Win95.CIH - variants with payload 26 April
Security Information Week 3, 1999
In Norway, Norman's largest market for Norman Virus Control, the extremely dangerous data virus Win95.CIH has for the latest months been the fastest propagating virus.
Win95.CIH has the ability to overwrite the hard disk with garbage as well as overwrite the Flash BIOS on some some PCs. If the Flash BIOS is overwritten it may even be impossible to start the PC from a boot diskette.
To know more about the virus see description on Norman's virus description page.
Two of the Win95.CIH variants are activated April 26. This means that the virus could have been spread in an organization for several months unnoticed unless sufficient virus scanning has been performed.
Norman would like to stress the need to run the latest version of virus control programs as well as updating the virus definition files on a regular basis, ensuring the best virus protection.
NVC version 4.60 or later detects and removes the Win95.CIH virus.
Per Olav Førland
