Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Virus Detected in the Suhdlog.dat File


View products that this article applies to.

This article was previously published under Q170618

↑ Back to the top


Symptoms

Anti-virus programs may detect a virus in the Suhdlog.dat file.

↑ Back to the top


Cause

Your computer was infected with a master-boot-record (MBR) virus before you installed Windows 95.

↑ Back to the top


Resolution

To resolve this issue, use one of the following methods:

Method 1

Remove the virus from the Suhdlog.dat file with an anti-virus program.

NOTE: If the Suhdlog.dat file is damaged when the virus is removed, you cannot use the Uninstall tool to remove Windows 95.

For information about how to remove a virus with your anti-virus program, refer to the documentation included with your anti-virus program or contact your anti-virus program's manufacturer.

Method 2

NOTE: You cannot use the Uninstall tool to remove Windows 95 when you use this method to remove the virus-infected Suhdlog.dat file.
  1. In Control Panel, double-click Add/Remove Programs.
  2. On the Install/Uninstall tab, click "Old Windows 3.x/MS-DOS System Files," and then click Add/Remove.
If after you remove the "Old Windows 3.x/MS-DOS System Files" component the Suhdlog.dat file is still present, delete the Suhdlog.dat file using the following steps:
  1. Click Start, point to Programs, and then click MS-DOS Prompt.
  2. type the following lines, pressing ENTER after each line:
    cd\
    attrib -s -h -r c:\suhdlog.dat
    del c:\suhdlog.dat

↑ Back to the top


More information

When you upgrade an earlier version of Windows to Windows 95 and you choose to back up the system files during the upgrade, your hard disk's original MBR and partition tables are copied to the Suhdlog.dat file.

If your computer is infected with an MBR virus before you install Windows 95, the virus is copied along with the original MBR and partition tables into the Suhdlog.dat file. Even though an anti-virus program removes the virus from your current MBR, if the Suhdlog.dat file contains the virus when you use the Windows 95 Uninstall tool to restore the previous version of Windows and MS-DOS on your computer, the MBR becomes infected again.

The virus is not active while it is stored in the Suhdlog.dat file, but anti-virus programs may detect its presence and display a warning.

For additional information, please see the following articles in the Microsoft Knowledge Base:
129972  Description of Computer Viruses

151667  Description of Windows 95 Files Located in the Root Folder

138127  How to Uninstall Windows 95

↑ Back to the top


Keywords: kbsetup, KB170618

↑ Back to the top

Article Info
Article ID : 170618
Revision : 2
Created on : 11/15/2006
Published on : 11/15/2006
Exists online : False
Views : 607