Virus Name: TodayBoo
Aliases: Baboon, MA.Infector
V Status: New
Discovery: April, 1998
Symptoms: Boot Sector & MBR altered; hard disk corruption;
decrease in total system & available free memory
Eff Length: N/A
Type Code: BRhX - Resident Boot Sector & MBR Infector
Detection Method: ViruScan, NAVDX, NAV
Removal Instructions: ViruScan
The TodayBoo virus was received in April, 1998. Its origin or
point of isolation is unknown. TodayBoo is a memory resident
infector of the system hard disk master boot record (MBR) and
diskette boot sectors. It is a destructive virus.
When a computer is booted from a TodayBoo infected diskette, the
TodayBoo virus will infect the system hard disk master boot
record, as well as system memory. This will occur regardless of
whether the diskette is bootable. Each subsequent boot of the
system from the hard disk will then result in the virus also
becoming resident in memory. Any non-write protected diskette
accessed on the system will become infected by the virus when
it is accessed with the virus resident.
When the TodayBoo virus is memory resident, total system and
available free memory, as indicated by the DOS CHKDSK program
from DOS 5.0, will have decreased by 1,024 bytes.
The TodayBoo virus is a destructive virus, activating when the
system is booted from an infected diskette or infected hard
drive on September 11th. At this time, the virus will erase
the master boot record on the system hard disk, as well as the
first nine sectors on Head 1.