Affected Operating Systems
Recovery Instructions:
Please follow the instructions for disinfecting master boot record viruses that store the boot sector.
Troj/Mbroot-E can be disinfected from Windows using SAV32CLI or by using the Sophos Bootable Anti-Virus CD.
If disinfected from Windows, the rootkit may rewrite the infected MBR when the computer is shutdown or restarted.
The fixmbr utility in the Windows Recovery Console can also be used to restore the original MBR.