Mebroot.MBR

Discussion in 'ESET NOD32 Antivirus' started by huffman_j, Feb 28, 2010.

Thread Status:
Not open for further replies.
  1. huffman_j

    huffman_j Registered Member

    Joined:
    Feb 28, 2010
    Posts:
    2
    NOD32 gives an alert:
    Win32/Mebroot.mbr trojan
    MBR section of the 1. physical drive

    As this is only an alert, NOD will NOT remove the trojan.
    I downloaded Symantec's FixMebroot and it does not find the trojan as being active.

    Is NOD giving a false reading or is it real. On one site that told how to fix it, it said to find the trojan and delete it. Since it seems to be in the MBR how do I find it to delete it.

    Any suggestions would be greatly appreciated.
     
  2. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    You can download a removal tool here
    A full description of the Trojan may be found here
     
    Last edited: Feb 28, 2010
  3. ESS3

    ESS3 Registered Member

    Joined:
    Dec 11, 2007
    Posts:
    112
    ESET SysInspector Service Script removes Mebroot all versions(+stoned) ;)
     
  4. huffman_j

    huffman_j Registered Member

    Joined:
    Feb 28, 2010
    Posts:
    2
    ailjaline the removal tool worked great, thank you.

    ESS3 I also got ESET SysInspector Service Script to keep in my arsonal thanks very much.
     
  5. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Thanks for letting us know the removal tool worked huffman_j

    Please advise is there is anything else we can do for you.

    Regards,
     
Thread Status:
Not open for further replies.