V-Buster Antivirus Security System

CIH VIRUS

~INACCESSIBLE HARD DISK~
Please note that most of the data in a hard disk that has been damaged by the CIH virus can be recovered using VBUSTER.EXE. VBUSTER.EXE can read and write to a inaccessible hard disk, one of the few programs in the World that is able to do so.

REMOVAL INSTRUCTIONS:

Go to another computer with a similar hard disk partitioned in the same way.
Run VBUSTER.EXE and use the F1 function to copy the Boot Sector and Partition Table.
Go to the computer with the CIH damaged hard disk and run VBUSTER.EXE from drive A.
Use the F1 function to restore the Boot Sector and Partition Table.
Change to C drive by typing C: and then type "DIR". If all the files are not there then you have copied a Partition Table that is not similar and unless you have SENTRY.COM created by HDSENTRY.COM you will have to look for another hard disk to copy the Partition Table from.
If you have SENTRY.COM created by HDSENTRY.COM, run SENTRY.COM and SENTRY.COM will restore the Boot Sector and Partition Table to its original state.
If your BIOS, in flash memory has been erased, you should remove the hard disk, install it in another computer and then follow the steps outlined above.
After your hard disk is recovered you should run VBUSTER.EXE and get it to rebuild all the files infected by the CIH.

~REBUILDING CIH INFECTED FILES~
Many of the files infected by the CIH are damaged by the virus. A damaged file will still be damaged after rebuilding by VBUSTER.EXE. A better method will be to rebuild CIH infected files using REBUILD.DTA. Even many of the files damaged by the CIH can still be rebuilt if you have REBUILD.DTA. If you have not used VBUSTER.EXE to create REBUILD.DTA, you should take the following steps:

Run VBUSTER.EXE in a virus free computer with the same verion of Windows and press F3 to create REBUILD.DTA.
Copy all the REBUILD.DTA to all the corresponding subdriectories in the infected hard disk.
Run VBUSTER.EXE and use it to rebuild all the CIH infected files.

Looi Hoong Thoong
Looi Software
27th April 1999

Return Home