Spyware



August 31, 2007

W95CIH

Filed under: Spyware News — Spyware Parasites: Terms and Definitions @ 9:00 am
W95/CIH, also known as Chernobyl, is a parasitic family of viruses. W95/CIH was first detected in June 1998 in Taiwan. W95/CIH contains a very dangerous payload, whose trigger date depends on the variant. On this date, the viruses attempt to overwrite the flash-BIOS. If the flash-BIOS is write-enabled (and this is the case in most modern computers with a flash-BIOS) this renders the machine unusable because it will no longer boot. The only way to infect a computer with W95/CIH is to execute an infected file on the computer. The infected file may come from a multitude of sources including floppy diskettes, downloads through an online service, network, etc. Once the infected file is executed, W95/CIH may activate.

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Powered by WordPress