Path: utzoo!attcan!uunet!cs.utexas.edu!usc!sdd.hp.com!wuarchive!udel!rochester!uhura.cc.rochester.edu!ub!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw From: davidsen@crdos1.crd.ge.COM (Wm E Davidsen Jr) Newsgroups: comp.virus Subject: Re: New Virus? (The Invader?) (PC) Message-ID: <0003.9012122103.AA25390@ubu.cert.sei.cmu.edu> Date: 11 Dec 90 15:34:46 GMT Sender: Virus Discussion List Lines: 20 Approved: krvw@sei.cmu.edu PSYMCCAB@VM.UoGuelph.CA (Bob McCabe) writes: | According to one distributor that got hit, the only way to remove the | virus is to disconect the AT board from the battery backup and to wipe the | BIOS on the hard disk controler. This may be a little extreme, but I have | yet to see an infected machine. This is unlikely. Any decent BIOS will have a way to get into the CMOS config at cold boot time. The parameters can then be set well enough to boot from your recovery floppy and restore the CMOS you saved when you made the disk, right before you write protected it. A number of programs to save and restore CMOS are on archives and have been posted to c.b.i.p as well. If you have a NEAT chipset you should back up the settings of that with setneat. - -- bill davidsen (davidsen@crdos1.crd.GE.COM -or- uunet!crdgw1!crdos1!davidsen) VMS is a text-only adventure game. If you win you can use unix.