Hardware Secrets
Home | Camera | Case | CE | Cooling | CPU | Input | Memory | Mobile | Motherboard | Networking | Power | Storage | Video | Other
Content
Articles
First Look
Gabriel's Blog
News
Reviews
Tutorials
Main Menu
About Us
Awarded Products
Compare Prices
Datasheets
Dictionary
Download
Drivers
Forums
Links
Manufacturer Finder
Newsletter
On The Web
RSS Feed
Test Your Skills
Twitter
Newsletter
Subscribe today!
Search





Recommended Book
PC Disaster and Recovery
PC Disaster and Recovery
By Kate J. Chase
Sybex
Price: $9.68

Home » Storage
Recovering Hard Disks Erased by the CIH Virus
Author: Gabriel Torres
Type: Tutorials Last Updated: October 16, 2004
Page: 1 of 1
$ Check REAL-TIME pricing for Upper Room Books Enter By The Gate Jesus 7 Guidelines When Making Hard Choices $
Amazon: $12.00

The CIH (a.k.a. Chernobyl or Spacefiller) is one of the most fierces virus available. On its activation date (April 26th) it tries to erase your computer's BIOS and also your hard disk.

To recover your hard disk, you will need to use a data recovery software. From all softwares we tested, the best one is the Fix-cih, which is free and can be downloaded at http://www.grc.com/files/fix-cih.exe. This software is small and really efficient. You will need to create a bootable floppy and copy this program to it, and then boot the infected computer from this floppy. Format this floppy from a computer without virus (of course) and using at least Windows 98 (if you format it using DOS or Windows 95, it won't recognize FAT32 partitions and you probably won't be able to recover your hard disk). Run the software and wait. It can take a couple of hours recovering your data, specially with you have a large hard disk.

After recovering the hard disk, you will need to run an antivirus software to remove the virus, that will still be stored on your hard disk. We recommend you to download and run cleancih, which can be downloaded from http://www.pspl.com/download/cleancih.exe. This is a 20 KB DOS software, so you can copy it to your bootable floppy and run it after booting from a floppy. Don't try to boot your from your hard disk, because it is infected and you won't be able to remove the virus.

To boot your PC from a floppy disk, you need to enter setup (pressing Del key during the memory count that occurs when you turn your PC on) and change the Boot Order (or Boot Sequence) option to "Floppy", "A:, C:" or similar.

Notice that probably your motherboard will be "dead", since the CIH virus tries to erase its BIOS. If that is your case, read our tutorial on how to recover motherboards "killed" by the CIH virus.

 
Print Version | Send to Friend | | Bookmark Article | Comments (0)

Related Content
  • Testing Your Computer
  • Recovering Dead Motherboards Killed by the CIH Virus
  • BIOS Backup
  • How to Enable Processor-Based Security
  • Transforming your Radeon 9800 Pro into a Radeon 9800 XT

  • Recommended Deal
    Barracuda 7200.11 1.5TB 15TB 1500 SATA 32MB CacheSEAGATE.jpg Check out the latest range of Hard Drives - Internal by Dell CMS Products Seagate Western Digital Buffalo Technology Inc Lacie Iomega and many more 1.5TB SATA Barracuda 7200.11


    Dell Home: $269.99 Newegg: $119.99
    TigerDirect USA: $129.99 Directron: $125.99

    RSSLatest News
    Thermaltake Launches PW880i Water Cooler
    July 3, 2009 - 1:27 PM PST
    NZXT Announces Sentry 2 Touchscreen Fan Controller
    July 2, 2009 - 2:25 PM PST
    Transcend Intros Thermal Sensor-Equipped DDR3 Memory
    July 1, 2009 - 11:40 AM PST
    Cooler Master Launches Universal Laptop Charger
    June 30, 2009 - 5:03 PM PST
    Active Media Products Launches “President Barack Obama” USB Flash Memory
    June 29, 2009 - 6:57 PM PST
    New SSD Drives from Corsair
    June 26, 2009 - 4:33 AM PST
    MSI Announces X-Slim X600 Notebook
    June 25, 2009 - 6:00 PM PST
    Zotac Releases GeForce GTX 275 with 1,792 MB GDDR3
    June 24, 2009 - 7:54 AM PST
    Kingston Launches DDR3-1600 HyperX T1 Memory Kit
    June 23, 2009 - 11:20 AM PST
    Walton Chaintech Announces eSATA/USB Flash Memory Series
    June 22, 2009 - 2:00 AM PST
    .:: More News ::.

    RSSLatest Content
    Power Supplies Re-Tested - Part 3
    Thermaltake Element G Case Review
    Corsair CX400W Power Supply Review
    Seventeam ST-750P-AF Power Supply Review
    Rocketfish 550 W Power Supply Review
    In Win X-Fighter Case Review
    Gigabyte G31M-ES2C Motherboard
    BFG ES-800 Power Supply Review
    And The Training Goes On...
    2 TB Hard Disk Drive Battle: Seagate Barracuda LP vs. Western Digital Caviar Green
    Power Supplies Re-Tested - Part 2
    Power Supplies Re-Tested - Part 1
    Hardware Secrets Power Supply Test Methodology
    What WePC Dreams Are Becoming Reality?
    All Phenom Models

    Our Most Popular Articles
    Maximum CPU Temperature
    988,946 views
    nVidia Chips Comparison Table
    617,361 views
    How to Find Out Your Motherboard Manufacturer and Model
    596,436 views
    AMD ATI Chips Comparison Table
    517,924 views
    Connecting Two PCs Using a USB-USB Cable
    513,040 views
    How To Correctly Apply Thermal Grease
    496,036 views
    ATI Radeon X1300 Pro Review
    467,269 views
    ATI Radeon X1600 XT Review
    458,259 views
    How To Perform a BIOS Upgrade
    343,277 views
    Sempron vs. Athlon XP
    320,186 views

    Latest Threads in Our Forums
    How to Create a Three-Speed Fan Control Without Spending a Dime
    by Olle P
    Thermaltake Launches PW880i Water Cooler
    by Olle P
    Wireless Router
    by Osirus
    PC versus dedicated NAS for network storage?
    by Osirus
    Latency
    by Osirus
    My wireless keeps dropping
    by Osirus
    Seventeam ST-750P-AF Power Supply Review
    by Olle P
    Area 51m 9750 temp assistence
    by tomahawk 1705
    Hardware Secrets Power Supply Test Methodology
    by jolphil
    Fujifilm FinePix A150
    by Hardware Secrets Team
    .:: Visit Our Forums ::.


    © 2004-9, Hardware Secrets, LLC. All rights reserved.
    Advertising | Legal Information | Privacy Policy
    All times are Pacific Standard Time (PST, GMT -08:00)