Chapter 561 A Madman's Masterpiece
Han Chu led people there to restore the virus, and then simulated it on a test machine. He just adjusted the virus operation time. After five minutes, the hard drive kept spinning and all the data was destroyed. Hard disk partition information is also lost.
A technician next to Han Chu explained to Fan Wubing, "After this virus attacks, the only solution is to repartition the hard drive. In addition, when the virus attacks, it may also destroy the voltage of certain types of motherboards and rewrite s of read-only memory, the damaged motherboard can only be sent back to the original factory for repair and re-burned into s. This is also the only virus that we have discovered so far that can damage the hardware, which is of great significance!"
Fan Wubing nodded, and then asked, "This is indeed a major discovery. Have you found a way to deal with it?"
The staff immediately nodded and replied, "In this version of the virus, the information identifying the version number is in plain text, so you can identify whether you are infected by the virus by searching for the string in the executable file. The search characteristic string is netbsp ;v Or if you want to search for a more complete characteristic string, try and remember not to search netbsp directly; because this also exists in many normal programs and can easily lead to misjudgment. "
Another staff member reminded, "The specific search method is to first open the resource manager, select the menu function tool to search for files or folders, enter the characteristic string you want to find in the pop-up window input, and finally click the search key. You can start the search. If a large number of executable files matching the search characteristics are displayed during the search, it means that your computer has been infected with this virus."
Han Chu explained, “Actually, there is a fatal flaw in the above method, that is, if the user has just been infected with the virus, such a large-scale search process will actually expand the infection area of the virus. . The best way is to use regular anti-virus software or targeted killing tools.”
Fan Wubing nodded, and then asked, "How did this thing appear?"
It stands to reason that the H-virus outbreak will occur on April 26 next year. How come it was discovered by Han Chu and others at this time? It seems that his rebirth has indeed brought about huge changes in many things. At least the emergence of the h virus will avoid the large number of computer paralysis caused by it next year.
"According to our analysis, its carrier is a tool called Q Chinese chat module, and it uses popular pirated CD games such as Tomb Raider or s95/98 as a medium. It is reprinted by various Internet websites, making it spread rapidly. At present, the main means of dissemination are through media such as email and email, and its existence is also found on some CDs, "Han Chu said, "But fortunately, it will be released on April 26 next year. , so far no harm has been caused.”
"Has the new virus been named?" Fan Wubing asked casually.
"We are all named after signatures,
It's called the H virus. "A staff member replied.
Fan Wubing touched his nose unnaturally, thinking that the naming method was exactly the same as before.
From the current analysis, the s95/98 operating system does not seem to have any impact on the s operating system. This may be because it uses the virtual device driver technology under s. Therefore, for users who only use s, this virus does not seem to have any impact, but if you are s95/98 users, you should pay special attention. It is precisely because h uniquely uses Vxd technology that the virus spreads in the s environment. Its real-time and concealment are particularly strong. It is difficult to detect the spread of this virus in the system using general anti-virus software.
When the virus operates, on the one hand it completely destroys the data on the computer system's hard disk, and on the other hand it rewrites the S on some computer motherboards. After s was rewritten, the system could not start, so the computer had to be sent back to the manufacturer for repair and the s chip was replaced.
Since the destructive effect of h-virus on data and hardware is irreversible, once the h-virus explodes, users can only watch as computers worth tens of thousands of yuan and important data accumulated for many years are destroyed. It has now been established that the h virus is a virus that can destroy computer system hardware and is also the most lethal malignant virus.
From a technical point of view, h-virus achieves perfect integration with the operating system. The virus is compiled using the core Vxd technology of s95/98 and is considered to be firmly connected to the bottom layer of the operating system, so the h virus will neither spread to the s operating system nor the snT operating system.
Han Chu explained to Fan Wubing, "The reason why we attach great importance to this is not only because of its destructiveness and the fact that it is often a virus that can destroy hardware, but because the technical characteristics of the h virus allow us to use traditional Anti-virus technology presents a huge challenge in preventing and treating computer viruses. This is because the traditional anti-virus tools we use are basically pure s or emulation s applications that work under s95, and they cannot penetrate deeply into the s95/98 operating system. The bottom layer of the computer is used to completely eliminate the h virus. On the other hand, because it can be closely integrated with the bottom layer of the operating system, the h virus spreads more quickly and covertly. The best way to prevent viruses like h that can be closely integrated with the operating system is. Use anti-virus software that natively integrates with various operating systems.”
h virus usually does not do any destructive actions, nor does it display any screen, it just takes up part of the memory. However, after some programs are infected, they will operate abnormally and even cause a crash. However, after the h virus resides in the main memory, it will check the date of the computer every time it is executed. If it meets the requirements, it will destroy all the data on the hard disk of the user's computer, even the data in the hard disk data area and boot area. None of them are here anymore.
When the user restarts the computer, a message indicating that the hard drive failed to boot will appear on the screen. Please clear the system disk and hit Enter. Even if you have backed up the boot area data, the data in your disk has been completely destroyed. Can you boot the computer? It makes sense.
Mentioning the H-virus that paralyzed 60 million computers around the world, Fan Wubing naturally thought of the author who created it, Taiwanese Chen Yinghao.
