Dr.Web Anti-virus is the first one to counteract BackDoor.MaosBoot rootkit

January 28, 2008

Doctor Web, Ltd. announces a release of updated Dr.Web anti-virus modules for Windows NT/2000/XP/Vista. The updated modules include Dr.Web anti-virus scanner and Dr.Web Shield^TM anti-rootkit driver.

Updated Dr.Web Shield^TM allows Dr.Web anti-virus to cure the whole new family of rootkits currently represented by BackDoor.MaosBoot that was discovered at the end of 2007 and attracted a lot of attention in January 2008. The rootkit places the content of the malicious kernel driver to the last sectors of a hard drive so it doesn’t exist as a file. The malicious programme modifies MBR and hides its presence in a system. By now no anti-virus programme has been able to cure an infected computer of this stealth rootkit. However, the updated Dr.Web Shield makes Dr.Web anti-virus the first one capable of counteracting the malware.

Due to the upcoming release of Dr.Web Enterprise Suite 4.44 scheduled for January 29 the R&D Department of Doctor Web, Ltd. has released another updated module for Windows desktops - SpIDer Guard^® on-acces scanner. The updated version of SpIDer Guard will be included in Dr.Web Enterprise Suite 4.44.

Issues that arose in routines of SpIDer Guard included in Dr.Web Enterprise Suite have been fixed. Besides, SpIDer Guard crash during operations with files in certain modes and compatibility issue for iPod and some other devices have been fixed. Some minor changes have been done to the GUI of the resident protection module and sending notifications via e-mail has been corrected.

The fixed modules are available for automatic downloading to all users of Dr.Web for Windows 4.44. We strongly advise all users of 4.33 version of the programme to download 4.44 distributions from Doctor Web, Ltd. web-site and upgrade. All licenced users of Dr.Web anti-virus can upgrade to the new version free of charge.

2008-07-03	June virus activity review from Doctor Web, Ltd.
2008-07-03	2000 companies using services of OBLTELECOM experience reliable anti-virus protection with Dr.Web
2008-06-30	Dr.Web AV-Desk guards information of corporate customers of Newcom Port
2008-06-27	Doctor Web, Ltd. establishes a subsidiary company in France
2008-06-27	Dr.Web AV-Desk will remove malware from networks of Volkhov-Online
2008-06-26	Dr.Web AV-Desk comes to Kyrgyzstan
2008-06-26	Deployment of Dr.Web AV-Desk reduced the workload of Ufanet support service
2008-06-23	Dr.Web AV-Desk will deliver "clean" Internet to 50 000 users in Moscow region
2008-06-19	STREAM-TV Izhevsk employs Dr.Web AV-Desk
2008-06-18	Dr.Web Enterprise Suite protects UAZ
2008-06-10	Doctor Web, Ltd. releases SpIDer Mail 4.44.2.
2008-06-05	May 2008 virus activity review by Doctor Web, Ltd.
2008-06-04	AKADO chooses Dr.Web AV-Desk and recommends Dr.Web to its subscribers
2008-06-04	Spam doesn’t always mean "malware”
2008-05-29	Yandex recommends Dr.Web CureIt! to tackle malware faking web-pages
2008-05-27	The new version of Dr.Web for Windows anti-virus scanner released
2008-05-26	Izhevsk.net launches Dr.Web AV-Desk
2008-05-13	April 2008 virus activity review from Doctor Web, Ltd.
2008-05-13	Twenty five thousand subscribers of Eltel get protection by Dr.Web AV-Desk™
2008-05-07	Dr.Web AV-Desk shields four hundred educational institutions of the Russian university network RUNNet
2008-05-06	New version of Dr.Web anti-virus scanner for Windows released
2008-05-06	Win32.Ntldrbot (aka Rustock.C) no longer a myth, no longer a threat. New Dr.Web scanner detects and cures it for real
2008-05-05	Another 17 Russian cities get anti-virus as a service with Dr.Web AV-Desk