[Quickeyez]

My girlfriend has a compaq presario 5000 with the following specs:
Win XP Pro
AMD Duron 800MHz
40GB HD
384MB RAM (PC100)

She resently got a virus cos her subsrciption run out. Before I could do anything about it for her, the system won't boot at all. So I took out her HD and and mouted it as a slave on my system and backed up her files onto mine and formatted her drive. Then I proceeded to install Win XP Pro for her on my system. But now the system does recognize her HD I've tried different HD and IDE cables but the BIOS couldn't recognize her HD. With some other HDs I get an "NTLDR missing, cannot find NTLDR". I suspect a CIH virus might have altered the BIOS but either ways I'll really appreciate any help I get. Please ask if more info is needed.

[Advertisements]

Ok, let me find the website that i have on record that tells how to recover from the CiH virus, give me a few ok?

[djgotee]

Ok, let me find the website that i have on record that tells how to recover from the CiH virus, give me a few ok?

[djgotee]

Here you go....http://grc.com/cih.htm

[djgotee]

http://grc.com/cih.htm

[Quickeyez]

Thanks for your help Djgotee, but can the program boot the infected comp?....cos it doesn't even go through POST. Thanks

[djgotee]

I have not dealt with the cih virus in a while. Id have to go to that website and read the entire info again. Did you read it all and does it seem understandable?

[djgotee]

Oh and sorry i did not tell you this b4, this only works for fat32 file systems.

[Quickeyez]

well a good part of it was understandable....You see.....the HD from the infected PC boots well and fine on my system. but when I put it back into the infected sys......it cannot detect te HD

[djgotee]

Youll have to do some more research if your drive isNTFS file system, but if the repair proceedure is similar...read this:

Flash BIOS Recovery:
We have been told by knowledgeable experts that most PC motherboards do not provide any means for recovering from the loss of their Flash BIOS EEROM. (Those that do are not vulnerable to CIH's erasure in the first place.) You should contact your PC motherboard manufacturer to determine whether your system can have its EEROM repaired.

and flash bios recovery would have to be done first im affraid...

[djgotee]

The question now become...

do you have NTFS file system?

and if you have fat32, you can use steve gidsons proceedure to work it out.

but the next question? how do you tell if you have your flash bios working again ?
and this is a good question. Did you say you can get into the bios on the affected computer?

[Quickeyez]

well.....the file system is NTFS....I guess I'll just reformat the drive and make it a FAT file system and start the whole process..once again thanks for your help....I'll be back if I develop any problems.

[Quickeyez]

yes I can get into the BIOS alright

[djgotee]

Look what i found : CIH virus cannot infect computers running on Windows NT, 2000, or XP

http://securityrespo...a/kill_cih.html

[djgotee]

hang on Quickeyez, if you have XP, you dont have this cih virus, your problems are somthing else...

[djgotee]

I mean XP with NTFS..