Typo Boot Virus

 Virus Name:  Typo Boot 
 Aliases:     Mistake 
 V Status:    Rare 
 Discovered:  June, 1989 
 Symptoms:    BSC; resident-TOM; garbled printout 
 Origin:      Israel 
 Eff Length:  N/A 
 Type Code:   BRt - Resident Boot Sector Infector 
 Detection Method:  ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV, 
                    NAVDX, VAlert, PCScan, ChAV 
 Removal Instructions:  MDisk, F-Prot, NAV, or DOS SYS command 
 General Comments: 
       The Typo Boot virus was first isolated in Israel by Y. Radai in 
       June, 1989.  This virus is a memory resident boot sector infector, 
       taking up 2K at the upper end of system memory once it has 
       installed itself memory resident. 
       The major symptom that will be noticed on systems infected with the 
       Typo Boot virus is that certain characters in printouts are always 
       replaced with other phonetically similar characters.  Since the 
       virus also substitutes Hebrew letters for other Hebrew letters, the 
       virus was most likely written by someone in Israel.  Digits in 
       numbers may also be transposed or replaced with other numbers.  The 
       substitutions impact printouts only, the screen display and data in 
       files are not affected. 
       The Typo Boot virus is similar structurally to the Ping Pong virus, 
       and may be a variant of Ping Pong.  It can be removed from a disk 
       by using MDisk, CleanUp, DOS SYS command, or just about any Ping 
       Pong disinfector. 

Show viruses from discovered during that infect .

Main Page