

The latest viruses on hard drives are usually transmitted by Internet people when they are surfing the Internet.

The latest variant is CIH

will be monthly. Onset on the 26th and will exhibit the most powerful destructive power-format

Hard drive. The CIH virus doesn't usually do anything destructive and doesn't display any images, it just takes up some of its memory. But some.

If the 32-bit program is infected, it will not work properly or even cause crashes. However, the CIH virus resides behind the main memory every time.

When executed, it will check if the date of the electricity is April 26th, and if so, it will reveal your computer iO parts: cf8, cfd, cfe modify you.

and destroy all the data in the magnetic area of your computer, even the data in the hard disk partition and boot area.

And let the computer crash. When you turn it back on, the screen will appear"disk

bootfailure,insert

system

diskandpress

enter"。If you boot the computer with the A slot and then execute the C: command, it will appear"invalid

drivespecification"。Even if there was ever a backup boot.

area, but the data in your disk disk has been completely destroyed, and it makes no sense to turn it on.

A virus that can destroy hardware, CIH is the abbreviation of the name of the author of this virus, the first letter of Chen Yinghao. But now the virus is basically not damaged, because basically all antivirus software can defend against this virus.

CIH virus is a file-type virus, and its aliases are, it mainly infects executable files under Windows 95 98 (PE format, Portable

executable

format), the current version does not infect DOS and Win formats, Windows

andos/2

windows

fileformat) and is not valid in winnt.

The point is that it doesn't work in today's operating systems anymore.

CIH virus is a file-type virus, CIH virus is overwritten when the hard disk data, hard disk master boot record, system boot sector, and file allocation table are overwritten, resulting in the loss of hard disk data, especially C drive data, and destroying the flash BIOS on some types of motherboards, resulting in computer unusability, is a vicious virus that destroys both software and hardware.

A Taiwanese editor named Chen Yinghao (CIH) may not remember the name correctly.

In addition to destroying the system and hard disk data, the uniqueness is that it can rewrite the BIOS, that is, damage the hardware, which is also the only virus that can destroy the hardware chip.