Friday, January 11, 2008

Warning on stealthy Windows virus: Mebroot

BBC News report:

Warning on stealthy Windows virus

The creators of the virus are after bank logins and personal data
Security experts are warning about a stealthy Windows virus that steals login details for online bank accounts.

Analysis of Mebroot has shown that it uses its hidden position on the MBR as a beachhead so it can re-install these associated programs if they are deleted by anti-virus software.

Although the password-stealing programs that Mebroot installs can be found by security software, few commercial anti-virus packages currently detect its presence. Mebroot cannot be removed while a computer is running.

Computers running Windows XP, Windows Vista, Windows Server 2003 and Windows 2000 that are not fully patched are all vulnerable to the virus.

No comments: