VirusNYB.A
Analysis
- Viral body is 512 bytes
- Virus infects the MBR and floppy boot records
- Virus copies MBR to a location on the hard drive
- Virus is stealth, redirecting calls to the MBR
to the saved copy
- If infected floppy is in pc upon boot, virus code
may be transferred to system MBR and become memory
resident at next system boot
- Unless a floppy is write-protected, it becomes infected when accessed from an infected pc
Telemetry
Detection Availability
| FortiClient | |
|---|---|
| Extreme | |
| FortiMail | |
| Extreme | |
| FortiSandbox | |
| Extreme | |
| FortiWeb | |
| Extreme | |
| Web Application Firewall | |
| Extreme | |
| FortiIsolator | |
| Extreme | |
| FortiDeceptor | |
| Extreme | |
| FortiEDR |