Antivirus
Network Security
Help
links
Visitor Focus
You are here:HomeAntivirusVirus Type→Merritt Virus
Merritt Virus   
Written by yangying   
February 21, 2008 13:24

Alias:Yale, Alameda (A)
Strain:Merritt/Alameda-Strain
detected when:November 24, 1988
where:University of New Brunswick, Fredericton, CANADA
Classification:System Virus (= BootSector-Virus)
Length:512 Bytes

Preconditions

Operating System(s):MS-DOS
Version/Release: 
Computer model(s): 
Caroname:Yale.A

Attributes

Easy identification:No characteristic text (in code, Vol-labels etc).

Type of Infection:

Boots when infected disk is inserted and system is booted. Installs itself in high memory, removes that memory from DOS. Installs itself as the Warm-start (CTRL+ALT+DEL) interrupt handler (actually the keyboard handler); spreads by CTRL+ALT+DEL interrupt handler. Moves "real" boot sector to track 39, sector 8. Does not infect .COM or .EXE files.

Infection Technique: 
Infection Trigger: 
Storage Media affected: 
Interrupts hooked: 
Stealth: 
Tunneling/Selfprot: 
Oligo/Polymorphism: 
Encoding Method: 
Damage:Permanent Damage: moves boot block to track 39, sector 8 (if there was a file, it is corrupted). This sector is not marked as bad, so a file may overwrite the real boot block so that the disk may become "NOT bootable". It will count to 39 and Blast the FAT (`0'). It counts a certain key stroke (there is also code for decrementing the count by another keystroke).
Damage Trigger: 
Particularities:Hangs-up 80286-systems.
Similarities:With other members of Merritt/Alameda-strain.

Agents

Countermeasures:Michael MacDonalds own vaccine, which identifies virus and overwrites the boot block.
Standard means:Compare boot sector of infected disk with a "real" system disk. If different: check track 39, sector 8; if this contains the real boot block, execute a SYS command to reinstall real boot block and system files.

Acknowledgements

Location:School of Computer Science, University of New Brunswick
Classification by:Michael J. MacDonald
Documentation by:Michael J. MacDonald, Software Specialist University of New
Date:June 5, 1989
Information Source:---
 

Functionality of the Internet Security 2009

 

Hourly updates and fastest response times ensure you benefit from the industry's most up-to-date protection.

New- Advanced anti-virus engine delivers the industry's fastest scan times (Passmark Security, June 2007). Saves time and improves performance.

New - Configuration and privacy tools are designed to help you protect yourself.

Intrusion Protection System and 2-way firewall protect you from hackers; protect your privacy.

Protects you from the phishing and malware sites that you wouldn't otherwise know were attempting to steal from you.

Parental controls filter, block, or report inappropriate content. Limit Internet time to hours and amounts that you set.

Kaspersky Security Network allows your computer to report when it discovers a threat that hasn't been seen before. All 250 million Kaspersky users benefit from our combined knowledge!

 

A New Generation of Threat Protection

 

Premium Protection fromKaspersky Lab
"At Kaspersky Lab, we protect over 250 million systems worldwide. In 2007 we saw more malicious threats than in the previous 15 years combined. Kaspersky Internet Security 2009 represents a breakthrough in the way we protect our customers with the strongest, most efficient anti-malware technology in the world. And we back this with the finest support team in the business. Trust Kaspersky Lab."

- Eugene Kaspersky 

 

A New Generation of Threat Protection
Kaspersky's Internet Security lab has seen an unprecedented growth in cybercrime attacks. In 2007 alone we responded to more than 2 million new malicious threat samples - more than the prior 15 years combined. These attacks have become remarkably sophisticated, with cybercrimals finding new inventive ways to steal private information, personal identities and financial data.

A Smarter Approach to Security
Kaspersky Lab has raised the bar once again. Kaspersky® Internet Security 2009 offers a thoroughly new approach to keeping you safe. Along with new enhancements to our top-rated detection technology, we've added important new layers of security designed to provide the greatest possible protection. And we did it while making version 2009 up to 7 times faster. It's all about premium protection that lets you make the most of your computer's power.

Tags: Kaspersky Internet Security 2009, Free Kaspersky Internet Security 2009 Download, internet security, antivirus software, antispyware software, personal firewall, antispam

German : Merritt Virus
Spanish : Merritt Virus
French : Virus Merritt
Japanese : メリットウイルス
Russian : Мерритт Касперского