W95/CIH.1003

description-logoAnalysis

  • Viral body is 1,003 bytes and is injected into available and writable empty spaces within the 32bit host, also known as cavities
  • Technique of virus when loading into memory make it a Windows 95/98/Me spreading threat only, although other 32bit systems may host an infected file without incident
  • Some files may become corrupted after infection

Telemetry logoTelemetry