Spyware Database Uninstall W95/CIH Uninstall W95/CIH

W95/CIH Description and Removal Instructions


W95/CIH Description (Scan your PC for W95/CIH with SpyHunter)

W95/CIH, also known as Chernobyl, is a parasitic family of viruses. W95/CIH was first detected in June 1998 in Taiwan. W95/CIH contains a very dangerous payload, whose trigger date depends on the variant. On this date, the viruses attempt to overwrite the flash-BIOS. If the flash-BIOS is write-enabled (and this is the case in most modern computers with a flash-BIOS) this renders the machine unusable because it will no longer boot. The only way to infect a computer with W95/CIH is to execute an infected file on the computer. The infected file may come from a multitude of sources including floppy diskettes, downloads through an online service, network, etc. Once the infected file is executed, W95/CIH may activate.

IMPORTANT DISCLAIMER
 Please note: This website is NOT associated or affiliated in any way with W95/CIH or its creators. The content provided in this article should NOT be construed as an endorsement, a recommendation or an advertisement for W95/CIH. The goal of this article is to assist computer users on the detection and removal of W95/CIH. This article is provided on an "as is" basis and to be used for informational purposes only.

Why Should I Remove W95/CIH?

Note: Manual removal is a difficult process and it is not recommend unless you are an expert in this field. Therefore, your best defense is to download and install a reliable anti-spyware program to scan W95/CIH and other spyware on your machine. In order to detect W95/CIH in the easiest and fastest way possible, we advised trying the free SpyHunter scanner provided on this website. The free version of SpyHunter is only a detection utility.

However, if you wish to continue to the W95/CIH removal stage with SpyHunter, you must first purchase the full version of SpyHunter or you can manually remove W95/CIH by moving on to the "Remove W95/CIH Manually" section.

Online threats constantly change to avoid detection, and therefore SpyHunter comes equipped with a full technical support, as well as a one-on-one customer support service called Spyware HelpDesk which gives its support technicians the ability to create a custom automated fix tailored to your PC. If SpyHunter is unable to detect and remove W95/CIH, the Spyware Helpdesk will generate a custom fix, transmit it to your SpyHunter removal tool and completely remove W95/CIH from your PC.

  1. Download SpyHunter Scanner Download SpyHunter Scanner.

  2. Run a full system scan to detect W95/CIH files.

  3. Once you've detected W95/CIH on your PC, you will then need to purchase SpyHunter to start the removal process.

  4. Reboot your PC and rerun the scan for any remaining traces of W95/CIH.

** SpyHunter scanner version is ONLY for detection. To remove W95/CIH and other threats, you will need to purchase SpyHunter's removal tool.

Remove W95/CIH Manually

Tip: If you are not an expert in this field, we highly recommend you use SpyHunter to scan your PC for W95/CIH. You'll run the risk of damaging your computer if you make a mistake during the manual removal process.


To remove all W95/CIH files, you must kill all W95/CIH processes that are running in your computer's memory. To kill W95/CIH processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for W95/CIH, then right-click it and select "End Process" key.

You'll also need to remove W95/CIH registry keys. To remove W95/CIH registry keys, click on the Windows "Start" button and select "Run" to open Windows Registry Editor. A window will popup. Type "regedit" into the box, and click "OK". Search for the registry key "HKEY_LOCAL_MACHINE\Software\W95/CIH." Right-click it and select "Delete."

Finally, you'll need to manually delete other files to clean your PC of  W95/CIH. These W95/CIH can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, W95/CIH might create a file like
%PROGRAM_FILES%\W95/CIH\W95/CIH.exe. Locate and remove these files.

W95/CIH Advice

W95/CIH manual removal process can be difficult to do because you're required to access and edit sensitive files in your system registry.

Warning: If you try to remove W95/CIH files without being completely sure what you are doing, you run the risk of damaging or losing important data on your computer.

Tip: To avoid this risk, we highly recommend you use a good spyware cleaner/remover to automatically find and remove W95/CIH as well as spyware, adware, trojan and malware in your PC.

W95/CIH Automatic Detection

To automatically search for W95/CIH...
Download SpyHunter Scanner Download SpyHunter Scanner.

** SpyHunter scanner version is ONLY for detection. To remove W95/CIH and other threats, you will need to purchase SpyHunter's removal tool.

For more details on W95/CIH, please read our "W95/CIH Overview" below.

W95/CIH Overview

In the following sections, we investigate and explain the key malicious properties that are attributed to W95/CIH.

How W95/CIH infects your PC

W95/CIH may use one or more of these methods to infect your computer. W95/CIH is spyware that may take control of your entire system. W95/CIH may infect your computer...

  • Through unexpected email attachments. One of the most popular ways of becoming infected with spyware is by opening an attachment sent via e-mail. You should never open unexpected email attachments. Confirm with the sender first that they did in fact send the email.

  • Through browser security loopholes while you're surfing the Web. Some spyware can even bypass firewalls by disguising itself as part of legitimate software.

  • Through instant messenger programs. If you're not secured by a good firewall, spyware can attach itself when you're sharing files with your instant messenger.

  • W95/CIH recreates, repairs and updates itself. W95/CIH and other complex spyware applications may recreate, repair and update themselves to evade deletion. When W95/CIH alters, restores and updates its files, DLLs, registry keys and process, a scanner may only remove part of the program allowing the other remaining files to execute procedures to repair and update. In these cases, it can make the W95/CIH manual removal process very difficult.

W95/CIH Prevention Rules

Follow these W95/CIH prevention rules and protect your computer from W95/CIH and other spyware:

Rule #1: Ensure that your Windows Security is up-to-date.

Every week Microsoft provides their new updates that can always be downloaded manually from the Microsoft website. To get Microsoft Update, you should do the following steps:

  1. Go to IE > Tools > Windows Update > Product Updates,

  2. Select "ALL High-Priority Security Updates" from the list,

  3. Open IE and go to Internet Options > Security > Internet,

  4. Press "Default Level" and then OK,

  5. Press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software.

A good anti-spyware software that recognizes current W95/CIH as well as other forms of spyware can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect W95/CIH automatically.

Download SpyHunter Scanner Download SpyHunter Scanner.

** SpyHunter scanner version is ONLY for spyware detection. To remove W95/CIH and other online threats, you will need to purchase SpyHunter's removal tool.

Rule #3: Keep your anti-spyware definitions up-to-date.

New W95/CIH files can be created every day, thus it is very important to ensure that your anti-spyware program is up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button so you can get new spyware definitions immediately. Often, good anti-spyware software will open an update window reminding you that there are new updates available.

Rule #4: Install and keep your firewall turned on.

A firewall is vital for a complete protection of your PC. Ensure that your firewall is always turned on. A firewall can stop unwanted software like W95/CIH from hijacking your PC.

W95/CIH and other Spyware Related Info:

Wikipedia.org/Spyware - Wikipedia's definition of spyware.
StopBadware.org - A non-profit organization that aims to fight against badware.
Anti-Spyware Coalition - Is a group dedicated to building a consensus about definitions and best practices in the debate surrounding spyware and other potentially unwanted technologies.

Uninstall Spyware