Loading Profile...
Generic MBR rootkit question
Last night my scan results listed a generic MBR rootkit. The recommended action was to quarantine this but after running the clean function it changed it to allowed. Tonight this did not show up on my deep scan or a quick scan. How do I find and remove this rootkit?
I’m confused
3
people have this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
-
Inappropriate?Mark, Thank you for posting you question.
This is a false positive, it associated with files from backup and restore software. It is not dangerous, and VIpre is not removing the file so it wont cause the backup program to stop working. We are already working to resolve this, it will be in new definitions that it is fixed, which will be sent out automatically
If you have any questions please let us know.
Thanks,
Peter2 Comments
Add a comment
This answers the question
-
I have the same problem with the same Generic MBR Rootkit and while my Counterspy labels it SEVERE it is unable to remove it. -
Hi John,
We have discovered that this Generic MBR root kit appears when Vipre is scanning a section of the hard drive that has been encrypted by back up software such as Goback.
We are working on a way to get around this notification and should have it corrected soon. -
2 Comments Add a comment
This answers the question
-
Thanks Peter. I hope that this gets addressed soon and Yes, I do use GoBack. In the meanwhile, what damage does this MBR root kit do and what should I do until the problem is corrected?
-
John,
This MBR rootkit detection is a false positive. This means it's not an actual threat so it doesn't do any damage. At the moment VIPRE is set to report only on the MBR rootkit so it won't attempt to remove any traces relating to this detection. Basically, I'd suggest just ignoring the MBR rootkit detection until this is resolved.
