MSMVPS.COM

The Ultimate Destination for Blogs by Current and Former Microsoft Most Valuable Professionals.
Welcome to MSMVPS.COM Sign in | Help
in Search
Home Blogs Media Groups

Harry Waldron - Microsoft MVP Blog

Security News and Best Practices for corporate and home users

BootMerlin Virus - Modifies Windows Boot-up

This new "network walker" virus is written in VB and affects workstations as they boot up. It disguises copies of itself on the hard drive or network drives as Word documents (using the Word icon).

BootMerlin Virus - Modifies Windows Boot-up
http://vil.nai.com/vil/content/v_141514.htm
http://secunia.com/virus_information/36315/bootmerlin/

Key Symptoms include:

1. Wizard animation advocating anti-Microsoft messages in Spanish

2. C:\Boot.ini modified

3. Anti-Windows or Anti-Microsoft messages displayed by Windows Boot Manager at boot up time.

4. Presence of the file on hard drive or network drives where write access is permitted
Only published comments... Feb 22 2007, 07:09 PM by Harry Waldron

Leave a Comment

(required) 
(optional)
(required) 
Submit

This Blog

Syndication

Recent Posts

Archives

Personal Links


Copyright © is the original authors. Blog site is an independent site not sponsored by Microsoft. The Yoda blog server and the Brianna SQL server would like to thank www.ownwebnow.com and www.exchangedefender.com. They wouldn't be here and broadcasting without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems