W32/Kriz, which works under Windows 95/98 and Windows NT, infects PE (Portable Executable) files with .EXE or .SCR extensions. It also infects KERNEL32.DLL.
W32/Kriz, which works under Windows 95/98 and Windows NT, infects PE (Portable Executable) files with .EXE or .SCR extensions. It also infects KERNEL32.DLL.
W32/Kriz has a particularly destructive payload. On December 25th it will erase the CMOS setup, attempt to corrupt the system BIOS (in a similar way to W95/CIH-10xx) and attempt to overwrite all files on all local hard disks and network drives with garbage.
If the system BIOS corruption is successful, you will no longer be able to use your computer and the BIOS chip may need to be replaced.
There are two known variants of this virus, but only one of these is known to be in the wild.