Chen Yinghao has been obsessed with computers since his freshman year in college. He goes online every day and downloads the most popular software and games, so he often encounters computer viruses. In order to solve the problem of repeated computer poisoning, he read newspapers and bought a lot of anti-virus software with lavish advertisements, but often it turned out to be of no use, so he felt that he had been deceived.
The h virus was designed entirely by him, in order to make a fool of a company that boasted "100% anti-virus software" in its advertisements.
Chen Yinghao has a history of epilepsy. Although he usually has an easy-going temper, he becomes very stubborn when it comes to computers. According to his college classmates, he usually gets along very happily with Chen Yinghao, but if anyone mentions computers, he will show a very aggressive look. He especially couldn't stand others claiming to be good at computers. In the past, students from the computer department of Datong Institute of Technology often liked to compete in programming to see who could program the program with the shortest number of lines and the most complex meaning. But this kind of competition was boring in Chen Yinghao's eyes, and he didn't even bother to discuss it with them. In order to show his own strength, he deliberately wrote a difficult program with only three lines of content. As a result, the computer majors were stunned.
When Chen Yinghao was serving in the army, he once boasted to the military that he could design a program that would paralyze military computers. Taiwan's Military Intelligence Agency is very interested in this and is ready to take him under its wing as an expert in electronic warfare. However, after they investigated Chen Yinghao's family history, they found that his mental state was unstable and he had a family history of mental illness. Therefore, Taiwan's Military Intelligence Bureau not only failed to recruit him, but also asked him to retire immediately.
"Have we issued corresponding anti-virus software? And post-disaster recovery procedures?" Fan Wubing shook his head and asked Han Chu.
"I'm afraid it won't be easy to recover after a disaster, but the software to find or prevent it already exists. Considering the harmfulness of the virus, we plan to officially release a special killing tool for this virus and release it to users for free." Han Chu told Fan Wu Bian said.
For a long time, the anti-virus department of S Club has often released some special killing tools to the public to solve some virus problems that often trouble everyone, and the results are very good. Therefore, Han Chu believes that this time a virus with such great impact and destructive power has appeared. Viruses naturally need to be predicted to users in advance.
However, Fan Wubing didn't think so. He shook his head and said, "No, this matter needs to be discussed in the long term. This news cannot be announced to the outside world for the time being. I have important arrangements to consider."
The h virus is raging mainly abroad. One reason is that the popularity of the Internet in foreign countries is much higher than that in China. The other reason is that the degree of openness of foreign networks is also relatively high, and users are more likely to be infected with viruses through the Internet. However, in China Generally, they are spread through floppy disks or CDs. As for some spread through the Internet, the overall number is not large.
Fan Wubing remembered very clearly that the number of computers affected in China was very small, but many overseas. Since the impact of this virus had a huge impact overseas, there was no reason for him to reveal this fact now, and then Let foreigners also enjoy their achievements?
Of course, Fan Wubing also asked Han Chu to integrate the H-virus killing tool into the new version of Pili Beibei anti-virus software and upgrade it to his users for free.
"We only need to be responsible to our users, and we cannot take the significance of this virus too seriously and treat it as a normal virus." Fan Wubing said to Han Chu, "Otherwise, once everyone notices this If there is a problem, they will blame us for making a fuss and deliberately creating tension.”
"Isn't this a bit too kind?" Han Chu disagreed with Fan Wubing's opinion.
Fan Wubing said to Han Chu very seriously, "From a purely business perspective, it is understandable for us to do this. At least we are trying hard to prevent domestic users from being affected. This work is free. For overseas markets, they If you don’t buy our anti-virus software, do you care whether they live or die?”
If the h-virus is released as scheduled in April next year, and many anti-virus companies have no solution for a while, the situation here is rock solid, and the popularity of S Club's anti-virus software will suddenly increase. It will become well-known to the world. It will play a huge role in further expanding the reputation of the company's anti-virus division and expanding overseas markets. This business opportunity cannot help but make Fan Wubing feel excited.
Sometimes, you have to be evil when you should be evil, and be cruel when you should be cruel, otherwise you will never be able to achieve great things!
All in all, this opportunity is a once-in-a-century opportunity. Fan Wubing had never thought of such a thing before. If Han Chu's anti-virus division had not discovered the whereabouts of h and analyzed the harm it caused, And if Han Chu took this virus that can damage hardware as a credit to himself, he would not have thought of using this incident to further expand the popularity of his anti-virus software.
Everything depends on an opportunity. Now that the opportunity has come to you, you need to seize it, operate it well, and achieve your goals, so that the company's anti-virus software can enter the world market in one fell swoop.
Fan Wubing couldn't let go of this opportunity, so he directly rejected Han Chu's opinion on announcing the characteristics of the H-virus and the removal tools to the public, and decided to hide the matter and use it as his trump card.
"Although this is a bit unkind, we must try our best to prevent and control domestic problems. I will also communicate with the Ministry of Security on this matter and promote our anti-virus software in domestic office computers to achieve prevention and control." The harm caused by the spread of the virus." Fan Wubing explained to Han Chu, "The Ministry of Security has a good relationship with me. This can be done well, and it is also good for national security, at least. You can start thinking in advance about how to deal with and prevent similar situations once they occur. "
"Okay, I'll listen to you." After thinking for a while, Han Chu agreed, although he was a little reluctant.