Win95.CIH.1049

( N/A )

SYMPTOMS:

None.

TECHNICAL DESCRIPTION:

This is one of the versions of Win95.CIH which was widely spread few years ago and even today some computers are infected.

This virus works only under Windows 95/98/ME. The main difference from the original version is the payload date: 2 August (instead of 26 April). At that date the virus destroys the Flash BIOS and an important part of the hard disk, leading to a very hard (or even impossible) data recovery.

Removal instructions:

1. If you don't have BitDefender installed click here to download an evaluation version;


2. Make sure that you have the latest updates using BitDefender Live!;


3. Perform a full scan of your system (selecting, from the Action tab, the option Prompt user for action). Choose to delete all the files infected with Win95.Cih or its variants.

ANALYZED BY:

Costin Ionescu BitDefender Virus Researcher