January 13, 2008

How to remove "Mebroot" ? ( Stealthy Windows Virus)

Removal details

Also Known As: Troj/Mbroot-A [Sophos], StealthMBR [McAfee], TROJ_SINOWAL.AD [Trend], StealthMBR!rootkit [McAfee]

Type: Trojan
Infection Length: Varies

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

1. Restart the computer using the Windows Recovery Console.
2. Disable System Restore (Windows Me/XP).
3. Update the virus definitions.
4. Run a full system scan .

1 comment:

Anonymous said...

Not worked. That's for 2008 version of the Virus. The 2010 is very hard to remove. Windows Recovery, fixmbr.exe ..Symantec fixmebroot.exe ...ect .. do not work. Reformat the whole drive does not work either. So far, only Symantec newest virus file detects the new version. I tried McAfee Total Protection, AVG, Malwares, rootkit detection cannot detect it yet. Be careful. It steals id and bank accounts, install keylogger to steal info from your computer