Disinfect CIH Virus

In case your Windows 95/98 system was infected by CIH and it has not been activated, you may perform the steps below to disinfect the virus or the recommendations from anti-virus vendors such as DataFellows or Symantec.
  1. Remove F-Secure Anti-Virus for Windows via the Add/Remove Programs Control Panel.
  2. Power off the infected machine.
  3. Prepare a floppy diskette containing the following files of the F-PROT for DOS from another virus free machine:

    4.         F-PROT.EXE - The main program (DOS version).
            SIGN.DEF - DOS/Windows virus search/disinfection data.
            MACRO.DEF - Word/Excel virus search/disinfection data.
            ENGLISH.TX0 - An English message file.
  4. Restart the infected machine in MS-DOS mode (by pressing F8 during Starting Windows... and then the MS-DOS mode option)
  5. Copy all the files from the diskette containing F-PROT for DOS to C:\F-PROT
  6. Change directory to C:\F-PROT.
  7. Issue the command F-PROT c: /all /auto /disinf
  8. Restart the machine with Windows 9x.
  9. Re-install F-Secure Anti-Virus for Windows.
  10. Scan your hard disk with F-Secure Anti-Virus for Windows again.