filmov
tv
Viral Rewind: Virus.DOS.Hate

Показать описание
-----------------------------------------------------------
. So Viral Rewind had been delayed for a few weeks and this virus is the reason. Here we're looking at the DOS-based "Hate" virus, a typical memory-resident file-infector with a potentially disastrous payload depending on conditions.
When first run (provided the month is not May) Hate loads into memory and starts infecting any .COM or .EXE files when they are run. It is not a stealth virus so the infected file will show a size increase. It doesn't do much beyond that.
The payload: When the month is May (the day and year do not apply) and an infected file is run Hate prints out "Klaeren Hass, Hass!" which translated from German is "Clear Hate, Hate!". It also flashes all three keyboard LED indicators while the text is being output. The main part of this payload is the attempt to flash/corrupt the infected PC's CMOS memory and this can result in two possible consequences upon powering off/rebooting the machine:
It will result in the computer indicating a CMOS checksum error (indicating the CMOS has lost information it has on system hardware) and the system clock/date being invalid. This is simply corrected by setting all the correct values in the CMOS/BIOS setup menu. This is what the IBM PS/1 386sx system resulted with shown in the video.
The other more disastrous result is if your computer mainboard and components are susceptible, Hate will corrupt/erase the CMOS/BIOS and any other ICs that are prone to being flashed. This is what happened to my Packard Bell 486-based system that had been used in Viral Rewind segments prior and why these were delayed as shown toward the end of the video. This kind of result is very similar to that of the CIH aka "Chernobyl" virus that damages a system BIOS if it is susceptible.
-------------------------------------
. So Viral Rewind had been delayed for a few weeks and this virus is the reason. Here we're looking at the DOS-based "Hate" virus, a typical memory-resident file-infector with a potentially disastrous payload depending on conditions.
When first run (provided the month is not May) Hate loads into memory and starts infecting any .COM or .EXE files when they are run. It is not a stealth virus so the infected file will show a size increase. It doesn't do much beyond that.
The payload: When the month is May (the day and year do not apply) and an infected file is run Hate prints out "Klaeren Hass, Hass!" which translated from German is "Clear Hate, Hate!". It also flashes all three keyboard LED indicators while the text is being output. The main part of this payload is the attempt to flash/corrupt the infected PC's CMOS memory and this can result in two possible consequences upon powering off/rebooting the machine:
It will result in the computer indicating a CMOS checksum error (indicating the CMOS has lost information it has on system hardware) and the system clock/date being invalid. This is simply corrected by setting all the correct values in the CMOS/BIOS setup menu. This is what the IBM PS/1 386sx system resulted with shown in the video.
The other more disastrous result is if your computer mainboard and components are susceptible, Hate will corrupt/erase the CMOS/BIOS and any other ICs that are prone to being flashed. This is what happened to my Packard Bell 486-based system that had been used in Viral Rewind segments prior and why these were delayed as shown toward the end of the video. This kind of result is very similar to that of the CIH aka "Chernobyl" virus that damages a system BIOS if it is susceptible.
-------------------------------------
Комментарии