NEWS FROM THE LAB - Monday, March 31, 2008

Shedding (Black)Light on the Master Boot Record Posted by Antti @ 13:47 GMT

A while ago we blogged about the MBR rootkit, which has been getting attention from all security vendors. We're glad to inform you that the latest version of the F-Secure BlackLight standalone rootkit scanner now detects MBR rootkit infections.

BlackLight detecting MBR rootkit

BlackLight has stood the test of time ever since it was released in the beginning of 2005. A new rootkit technique that has been able to evade detection has been a very rare event. The MBR rootkit is quite different from other rootkits we've seen over the years, so we had to add completely new technology into BlackLight to detect it successfully.

You can download the standalone BlackLight here.