Microsoft KB Archive/259341

= New York Boot (NYB) Virus =

Article ID: 259341

Article Last Modified on 1/27/2007

-

APPLIES TO


 * Microsoft Windows 98 Standard Edition

-



This article was previously published under Q259341



SUMMARY
The New York Boot (NYB) virus is a simple Master Boot Record (MBR) virus. It is a stealth virus and is contracted when an infected floppy disk is started. The virus was previously known as Stoned.i, B1 and was discovered in 1995. This virus creates a copy of the uninfected MBR and stores it on the hard disk drive at side zero, cylinder zero, sector 17, and then places itself in the original location of the MBR. Any attempt to read the MBR is redirected to sector 17; NYB is a stealth virus because it uses this method to prevent detection.



MORE INFORMATION
This virus uses the last record of the root directory on floppy disks to hold its viral code. Any data that is written to this area is lost. There are two payloads with this virus:
 * In one out of every 512 floppy disk accesses, the virus causes the system to constantly scan the drive, which eventually leads to physical damage to the drive.
 * If the drive is written to at the exact second of midnight, the virus crashes the system, causing any unsaved data to be lost.

It is recommended that viruses be removed from the system with an anti-virus software program.

Keywords: kbinfo kbvirus KB259341

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.