View Full Version : Virus Question
davef12
01-30-2002, 11:47 PM
If you get a virus that causes your computer to crash and then causes it to fail POST, how do you get rid if it?
ranchdog
01-31-2002, 12:16 AM
dave....
If you got it this bad I would re-install the
Operating System. Be the best solution at this point
to get rid of it.
After getting operational I would definitely use an
anti-virus system.
AVG at www.grisoft.com (http://www.grisoft.com) is excellent. And it's Free.
------------------
....How long is a minute... depends on which side of the Bathroom door you're on. ......
..........
[This message has been edited by ranchdog (edited 01-30-2002).]
Whyzman
01-31-2002, 12:34 AM
dave,
RD has the best solution I think at this point. I thought you could get to the A prompt with a "clean" boot disk...when you tried the Scanreg_/restore...if that is the case then you probably best fdisk and start over as he suggested.
------------------
May all your dealings in life be win/win!
Whyzman
davef12
01-31-2002, 12:57 AM
No I could never get to the prompt screen. I just tried to do it without being able to see the screen. It didn't work though. I don't know that I have a virus. I'm just trying to figure out if that could be my problem.
Are you sure that the virus is the source of the POST problem...heck even the other problems some of it could be a failing hard drive...I have seen dying/dead hard drives cause POST to hang.
------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)
Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.
Paleo Pete
01-31-2002, 02:09 AM
If it fails POST, chances are it's stored in BIOS, which means probably CIH, which overwrites BIOS. Only solution I know of is either a new BIOS chip or a new motherboard.
Some more info might help, if you know what virus you're dealing with, and how far it does make it into the boot process might help too. A rescue disk for your antivirus program might be a good idea to try as well.
------------------
Support the right to keep and arm bears.
Note: Please post your questions on the forums, not in my email.
Computer Information Links (http://www.dreamwater.com/paleopete/computer.htm) has been moved, please update your bookmarks.
Brant
02-05-2002, 04:37 PM
CIH viruses are repairable!! Go to www.grc.com (http://www.grc.com)
Have you tried a boot disk? Or Safe Mode?
GRC has a program that can fix hard drives and files damaged by CIH, but cannot repair an affected BIOS.
"Flash BIOS Recovery: We have been told by knowledgeable experts that most PC motherboards do not provide any means for recovering from the loss of their Flash BIOS EEROM. (Those that do are not vulnerable to CIH's erasure in the first place.) You should contact your PC motherboard manufacturer to determine whether your system can have its EEROM repaired. (Many thanks to Nick FitzGerald for sharing his accurate information.)
(Please note that Gibson Research Corporation has no special expertise in Flash BIOS recovery so we can not help you there. If your system's Flash BIOS was erased you must either move your hard drive to a system with a working motherboard or repair your BIOS before proceeding to consider the recovery of your system's hard drive.)" GRC (http://grc.com/cih.htm)
------------------
You pay attention to somethin' here. These kids ain't the same anymore.
You know what's behind it all?
Rock and Roll
[This message has been edited by Reid (edited 02-05-2002).]
Brant
02-05-2002, 05:17 PM
If you do not have a copy of your BIOS, you can use someone elses Puter to download one from the Mfg for you. Then try flashing your BIOS.
If the BIOS is corrupted, how is he going to bootup so a flash could work?
"The CIH virus overwrites the BIOS, not the CMOS. The CMOS and the BIOS are two completely different things. The CMOS contains only data kept by a battery. The BIOS contains data and code and is kept in special Flash ROM. The BIOS chips can be "flashed" and they will kept the new information without requiring battery power. When the computer starts the BIOS will read the data in the CMOS. The BIOS also contains default values for the CMOS settings. So if the CMOS were cleared or corrupted(there are some viruses that do that, but none of them are common), the BIOS can restore the default settings. But if the BIOS were cleared or corrupted, there would be no copy of it anywhere on the computer. Without the BIOS, the computer can't boot at all, not even from a floppy disk. That is why it is possible to clear the CMOS but not to clear the BIOS."
http://www.singcert.org.sg/note/cih.txt
------------------
You pay attention to somethin' here. These kids ain't the same anymore.
You know what's behind it all?
Rock and Roll
vBulletin v3.6.1, Copyright ©2000-2012, Jelsoft Enterprises Ltd.