Site hosted by Angelfire.com: Build your free website today!



Win95.CIH.1019 Virus


You may have heard there is a "new" virus going around the SC community. This is the Win95.CIH virus. The virus that I have seen reported is the 1019 strain. (Win95.CIH.1019) While checking into this here's a few things i found. The virus installs itself into the Windows memory, hooks file access calls and infects EXE files that are opened. Depending on the system date (see below) the virus runs its trigger routine. The virus has bugs and in some cases halts the computer when an infected application is run. There are three virus versions known, which are very closely related and only differ in few parts of their code. They have different lengths, texts inside the virus code and trigger date:

Length Text Trigger Date

1003
1010
1019

CCIH 1.2 TTIT
CCIH 1.3 TTIT
CCIH 1.4 TATUNG

on April 26th
on April 26th
on 26th of any month


Detection and Disinfection tips can be found in the Win95.CIH FAQ Complete info on this virus can be found at http://www.avp.ch/avpve/newexe/win95/cih.stm

If you have an older scanner or have not updated your virus lists recently make sure you do NOT run a virus scan!! If you are infected, you will infect every exe file that you scan. Not good.

If you have an anti virus scanner like McAfee Virus Scanner or Secure Virus Scanner or Norton Utilities AND you update them often and use them regularly you probably don't have to worry. BUT if you think you may be infected, do NOT run them until you check their home pages and get complete instructions on how to clean your system. Also, you can download free trial versions of the scanners at any of the links above if you need one.


Here is some info from Blizz on it and how they say to take care of it if you have it.


We recently realized that this error is the result of a virus called Win95.CIH.1019 that we think was piggy-backed on an unauthorized StarCraft or Diablo utility. We don't know which one yet, but we're looking into it. It the meantime you can clean off the virus using the evaluation copy of AVP v 3.0 for DOS. You can get this form http://www.avp.ch . Uninstall the game, remove the virus and re-install. This should clear up the problem you are having.

Mick
Blizzard Entertainment Tech Support

Download it
Restart in msdos mode
run the avp.exe and set it to disinfect

This should fix you up. If you have any more questions contact Blizzard.



Back to the Tech Support Index


MAIN PAGE | GAME PLAY | SPECIES | TECH SUPPORT | DOWNLOADS | GIF WARS
CHEAT CODES | HOT KEYS | FEATURES | JOKES | LINKS | SCREENSHOTS


Email Tender Fury