Remove Win.CIH

[Winos2Mac]

Ok I reformated my friends computer but I used one of my old boot disks, and it was infected with the CIH virus.

I dont have any Anti-Virus software and I dont want to reformat and install everything again.

I have done this before but i dont remember as it was a while ago.

Can anyone tell me how to remove the virus?

I know that I need to restart in MS-DOS and disable the virus in memory with the Kill_CIH tool but thne how do I remove if i dont have the Norton Rescue disks or any opter anti virus software?

I would really appreciate the help because i want to get this computer up an running tonight.

thanks!

[GroundZero3]

info you requested

[Winos2Mac]

THanks, but I have already seend that and that is all well and good to disable the virus in memory but not actually removing it.

See, I dont have the Norton Rescue disks or any other Antivirus software.

Can I download the disks somewhere or get a free virsus scanning boot disk somwhere?

thanks again

[GroundZero3]

http://www.antivirus-download.com/virusinfo/cih.htm

Quote:

If you are already infected with this virus, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove Win95/CIH safely. Use the following link to Download 30 day trial version of Solo antivirus [1655 KB] to remove viruses from your computer

free demo to remove it? can't beat that with a stick

[GroundZero3]

http://www.rescomp.upenn.edu/docs/hype/old/avp.html

Quote:

Product: Win32/CIH Virus
Issue: Using a DOS-based anti-virus program

Description:

I have used a DOS-based anti-virus program to clean a computer infected with the Win32/CIH virus, and it worked very well. It will clean *every* file infected, whereas running a Windows-based program would prevent you from cleaning explorer.exe and sometimes other files.

The file is available here (Download the AVPDOS.EXE file).

You need PKunzip to extract it, available here.

Both files will fit on a single floppy.

Instructions:

Start the computer with the Command Prompt option (press F8).
Copy the two files into a temporary directory.
Extract the zipped file: pkunzip avpdevl.zip
Install the program by typing: install
The program will install itself into a directory.
You should be automatically placed into that directory. Start the program by typing in: avp
The program will start. Select "Scan local hard drives" on the first menu, and select "Disinfect Files" on the Actions (or Options) menu.
Scan the computer.
The program will clean the infected files.
Using this program is much easier than toggling with the kill_cih file, updates, etc.

After the computer is clean, be sure that an updated anti-virus program is installed on the computer. (The DOS version of AVP will not offer background protection, and will only run when you tell it to.)

[GroundZero3]

http://www.f-secure.com/download-purchase/tools.shtml

or try that

[Winos2Mac]

THanks I'll give it a try and post back if all goes well.


thanks again!

[Winos2Mac]

Well it looks like it got rid of the Virus but Im still having problems with MSIEXEC.exe and other apps.

I dont think it completely removed it.

Just to make sure... this Virus CAN be completely removed without degrading your system performance right????

I mean do i need to reformat all over again and spend another few hours installing everything over again?

[karthik202]

Hi, Since yesterday nite I'm infected with the "Virus Win.CIH". I have McAfee Virus Scan already running in my system. And in addition I do have the Antivirus XP 08 too. Antivirus XP 08 detects this virus, and cleans it once. But the next second, the virus reoccurs again. Can you provide a solution to clean it up completely.

[nobaes]

Remove Antivirus XP, removal instructions

XP virus Removal is the Virus!!!!

We were hit This morning off from CNN.com