How to Remove Boot Mebroot
Boot.Mebroot is a detection for a Master Boot Record infected by Trojan.Mebroot. When the Trojan is executed, it reads the Master Boot Record (MBR) and scans the partition table to find out the only running partition on your computer. The Trojan also infects the MBR and copies the original MBR to sector 62 on the hard disk. It also opens a backdoor, which bypasses a firewall allowing an attacker unauthorized access to the infected computer. This malicious tool should be removed completely from your computer to reactivate normal booting on your computer.
Other People Are Reading
Instructions
-
-
1
Print these directions before proceeding because you will have to restart your computer.
-
2
Insert the Windows installation disc into the CD-ROM drive on your computer and restart the computer from the CD-ROM drive.
-
-
3
Press "R" on the welcome screen to begin the Recovery console and select the installation that you want to access from the Recovery Console.
-
4
Enter the administrator password and press "Enter." Type "fixmbr" and press "Enter."
-
5
Follow the onscreen instructions to restore the Master Boot Record and type "Exit." Press "Enter" to start the computer normally.
-
6
Click the Windows "Start" button after your computer has restarted, and select "Control Panel." Double-click "System" and select the "System Restore" or "Performance" (Windows ME users) tab. Place a check on "Turn off System Restore" or "Disable System Restore" (Windows ME Users). Restart your computer.
-
7
Launch your anti-virus program after your computer has restarted, and click the "Update" button to install new virus and spyware updates. If you do not have an anti-virus program, download and install AVG anti-virus free."(See "Additional Resources," below.) Launch your program after it has installed, and click the "Update" button to install new updates. Symantec Norton Anti-Virus (see "Additional Resources," below) has also been tested and proven to remove Boot.Mebroot.
-
8
Perform a full-system scan and delete all the detected Boot.Mebroot files.
-
9
Click the Windows "Start" button after your computer has restarted, and select "Control Panel." Double-click "System," and select the "System Restore" or "Performance" (Windows ME users) tab. Remove the check from "Turn off System Restore" or "Disable System Restore" (Windows ME Users). Restart your computer to reactivate system restore and complete the removal process.
-
1
