Threat Encyclopedia
W95/CIH.1003
Analysis
- Viral body is 1,003 bytes and is injected into available
and writable empty spaces within the 32bit host, also
known as cavities
- Technique of virus when loading into memory make
it a Windows 95/98/Me spreading threat only, although
other 32bit systems may host an infected file without
incident
- Some files may become corrupted after infection