This is a multipartite virus, infecting DOS executables and floppy and hard disk boot sectors. It operates correctly under Windows 95, unlike most other multipartite viruses.
Baph was found in the wild in October 1998. It contains this text string (which is never displayed):
- $BAPHOMETH$' v1 ~CAD! /AVM /CB -
[Mikko Hypponen, F-Secure]