W95/CIH-1049 - Malware

Vea también

Descripción completa

Alias:	Bloodhound.W32.EP, W32/Elkern.C, Win95.CIH.1049, W95/CIH
Type:	Worm
Size:	1049 Bytes
Origin:
Date:	00-00-0000
Damage:	Deletes files and provokes possible damage to CMOS
VDF Version:
Danger:	High
Distribution:	Low

Technical DetailsW95/CIH-1049 is a 32-bit Window95/98/ME virus which infects executable files. It works on Windows 95/98 or ME, but not on Windows NT or 2000. Among others, the virus also infects antivirus programs. The virus does not function on DOS, Windows 3.1 or Macintosh computers.
When the virus becomes memory resident, it also infects other files which it has access to. The infected files have the same size as the original ones.

The payload of W95/CIH-1049 starts on August, the 2nd.: the first routine overwrites the harddisk with arbitrary data. The overwriting does not stop until the system is destroyed. The second routine attacks Flash BIOS and tries to destroy the data saved there.

Para una breve descripción vea el resumen aquí.

Descripción insertada por Crony Walker el Tue, 15 Jun 2004 14:00 (GMT+1)

» About Malware
» About Phishing
» Virus "In the Wild"

« volver