|
7.683 bytes |
Service Hints & Tips |
Document ID: DETR-46GJ4T |
|
This document is provided to IBM and our Business Partners to help sell and/or service IBM products. It is not to be distributed beyond that audience or used for any other purpose. |
Aptiva - 2163 ECA008; CIH Virus detected on Aptiva systems
Applicable to: United States
Record number: HXXXXX
Device: D/T2163 Service code: 33
ECA number: ECA008 Parts source: NONE
EC number: EC000000 Publish flag: R
Mandatory: N Hit count: UHC00000
Automatic shipment: N Success count: USC0000
Availability date: 99/03 Publication code: PC50
Plant of control: 23 Date created: O99/03/22
Tip key: Date last altered: A99/03/22
Owning B.U.: USA
Abstract: ECA008, CIH Virus Detected on Aptiva 2163 Systems
Purpose:
The purpose of this ECA is to remove a potentially destructive virus that may have
infected a limited number of IBM Aptiva 2163 Systems. The "CIH" virus (where CIH is a file extension or part of the filename such as W95.CIH or PE_CIH) infects Microsoft Windows 95 and Windows 98 executables and is triggered on the 26th of April, any year. The "CIH" extension is not visible by viewing individual files, rather the virus attaches itself to executables with the file size and file name remaining the same. The result is that the system will no longer be able to access the hardfile(s).
This is a Labor-Only ECA that applies to the Aptiva 2163 only.
Features:
Type, Machines Affected
Model, With and/or Feature/Device B/M to be Service System
Stage B/M Description Installed Hours Hours
2163 B/M0000000 Model 580 ONLY B/M0000000 00.8 00.2
Physical check:
Systems that are potentially affected were manufactured between March 5, 1999 and March 17, 1999. The date of manufacture can be determined by viewing the feature label attached to the rear of the system unit.
Systems that have been updated by an Authorized Dealer or Reseller can be identified by the presence of a Blue Dot or a Red Check Label near the feature label on the shipping carton.
Prerequisites:
NONE
Companion:
NONE
Concurrent:
NONE
Detail:
A limited number of IBM Aptiva 2163 Systems were manufactured and shipped with a potentially destructive virus called the "CIH" virus. This virus, when triggered can render the systems hardfiles useless. The CIH virus can be removed from the system by performing the following steps:
1. From a power-off state, turn the system on.
2. IMMEDIATELY insert the red Product Recovery & Diagnostics CD ROM into the CD/DVD drive, and close the drive door.
3. Power the system off.
4. Wait ten (10) seconds. Power the system on.
5. The IBM Product Recovery Program Main Menu will appear automatically.
6. From the Recovery Options, choose "Full Recovery". It should already be highlighted in white. Press enter to continue.
7. Each time a pop-up box appears, enter the letter "Y" when prompted, and press enter until you see the system copying multiple files.
8. Once all files have been loaded (approximately ten minutes) remove the red Product Recovery & Diagnostics CD ROM and power off the unit.
9. A notice will appear when action is completed, entitled "Recovery is Complete". You will be prompted to press "ctrl+alt+delete" --- DO NOT COMPLETE THIS TASK. Just remove the red Product Recovery & Diagnostics CD ROM and close the CD/DVD ROM door.
10.Power the system off.
11.Repackage the system or return the system to the customer for use.
WARNING: Any ".exe" or executable files that are sent electronically as an attachment or removable rewritable media such as diskettes used in an infected system will likely contain the virus. Check all media with an anti-virus program capable of detecting the "CIH" virus.
Notes:
Warranty claims for ECA reimbursement should be submitted via ECLAIM using Type Service 0E. Labor reimbursement is $20 per unit.
Warranty claims must include:
This ECA will expire on April 30, 2000.
Windows95 and Windows98 are trademarks of the Microsoft Corporation.
SAS KEYWORDS:
PSVP PSY2 D/T2163 APTIVA
PSY2ECA PSVPECA PSY2BRD PSVPBRD
PSVPPROG PSY2PROG PSY2PART PSVPPART
ECAVALID SERVICER ONLY
|
Search Keywords |
| |
|
Document Category |
ECA | |
|
Date Created |
30-03-99 | |
|
Last Updated |
30-03-99 | |
|
Revision Date |
| |
|
Brand |
IBM Aptiva | |
|
Product Family |
Aptiva | |
|
Machine Type |
2163 | |
|
Model |
580 | |
|
TypeModel |
| |
|
Retain Tip (if applicable) |
| |
|
Reverse Doclinks |