Just run 06NAV97.EXE or click your LiveUpdate button to obtain this support. SARC at PC Expo Meet Alex Haddox, Product Manager of the Symantec AntiVirus Research Center, and other members of the SARC Research team at PC Expo. The show is scheduled for June 17 through 19 at the Javits Center in New York City. When it is active in memory, the Ripper virus randomly corrupts disk writes. The virus invalidates information written to disk approximately once in every 1,000 writes.
Ripper contains two encrypted strings.
One is an obscene message. The virus code reserves 6K of memory and is two sectors in length. The virus body is stored, unencrypted, on 9 sectors near the end of side 0, track 0, on the hard drive. Natas hides the infected MBR, but not the extended sectors. Using a disk editor, you can see the virus name near the end of the last virus sector.