Popureb is a rookit for the Windows platform that affects the Master Boot Record (MBR) of the infected disk. While it is technically inferior to other MBR-based rootkits with respect to reliability and self-protection techniques, Popureb has received significant media attention recently. This technical paper describes the threat, explains remediation and is intended to dispell any lingering myths regarding its operational abilities.
Download 'Popureb - A small rootkit with a big reputation'
Mike Wood, Michele Freschi and Ahmed Zaki are Threat Researchers for SophosLabs, Sophos, Inc. Download now
By Mike Wood, Michele Freschi and Ahmed Zaki, SophosLabs, Sophos Inc.