It is a typical infection that effects diskette boot records and the master boot record of hard disks, with one exception. On March 6, if the PC is an AT or a PS/2, the virus overwrites the first one hundred sectors of the hard disk with nulls. The virus assumes a geometry of 256 cylinders, 4 heads, 17 sectors per track. Although all the user's data would still be on the hard disk, it would be irretrievable for the average user.
On hard disks, the virus moves the original master boot record to cylinder 0, head 0, sector 7.On floppy disks, if the disk is 360 KB, the virus moves the original boot sector to cylinder 0, head 1, sector 3 which is the last directory of the 1.2 MB disks, second-to-last directory of the 1.44 MB disks,and the directory does not exist on 720 KB disks.
It can disrupt any kind of operating system as it is targeting the MBR on the hard diskette. Once a system became infected, any floppy disk inserted into the system could not be detect by the file system, so the virus could not infect the floppy until some access to the disk is made. As soon as we keep the floppy diskette it will infect the diskette with the virus.
The only good thing about the virus is that it remains dormant till March 6th and will be active on that date only. So, though the system is infected with this virus it will remain calm and does the collateral damage on that particular date when the system is booted.
0 comments:
Post a Comment