CleanCIH v.1.6


Win95.CIH (also known as Chernobyl, CIH, Spacefiller, Win32.CIH) is a virus that infects 32-bit Windows 95, Windows 98 and Windows NT executables files having the .EXE extension. When an infected program is run in a Windows 95 or Windows 98 computer, it infects the computer and becomes memory resident. The infected program will not work properly on a Windows NT computer. Once the virus becomes memory resident, it infects all the 32-bit EXE files opened. So the virus spreads to all files executed and also copied. The size of the virus code is quite small and it is about 1000 bytes. The virus will not InCrease the size of the infected file. It uses an unique method to copy its code to the infected file. It fills up the unused space available in the 32-bit EXE file (PE format) with its code. If the virus can not find a single continuous large enough empty space to copy itself, it will Slice itself up to many pieces and place them in the smaller empty slots. This virus is also known as Win95.Spacefiller for this behavior. The virus alters the header entry point to the beginning of the virus code and builds the broken up parts to one piece of code when the EXE file is run. The virus code contains the text "CIH", so it gets this name.Win95.CIH virus has a dangerous payload that will trigger on the 26th of April or any month, depending upon the variant of the virus strain. This virus can damage the contents of the BIOS flash memory chip. Most of the new computers sold (80486 and later CPUs) have their BIOS programmed into the flash memory chips. Win95.CIH writes garbage to the flash memory chip if the chip is write-enabled. Many PC manufacturers leave the flash memory chip write-enabled. If this happens the computer will become unusable until the contents of the chip are Restored or the motherboard is replaced. After damaging the BIOS the virus also makes the data in all the hard disks unreadable.

Win95.CIH (also known as Chernobyl, CIH, ...

virus, memory, windows, flash, computer, files, bit, space, contents, resident, program

  • CleanCIH
  • 1.6
  • Proland Software
  • WinXP, Win2000, Win98
  • Shareware
  • 20 Kb
  • 270

Review CleanCIH

  • captcha

Other software of Proland Software
  • Protector Plus  v.8.0.E11Protector Plus 2008 for Windows Desktop supports Windows XP, 2000, Me and 98 platforms. This product provides 100% protection against viruses, trojans, worms, backdoors, spyware, adware, exploits, password stealers, hack tools, rootkits and other ...

New Antivirus software
  • Dr.Web Security Space  v. anti-virus security solution for your Windows PC. Real time protection. Installation and operation in an infected system and exceptional resistance to viruses. Efficient detection and neutralization of all types of threats.
  • Dr.Web for Android  v.12.6.4Comprehensive protection for mobile devices from all types of malicious software used by fraudsters to cmiit cybercrimes. Protection components: anti-virus, anti-spam, anti-theft, firewall, URL filter, Security Auditor ...
  • Dr.Web Katana  v. KATANA - Kills Active Threats And New Attacks. A non-signature anti-virus. Combats threats that are brand-new and unknown to your anti-virus: encryption ransomware, blockers, and web injectors. Does not conflict with third-party anti-viruses.
  • Dr.Web CureIt  v.12.5.202005110Dr.Web CureIt is an indispensable tool for curing computers running MS Windows 8/7/Vista/XP/Server 2003/2008/2012 (32-/64-bit systems). Dr.Web CureIt detects and neutralizes viruses, rootkits, Trojan horses, spyware, and other malicious objects ...
  • INNOBATE AntiVirus Basic  v.1.0Realtime On-Access Anti Virus shield against Malware.
  • KL Anti-FunLove  v.3.1.3You can disinfect your computer with the help of the utility KL Anti-FunLove ...