F-Secure Virus Descriptions : Dodgy

NAME:	Dodgy
ALIAS:	Ravage
TYPE:	Resident Stealth Boot sectors MBR

Dodgy is a simple boot sector virus. The only special thing about is that it is able to spread under both DOS and Windows 95.

When Dodgy activates it will display this text:

        RAVage is wiping data! RP&muRPhy

After this the virus will overwrite most of data on the hard drive.

Dodgy has been reported to be in the wild during fall 1997.

[Analysis: Mikko Hypponen, F-Secure]