CIH对硬盘破坏之完全剖析 IOS_SendCommand是Win95的一个非常底层的VXD调用，通常是用作对IO设备的低层操作，如:读，写，加锁，格式化等等。一般情况下只能在Ring 0和虚拟机中使用，在普通程序中使用会有不可预料的后果！该VXD调用的功能很多，也很繁杂。参数数量很少，只有BCB或IOR和BDD或DCB的地址。但这几个数据结构却包含了大量的信息，结构也相当的复杂。CIH病毒只用到了IOR结构，它包含了近二十个-The curse of CIH destroying harddisk,IOS_SendCommand is a very low call in Win95,commonly,it s used for IO low operation,e.g,read,write,lock,format.generally you can only use it in Ring 0 or virtual machine,using it in normal programme should be herrible.this VXD call have many function,also complex.it has just a few parameter,just the address of BCB,IOR,BDD or DCB.but these struct contain many information,the struct itself also very complex.CIH just use the IOR struct,it contains nearly 20.