Ripper

Analysis

• Virus infects the MBR and DBR of floppies, and makes a copy of these records to other locations
  
• Viral body is 1,024 bytes and is stealth, redirecting calls to the boot record to the saved copy
  
• If infected floppy is in pc upon boot, virus code may be transferred to system MBR and become memory resident at next system boot
  
• Unless a floppy is write-protected, it becomes infected when accessed from an infected pc