Tony Boot Virus

Virus Name: Tony Boot Aliases: V Status: Rare Discovered: November, 1991 Symptoms: BSC Origin: Bulgaria Eff Length: N/A Type Code: BR - Resident Boot Sector Infector Detection Method: ViruScan, AVTK, F-Prot, IBMAV, NAV, Sweep, NAVDX, VAlert, PCScan, ChAV, NShld, LProt, Innoc, AVTK/N, Sweep/N, NAV/N, NProt Removal Instructions: MDisk or DOS SYS command General Comments: The Tony Boot virus was submitted in November, 1991. It is from Bulgaria. Tony Boot is a memory resident infector of diskette and hard disk boot sectors. The first time the system is booted from a Tony Boot infected diskette, Tony Boot will copy the hard disk drive C: boot sector to the last sector of the hard drive, and then infect the drive C: boot sector. The virus will not be memory resident at this time. The next time the system is booted from the system hard disk, the Tony Boot virus will become memory resident. Once it is memory resident, it will infect any non-write protected diskettes exposed to the system. The following text string will be found within the boot sector of infected hard disks and diskettes: "Tony" It is unknown if Tony Boot does anything besides replicate. Known variant(s) of Tony Boot are: Tony Boot Dropper: Tony Boot Dropper is a small program which places a copy of the Tony Boot virus into a diskette's boot sector. The Dropper itself does not replicate.