CIH Virus Information
Name: W95/1019 CIH Virus
Aliases: PE-CIH 1.4, Chernobyl
Type: Remote access trojan
Description:
Size: 1019 bytes Frequency in-the-wild: 22
Characteristics:
- Infects EXE files
- Memory resident
- Contains clear text string or message
- Has triggered warhead / payload that causes damage
Information:
- Text string or message:"CIH v1.2 TTIT"
- Warhead or payload: Overwrited hard disk and attempts to overwrite Flash BIOS.
- Triggers on the 26th of any month.
- Notes: Infects Win32 program files.
Behavior
CIH is a computer virus found in-the-wild since June 1998. W95/CIH.1019 [alias CIH 1.2] is a common variant of the CIH virus that is scheduled to trigger on April 26. It affects Windows 95 and Windows computer systems. It can overwrite or delete the hard drive and flash BIOS in an infected computer.
Command AntiVirus™ detects and disinfects CIH and its variants, including W95/CIH.1019.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Home � Purchase Center � Virus Center � Support Center
|
