SoftXpand EcoWare Solutions



Eset Antivirus 15% Off - Fast AV Solution

Eset Antivirus
Friday, May 06, 2016
We have 128 guests online

Latest News

PDF Print

Win32/mebroot Trojan is a nasty Rootkit, that embeds itself on the MBR (Master Boot Record) of your machine, which initiates itself before any Virus protection can enable. Pretty much all virus protection suites will recognise it, but will not be able to remove it.

Below is a method of removal, which will also fix the damage that has potentially been caused by this trojan:-


Download the latest ComboFix from, let that install the Windows Recovery Console, that you will need to re-write the MBR of your boot disk

When Combofix reboots your machine, quickly choose the windows recovery console from the boot menu.

Once in recovery console, choose your windows installation by entering the relevant number

Once the command prompt has appeared, type fixbmr and press enter, this will replace the MBR on your default boot device.

Once complete, reboot, and rull a full scan with your upto date virus protection