|
CIH, also known as Chernobyl or Spacefiller, is a Microsoft Windows 9x computer virus which first emerged in 1998. It is one of the most damaging viruses, overwriting critical information on infected system drives, and more importantly, in most cases destroying the system BIOS. The virus was created by Chen Ing-hau (陳盈豪, pinyin: ''Chén Yíngháo'') who was a student at Tatung University in Taiwan.〔ithome.com.tw. ( 從CIH「重裝駭客」變身「除錯超人」 ). 2006-08-25. 〕 60 million computers were believed to be infected by the virus internationally, resulting in an estimated $1 billion US dollars in commercial damages.〔 Chen claimed to have written the virus as a challenge against bold claims of antiviral efficiency by antivirus software developers.〔parenting.com.tw. (從駭電腦到愛旅行─昔日網路小子陳盈豪 ) 〕 Chen stated that after the virus was spread across Tatung University by classmates, he apologized to the school and made an antivirus program available for public download; the antivirus program was co-authored with Weng Shi-hao (翁世豪), a student at Tamkang University.〔 Prosecutors in Taiwan could not charge Chen at the time because no victims came forward with a lawsuit.〔cyy.moj.gov.tw. (打擊駭客，不再無法可施 )〕 These events led to new computer crime legislation in Taiwan.〔 The name "Chernobyl Virus" was coined some time after the virus was already well known as CIH, and refers to the complete coincidence of the payload trigger date in some variants of the virus (actually the virus creation date in 1998, to trigger exactly a year later) and the Chernobyl accident, which happened in the Ukrainian SSR on April 26, 1986. The name "Spacefiller" was introduced because most viruses write their code to the end of the infected file, however CIH looks for gaps in the existing program code where it writes its own code. This does not increase the file size and in that way helps the virus avoid detection. ==History== In December 31 1999, Yamaha shipped a Software update to their CD-R400 drives that was infected with the virus. In October 2000, a demo version of the first-person shooter game ''SiN'' was infected by one of its mirror sites.〔(US Report: Gamers believe Activision's 'SiN' carries CIH virus - ZDNet.co.uk )〕 In March 1999, several thousand IBM Aptivas shipped with the CIH virus,〔Weil, Nancy. "(Some Aptivas shipped with CIH virus )." ''CNN''. April 8, 1998. Retrieved on march 28, 1998.〕 just one month before the virus would trigger. CIH's dual payload was delivered for the first time on April 26, 1999, with most of the damage occurring in Asia. CIH filled the first 1024 KB of the host's boot drive with zeros and then attacked certain types of BIOS. Both of these payloads served to render the host computer inoperable, and for most ordinary users the virus essentially destroyed the PC. Technically, however, it was possible to replace the BIOS chip, and methods for recovering hard disk data emerged later. Today, CIH is not as widespread as it once was, due to awareness of the threat and the fact it only affects older Windows 9x (95, 98, Me) operating systems. The virus made another comeback in 2001 when a variant of the LoveLetter Worm in a VBS file that contained a dropper routine for the CIH virus was circulated around the internet, under the guise of a nude picture of Jennifer Lopez. A modified version of the virus called CIH.1106 was discovered in December 2002, but it is not considered a serious threat. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「CIH (computer virus)」の詳細全文を読む スポンサード リンク
|