Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Has the MBR rootkit disappeared? Not really.

10 Mar 2010   #1

Win 7 Ultimate 64-bit. SP1.
Has the MBR rootkit disappeared? Not really.

During these days we have talked a lot about the TDL3 rootkit infection, a nice example of how malware writers can make security vendors's work harder. We will continue writing about TDL3 to update our readers about the status of both the rootkit and defensive techniques.

However today we want to take a step back and talk about an old friend called the MBR rootkit, or Mebroot, or yet Torpig. The fact that we haven't talked about it for a while doesn't mean it has been defeated. Instead, the MBR rootkit is still actively spreading throughout the web, mostly through compromised websites.

During the last two days we have cleaned hundreds of infected machines, a quite impressive number that shows how the threat is still hitting hard.

As said before, compromised websites are the primary vehicle of infection. Injected iframes and obfuscated javascripts have become a serious threat during the last years, showing how often websites are not protected.
Source -
Has the MBR rootkit disappeared? Not really

My System SpecsSystem Spec

10 Mar 2010   #2
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Unfortunately, it's quite prevalent.
My System SpecsSystem Spec

 Has the MBR rootkit disappeared? Not really.

Thread Tools

Similar help and support threads
Thread Forum
I have a Gateway computer, 64 bit, DX4822-01, with Intel pentium E5300 Dual Core, 2.6GHZ each, 6GB ram, and 1TB HDD, running Windows 7 Home Premium x 64 bit. I've been getting a red warning on my screen that says I have (1) a Rootkit.Sirefef.spy and (2) a Trojan.fakAV-Download viruses. I've had...
System Security
I think I have a rootkit
I am almost positive that I have a rootkit. I know this because it has happened before. I tried both gmer and avast for rootkit removal and they both got so far and then froze up and had to force a shutdown of the programs. What should I do? I am in the middle of a semester right now and have a...
System Security
ZA Reg Rootkit???
cannot access the internet using any browser, need some help, see capture below: Diagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0 Cached Online Validation Code: N/A, hr = 0x8007043c Windows Product Key:...
System Security
Require (Rootkit.TDSS.TDL4) Rootkit Removal & Cleanup walkthrough
I would really appreciate some help from someone with experience with this matter. Introduction: Origin: False sense of security by AVG (updated), Windows kept updated, Browser settings, firewall, and self system maintainence. Presentation: Installed a 2nd HDD (Exclusively for daily...
System Security
BSOD DUE TOO rootkit
Quote: Originally Posted by Kwbaseball13 How do i get rid a rootkit im guessing some type of Anti-virus but could you recommend any for my specific problem this is the first time something like this has ever happened to my computer. thanks for responding carltr6 "I am not a security expert. I...
System Security
i heard rootkits cant install themselves on 64 bit OS'S, is this true?
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:00.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App