Blog
Projects
About
Backtrack:
Blog
›
How to get rid of the MBR root…
›
Comments
Comments
How to get rid of the MBR rootkit
posted on April 19th 2011, at 15:55
by
lunarg
The latest trend in virii is the use of MBR rootkits to settle themselves in the unused (hidden) sectors of your harddrive, safe from any formatting or reinstallation of Windows. They cannot be removed by an antivirus as the rootkit directly interacts with the kernel upon boot, long before any antivirus system drivers are being loaded. The rootkit does not patch actual files or drivers, but rather does this dynamically upon booting Windows. A complete format of your system would not get rid of the MBR as it is hosted in the first sectors of your hard drive and therefore survive a format of a single partition.
More information can be found here: http://www2.gmer.net/mbr/.
There
...
read more
Add a new comment
Your name:
Your e-mail:
Your comment:
Basic BBcode is supported.
Captcha:
Type the letters and numbers as shown.
Not readable?
Get another
.
Tags
computer
windows
software
vmware
microsoft
linux
exchange
hardware
network
news
mac
powershell
home
office365
msoffice
ad
server
sqlserver
dell
soaring
esx
internet
mssql
rds
sbs
events
powercli
terminalserver
virtualization
antivirus
Archive
«
‹
November 2024
›
»
Sun
Mon
Tue
Wed
Thu
Fri
Sat
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
Links
-
@harkx
-
Cats & Dogs
-
Jargon-free Security Guide
Quote
«
I needed a password with eight characters so I picked Snow White and the Seven Dwarves.
»
Contact
© 2009-2024 Black Manticore – all rights reserved
code by
lunarg
, design by
SuriAmanah
, hosted at Cats&Dogs