This is a multipartite virus, infecting DOS executables and floppy and hard disk boot sectors. It operates correctly under Windows 95, unlike most other multipartite viruses.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Baph was found in the wild in October 1998. It contains this text string (which is never displayed):
- $BAPHOMETH$' v1 ~CAD! /AVM /CB -
[Mikko Hypponen, F-Secure]