Chernobyl Virus potential threat on xp?

[djfony]

does the chernobyl virus go dead in xp? I am running it now (thanks to this virus) and hopefully it wont explode on the 25th..


I got this virus from the hewlitt packard website and at first it spread like wildfire through a ton of exes. I ran the anti virus prog and I have been able to narrow it down to one folder containing 152 infected files...

Now this is the weird part

This folder does not exist... I turned on the "see invisible ****" feature and still nothing... its location is as follows:

c:/undo/

thats it.. thats the dir with all the infected files in it..

some of the files are:

backup.cab
addreg.exe
cdcopier.exe
dllhost.exe
fontview.exe

now... what the hell do I do now? times running short

 

[SavvyLady]

hello djfony........ Welcome to TSG..............I suggest you run this antivirus program on the net... it'll tell you what to do.

http://housecall.antivirus.com/housecall/start_corp.asp

Good Luck!!

Savvy

PS. You need to contact/e-mail HP & let them know as well.

 

[djfony]

Ive already ran that one before.. doesnt do anything to the files..
Im using norton 2002 to work with the virus.

All Im really concerned about is whether or not the virus works in XP

 

[SavvyLady]

Well I've asked for you some help....this one is over my head


Sorry I couldn't help

Savvy

 

[Max19]

Did you format your hard drive before installing Windows XP, or did you just do an upgrade?

 

[SavvyLady]

Max can handle this... its more than i have knowledge of....thanks Max


Savvy

 

[djfony]

I upgraded

 

[Rollin' Rog]

I would contact symantec about this. Even go for a phone contact if you can. According to the info on their CIH link, this should not affect Win NT and 2k systems. XP is is built more on that model.

But obviously you are getting infected.

Since CIH goes for the cmos/BIOS -- it should still be feared if it is active.

http://www.symantec.com/avcenter/venc/data/cih.html

If you can't get the question authoritatively resolved in the next day or so -- set your system date back to give you sufficient time.
-