Need help? Ask the community or hire an expert.
Go to Avira Answers
Alias:Bloodhound.W32.EP, W32/Elkern.C, Win95.CIH.1049, W95/CIH
Size:1049 Bytes 
Damage:Deletes files and provokes possible damage to CMOS 
VDF Version:  

Technical DetailsW95/CIH-1049 is a 32-bit Window95/98/ME virus which infects executable files. It works on Windows 95/98 or ME, but not on Windows NT or 2000. Among others, the virus also infects antivirus programs. The virus does not function on DOS, Windows 3.1 or Macintosh computers.
When the virus becomes memory resident, it also infects other files which it has access to. The infected files have the same size as the original ones.

The payload of W95/CIH-1049 starts on August, the 2nd.: the first routine overwrites the harddisk with arbitrary data. The overwriting does not stop until the system is destroyed. The second routine attacks Flash BIOS and tries to destroy the data saved there.
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .