Win95.CIH.corrupted, W95/CIH.remnants, W95.CIH.damaged
Win95/CIH.remnants , TR/FlashKiller.B , Win95.CIH.Rest.Gen
Category: Computer Virus
Active & Spreading
Asia, North and South America, and some parts of Europe and Australia
28 Jun 1998
The W95.CIH.corrupt program is a virus that infects 32-bit Windows 95 executable files. This virus modifies or corrupt the software that manages the data flow between system devices and overwrites a part of the BIOS program to keep the computer from starting up when the power is turned on.
W95.CIH.corrupt Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer virus removal tool to automatically clean W95.CIH.corrupt from your computer.
More details about W95.CIH.corrupt
W95.CIH.corrupt infects by first looking for empty, unused spaces in the file then breaks itself up into smaller pieces, and inserts its code in the unused spaces. It can overwrite critical data areas in the first 2,048 sectors of the hard disk. If this happens, a "non-system disk" is seen when the computer boots from the hard drive, or an "invalid media" message when trying to boot from a system floppy disk or from a Rescue disk. It overwrites the sectors until the system crashes. It may cause permanent damage to the computer once the Flash BIOS is attacked.
When a file is diagnosed infected by the W95.CIH.corrupt virus, the file usually can no longer be repaired. The only solution is to delete and replace the file with a backup from a clean copy. If the system is infected with W95.CIH.corrupt virus when an application is being installed or upgraded, the virus tends to interfere with the installation process. This leaves the application useless, waste, and unusable. And if an application is infected after it was installed or upgraded, the application will work normally, however, there may be noticeable delay in time of loading in memory to be executed.