Trying to sort through a heap of floppy images recently, I found many of them to contain a suspicious ‘IHC’ signature in their boot sector in the location where an OEM identifier (such as ‘IBM 3.3’ or ‘MSDOS5.0’ would normally be. I first suspected a virus, but it turned out to be something worse — a testament to the ubiquity of Windows 9x and the idiocy of its developers.
The ‘IHC’ signature is most likely the first three letters of ‘CHICAGO’ (codename of Windows 95) in reverse order. Windows 9x by default rewrites the OEM identifier in the boot sector of every floppy disk that it accesses, even if the access is something as simple as listing directory contents. Continue reading
