Microsoft Now Says OS Reinstall Unnecessary for ' Popereb' Trojan

The previous advise of completely wiping a system was previously given due to the fact that the Trojan operated by overwriting a system's hard drive master boot record to boar its way into a sector accessed only before a computer's BIOS begins the startup process. This causes the OS and security software to not be able to detect the intruding malware.

Feng advises individuals who have been infected to use the Bootrec.exe tool located in the Windows Recovery Environment to repair their system. A detailed explanation on how to use the tool can be found here .

However, removing the 'Popureb' Trojan in this manner may not be enough. "Once you're infected, the best advice is to [reinstall] Windows and start over, said Joe Stewart, director of malware research for Dell SecureWorks, in an interview with Computerworld .  " ... [MBR rootkits] download any number of other malware. How much of that are you going to catch? This puts the user in a tough position."

Marco Giuliani, a threat research analyst at Webroot, also shares Stewart's advice, but also warns that, due to the nature of the malware, wiping a system will not guarantee its removal. "What is really a nightmare is that the Trojan looks like it has bugs and sometimes it hangs the system during the reboot stage," he wrote in a blog posting.

Giuliani and his team at Webroot are currently finishing up on a tool to safely remove the Trojan and will release it after internal testing is complete.

How To Repair In Recovery Console - News


Microsoft Now Says OS Reinstall Unnecessary for ' Popereb' Trojan

E, we advise fixing the MBR using the Windows Recovery Console to return the MBR to a clean state," wrote MMPC engineer Chun Feng in an update to a blog post on TechNet. The previous advise of completely wiping a system was previously given due to the



Microsoft's Answer to Vicious Malware? Reinstall Windows

But Microsoft corrected itself later to note that what really needs to be done is to open a Windows Recovery Console and fix the Master Boot Record. What remains unchanged is Popureb.E's capabilities. The malware is clever enough to identify the actual



New MBR rootkit infection thwarts repair efforts

In a post on the Microsoft Malware Protection Center blog, Chun Feng advises that users fix the MBR via the "fixmbr" command within the System Recovery Console. This should be followed by a system restoration back to a clean state to ensure that the



Port divers plunge into their work
Port divers plunge into their work

The hiss-whoosh of their breathing issues from speakers on a ship console. A few minutes later, one of them says, "I've got something here. It's an anchor, and it's sticking up seven feet or so off the bottom." "We've got to cut it down," Howard says.



Rotarians announce grant winners

The grant will purchase needed equipment for medicine carts and nurse's office and a Nintendo Wii console with appropriate games will address the recreational needs of 50 independent residents, 60 assisted living residents and 34 skilled nursing




So, Your Desktop Has Been Highjacked Part one | Windows XP ...

Warning: You must replace the forward slash in the command line with a back slash, otherwise you’ll receive a “bad command or file name” error message in the Recovery Console. When I tried to publish this article, It removed all the back slashes, so I put forward slashes in their place so you would where to put the back slash.

You’ve installed a seemingly innocent application, restarted your computer, and suddenly you see the horror, your background has changed, it is dark and has a message that says you’ve won the grand prize. You try restarting your computer again, same thing. You’ve been hijacked; meaning your background has been hijacked. What will you do? Well, do not let it ruin your day. If you are using Windows XP there is help.

I am going to show you how to bring your background back to life, and restore it to the point it was before it was hijacked. You may want to print this article; it may be easier to follow along. By the way, this routine only works with Windows XP, either Professional or XP Home Edition.

Here’s what to do: First, get the Windows XP CD you used to install your operating system. If you do not Have a bootable XP CD, get one and have it with you at all times. But before you do anything with that CD, right click on your background and chose properties. If there is a background tab click on it. You have different background options, choose one. Then click “apply”. Occasionally, for some odd reason, this works. Usually not, though. If you’ve tried that and everything else you can think of, then keep reading and we’ll have your computer running smooth before you know it.

If you do not have a background tab, then read the instructions below and things will soon be fixed. Put the XP CD in the drive, and restart your computer. When it says, “press any key to boot from CD,” go ahead, press any key and you are on your way to the magical Windows XP Recovery Console. If it does not give you a choice to boot from your CD drive, go into your computer’s BIOS and change the boot order to boot from CD. PC brands and motherboards are too diverse to give you specifics on this, so follow the prompts and you’ll be able change the boot order without too much trouble. Look at your screen when it boots up, it should say hit del, or press f1 to enter setup. If you cannot get your computer to boot from CD then you’ll have to take your computer to the repair shop, because to get to the Recovery Console you need to be able to boot from the Windows XP CD.


How To Repair In Recovery Console - Bookshelf

PC Repair and Maintenance, A Practical Guide

PC Repair and Maintenance, A Practical Guide

B. Install Recovery Console so that it becomes a choice of OSs available at ... Reboot the computer and select the number for Recovery Console from the list ...

MCSE migrating from Windows NT 4.0 to Windows 2000 study guide (Exam 70-222)

MCSE migrating from Windows NT 4.0 to Windows 2000 study guide (Exam 70-222)

Pressing R to repair will give you the option of using either Emergency Repair or the Recovery Console. The Emergency Repair facility offers you a further ...

Windows XP hacks

Windows XP hacks

Repair and Recover with the Recovery Console disable paging and have the kernel run in RAM (set the value to 0 to undo this hack). ...

CompTIA A+ Certification

CompTIA A+ Certification

Attempt to Repair Using Recovery Console To begin troubleshooting one of these errors, boot from the installation CD-ROM and have Windows do a repair of an ...

CompTia A+ Certificarion

CompTia A+ Certificarion

Attempt to Repair Using Recovery Console To begin troubleshooting one of these errors, boot from the installation CD-ROM and have Windows do a repair of an ...

Daily Article Directory


Repair XP
Repair System Restore - Bert Kinney MS MVP. How To Uninstall SP2 Using the Recovery Console - S Raj Kumar Rathi (scroll to August 17, 2004) ...

Description of the Windows XP Recovery Console for advanced users
Recovery Console prevents the familiar Windows Graphical User Interface (GUI) from loading in order to repair and recover Windows functionality. ...

How To Repair / Install Recovery Console / NTLDR In Startup ...
How To Repair / Install Recovery Console / NTLDR In Startup Windows Server 2003

How To Repair / Install Recovery Console / NTLDR In Startup ...
How To Repair / Install Recovery Console / NTLDR In Startup Windows Server 2003 ... You may invoke the Recovery Console with the help of the installation CD-ROM. ...

XP: Repair or fix master boot record using recovery console ...
Problems with the master boot record (MBR) of a system may prevent the system from booting. The MBR may be affected by malicious code, become corrupt