7.787 bytes

Service Hints & Tips

Document ID: DETR-46GJBY

This document is provided to IBM and our Business Partners to help sell and/or service IBM products. It is not to be distributed beyond that audience or used for any other purpose.

Aptiva - 2158 ECA007; CIH Virus detected on Aptiva systems

Applicable to: United States

Record number: HXXXXX
Device: D/T2158 Service code: 33
ECA number: ECA007 Parts source: NONE
EC number: EC000000 Publish flag: R
Mandatory: N Hit count: UHC00000
Automatic shipment: N Success count: USC0000
Availability date: 99/03 Publication code: PC50
Plant of control: 23 Date created: O99/03/22
Tip key: Date last altered: A99/03/22
Owning B.U.: USA

Abstract:
ECA007, CIH Virus Detected on Aptiva 2158 Systems

Purpose:
The purpose of this ECA is to remove a potentially destructive virus that may have infected a limited number of IBM Aptiva 2158 Systems. The "CIH" virus (where CIH is a file extension or part of the filename such as W95.CIH or PE_CIH) infects Microsoft Windows 95 and Windows 98 executables and is triggered on the 26th of April, any year. The "CIH" extension is not visible by viewing individual files, rather the virus attaches itself to executables with the file size and file name remaining the same. The result is that the system will no longer be able to access the hardfile(s).

This is a Labor-Only ECA that applies to the Aptiva 2158 only.

Features:
Type, Machines Affected
Model, With and/or Feature/Device B/M to be Service System
Stage B/M Description Installed Hours Hours
2158 B/M0000000 Models 240, 301 and B/M0000000 00.8 00.2
520 ONLY

Physical check:
Systems that are potentially affected were manufactured between March 5, 1999 and
March 17, 1999. The date of manufacture can be determined by viewing the feature label attached to the rear of the system unit.

Systems that have been updated by an Authorized Dealer or Reseller can be identified by the presence of a Blue Dot or a Red Check Label near the feature label on the shipping carton.

Prerequisites:
NONE

Companion:
NONE

Concurrent:
NONE

Detail:
A limited number of IBM Aptiva 2158 Systems were manufactured and shipped with a potentially destructive virus called the "CIH" virus. This virus, when triggered can render the systems hardfiles useless. The CIH virus can be removed from the system by performing the following steps:

1. From a power-off state, turn the system on.
2. IMMEDIATELY insert the red Product Recovery & Diagnostics CD ROM into the CD/DVD drive, and close the drive door.
3. Power the system off.
4. Wait ten (10) seconds. Power the system on.
5. The IBM Product Recovery Program Main Menu will appear automatically.
6. From the Recovery Options, choose "Full Recovery". It should already be highlighted in white. Press enter to continue.
7. Each time a pop-up box appears, enter the letter "Y" when prompted, and press enter until you see the system copying multiple files.
8. Once all files have been loaded (approximately ten minutes) remove the red Product Recovery & Diagnostics CD ROM and power off the unit.
9. A notice will appear when action is completed, entitled "Recovery is Complete". You will be prompted to hit "ctrl+alt+delete" --- DO NOT COMPLETE THIS TASK. Just remove the red Product Recovery & Diagnostics CD ROM and close the CD/DVD ROM door.
10. Power the system off.
11. Repackage the system or return the system to the customer for use.

WARNING: Any ".exe" or executable files that are sent electronically as an attachment or removable rewritable media such as diskettes used in an infected system will likely contain the virus. Check all media with an anti-virus program capable of detecting the "CIH" virus.

Notes:
Warranty claims for ECA reimbursement should be submitted via
ECLAIM using Type Service 0E. Labor reimbursement is $20 per
unit.

Warranty claims must include:



IBM and TSS servicers should record actual time and
travel to: Service Code - 33
D/T2158, ECA 007
Other Office - 990

This ECA will expire on April 30, 2000.
Windows 95 and Windows 98 are trademarks of the Microsoft Corporation.

SAS KEYWORDS:
PSVP PSY2 D/T2158 APTIVA
PSY2ECA PSVPECA PSY2BRD PSVPBRD
PSVPPROG PSY2PROG PSY2PART PSVPPART
ECAVALID SERVICER ONLY

Search Keywords

Document Category

ECA

Date Created

30-03-99

Last Updated

30-03-99

Revision Date

Brand

IBM Aptiva

Product Family

Aptiva

Machine Type

2158

Model

240; 301; 520

TypeModel

Retain Tip (if applicable)

Reverse Doclinks
and Admin Purposes