Welcome to the Computer Security Wiki! You can help us by expanding stubs, create new articles and improve current articles.
You can also help us by logging-in or creating an account!

Crazy Boot

From Malware Wiki
Jump to: navigation, search

Stubsymbol.png This article is a stub. You can help by editing it.

MultipleIssues.png This page has multiple issues. These issues most likely include issues with references and manual of style violations. Please help Malware Wiki by correcting these issues.

Most of this page uses content from Wikipedia. The original article was at Crazy Boot. The page may have contained some inaccurate or outdated information, so please rewrite some parts to avoid plagiarism.
The list of authors can be seen in the page history. As with Malware Wiki, the text of Wikipedia is available under the Creative Common Attribution-ShareAlike 3.0 License.
Remove this template when most of the Wikipedia content has been removed or the Wikipedia information is outnumbered by non-Wikipedia information.
Crazy Boot
TypeBoot sector virus
DateMay 1995
This box: view  talk  edit

Crazy Boot is a virus that infects the Microsoft Windows operating systems, causing no physical damage nor direct loss of information; it would be known as a hoax to some.


If the host computer is booted from an infected floppy disk, this virus makes it look as though all physical hard drives have been lost. Crazy Boot spreads through unprotected disks easily. It spreads only on diskettes, not by file distribution. The virus resides in memory, it infects the Master Boot Records of all physical hard disks and infects the boot sectors of floppy disks.

If Crazy Boot is in memory, any access to the boot record is rerouted to a copy of the original boot sector. When the virus infects a hard drive, it makes a copy of the partition table (an important part of the system area), writes the copy, and deletes the original partition table. To read the partition information, Crazy Boot must be active in memory. If users boot from a floppy disk not infected by this virus in order to avoid it, all physical hard drives are inaccessible by normal means.

The virus has a counter which causes the following text to be displayed:


External links