Dr.Web scanner vanquishes BackDoor.MaosBoot once again

March 31, 2008

Doctor Web, Ltd. has announced the release of updated Dr.Web scanner for Windows NT/2000/XP/Vista capable of detecting and curing the latest variation of BackDoor.MaosBoot. By now no anti-virus application has been able to cure a compromised machine of the rootkit. However, updated Dr.Web Shield™ anti-rootkit driver featured by the scanner makes Dr.Web product the first anti-virus program that is guaranteed to cure the latest BackDoor.MaosBoot.

BackDoor.MaosBoot is an MBR rootkit that was discovered at the end of 2007. The malware modifies a boot sector and loads its malicious driver to RAM. The rootkit code is placed in the last sectors of a disk that is the driver doesn’t exist as a file. It protects and hides itself on a disk. It has high potential for modifying. Recently a new version of the MBR rootkit has been discovered. This one has even better capabilities for hiding itself.

BackDoor.MaosBoot mainly targets computers in order to obtain sensitive financial data. The virus has a broad list of banking client applications. The improved variation of the rootkit easily obtains financial information using the list. Today it is banking data that it targets. Tomorrow it can be any information stored on your computer. Improved Dr.Web Shield™ allows our customers to secure their bank accounts against an unauthorized access because Dr.Web is guaranteed not only to detect the malware but also to cure it.