nProtect MBR Guard

Status
Not open for further replies.

jamescv7

Level 85
Thread author
Verified
Honorary Member
Mar 15, 2011
13,070
nProtect MBR Guard v2.0.1.4 (Supports Hangul Windows XP, Windows Vista, Windows 7/ added service mode and functions)
☞ http://avs.nprotect.net/FreeAV/NPMBRGuardSetup.exe

※ Writing a reply of error while using nProtect MBR Guard v2.0.1.4 is the fastest way to solve the problem.

※ Our COMPLIMENTARY "nProtect MBR Guard" can protect most of MS Windows MBR sector including Windows XP, Windows Vista, Windows 7 and so on.

More Information
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
Mmm.. I find easily this Softnyx.net web link (WOT: green!): http://gunbound.softnyx.net/Forum/Free_V.aspx?Sn=98620&cPage=9&SearchCate=&SearchValue=

Quote:
:dodgy: 'b​u​y​ ​n​e​w​ ​c​o​m​p​u​t​e​r​,​ ​m​a​t​e​​' :huh:

.. and for avs.nprotect.net link - WOT did 'not know' ..

Yes, use Privatelee search, please ..:idea:
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
.
I think that this blog page about 'nProtect MBR Guard' is a fake page, with malicious content!..

Why?

Look:

* You have this (probably malicious) link for software inexistent officially on the http://www.nprotect.com (which is the clean site!). NO link to MBR Guard on this site .. Then no MBR Guard, yes?..

* Then I'd have to look at the content of this other: en-erteam.nprotect.com blog page with this MBR Guard, and another site: avs.nprotect.net/FreeAV/...

* en-erteam.nprotect.com (Emergency Response Team's nProtect OFFICIAL BLOG) blog PAGE - with this BIG read about 'nProtect MBR Guard' software ( and no comments since 3/15/2011 ?.. and no editor, because 'blogger' there is nowhere here) - I think that this page is a fake page, with malicious content, beware! - because on http://www.nprotect.com site - no link for this strange 'Guard' ..

* in the description about this (probably malicious) .exe link - I see this word: Hangul. COMPLIMENTARY word, OK.?..;)
Also I learn somewhere else that Hangul (also known as Hangul Word Processor or HWP) is exploit! Trojan - exploit! 'Several HVP exploits have been reported.' - In Korea maybe .. On Korean page, not English page ..

* then another site: avs.nprotect.net/FreeAV/... - has some other weird (because .exe executable) links on google .. You have been warned.

I think that this blog page about 'nProtect MBR Guard' is a fake page, with malicious content!..

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

So I invite the experts to decide on this matter, because I'm not expert, but just curious ..
.
 

Tobi

New Member
Jul 7, 2011
190
The official site may not have been updated yet, or they don't plan on adding it. OR you couldn't find it because the site isn't in english. The company, and the blog, are 100% legit. I think you're going a little overboard..

lol :D Hangul (한글) = Korean (e.g. I am learning hangul).
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
.
Thank you, Tobi,

'The official site may not have been updated yet, or they don't plan on adding it.' - Sure, sure ..
'The company, and the blog, are 100% legit.' - The company and blog I'm sure (and WOT too), but I'm not sure about the blog page about this 'Guard', and link .. Not sure, sorry.

But look at this another blog page:
Issues on 2011 and predictions of upcoming 2012: on en-erteam.nprotect.com: http://en-erteam.nprotect.com/2011/12/issues-on-2011-and-predictions-of.html

You see point 9: '9. Hangul (also known as Hangul Word Processor or HWP) exploit' .. then you read:
' Several HWP exploits have been reported.' And: 'In case of HWP document file, malicious file distributors used Zero-Day exploit to attack APT.
Furthermore, general users can hardly recognize whether victim's PC is infected by malicious file or not with its normal content.'
And you see two links:
Hangul (also known as Hangul Word Processor or HWP): http://en-erteam.nprotect.com/2011/11/information-continuous-appearance-of.html
- and another link: [Warning] HWP document file including malicious file: http://en-erteam.nprotect.com/2011/09/warning-hwp-document-file-including.html

Then are many Hangul, I see ..:huh:
.
 

Tobi

New Member
Jul 7, 2011
190
I believe what they are trying to say is that there are malicious files that exploit a vulnerability in HWP (a legit program). So they called it the 'HWP exploit'.
 

savit

Level 1
Apr 9, 2011
120
HWP exploit is most E-mail attack. and my comment is that nProtect MBR Guard is not effective to defend MBR.

HWP Program site - http://www.hancom.co.kr/group.eng_main.main.do
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
.
Hmm .. Is This File Safe? Find information about files on your computer with the Emsisoft Anti-Malware Network - online service: http://isthisfilesafe.com/product/nProtect%20MBR%20Guard_details.aspx

Emsisoft's verdict: Status: Trusted.

To be continued ..

Merry Christmas to you all!:)
.
 

jamescv7

Level 85
Thread author
Verified
Honorary Member
Mar 15, 2011
13,070
Well it looks safely and have a digital signature from the publisher. There are only some issues from other related products about behaving like a rootkit.
 

savit

Level 1
Apr 9, 2011
120
INCA Internet (nProtect) : legality Security Vendor of South Korea - http://global.nprotect.com/index.php

VirusTotal Antivirus Engines

image1uly.jpg
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
.
jamescv7: 'Well it looks safely and have a digital signature from the publisher.'

OK., I stop on this: nProtect MBR Guard: npMBRguard.exe: Emsisoft's verdict: Status: Trusted.

So it's: Trusted.

But the software seems to be in Hangul, so for people in Korea.
Luckily we have some similar MBR scanners in English, I want to do another topic on it.

Oh yeah .. Now I begin to understand a little better now .. the Korean alphabet sorry - Hangul.
Find on the web: 'Korean is the official language of North Korea and South Korea, where it is spoken by about 78 million people. Korean has its own alphabet, called Hangul.':shy:
 

Tobi

New Member
Jul 7, 2011
190
Pfft.. we don't need their verdict! hehe :D

And no not just people in Korea. ;) :p
 

Prorootect

Level 69
Verified
Nov 5, 2011
5,855
Thank you Tobi for your advice, this case is classified!

Of course, many Koreans lives in other countries.

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

* Try the new version of aswMBR.exe (Avast tool) v0.9.9.1120: http://public.avast.com/~gmerek/aswMBR.htm

But always on similar tools - attention on 'FixMBR' button: if you fix, then your disk partitionning return on primary, precedent state of your PC, before your partitionning, and you lost your new partition you maked! If you maked this new partition.
 

yhjeon

New Member
Dec 27, 2011
2
Hi guys, sorry for my late.
I should have come little bit earlier.

I'm John and a translators in INCA internet and all the posts in "http://en-erteam.nprotect.com" was translated from "http://erteam.nprotect.com" by me.
And I came here to clean some rumors floating in this post.

Before give you some words, I have to be proven myself that I'm real.

You can see my business card in this link http://1.bp.blogspot.com/-B9qMN4N9dRU/Tvpnvle1w-I/AAAAAAAAAWg/Jg5SR0doK-4/s1600/real.JPG
on this post
http://en-erteam.nprotect.com/2011/03/get-our-nprotect-mbr-guard-for-free.html
(temporarily uploaded pic of my business card)
And I added my e-mail address on http://en-erteam.nprotect.com/ (ctrl+f : yhjeon@inca.co.kr)

Um. To sum up..

Due to lacking of english translators, we(no especially only me T_T) are suffered to synchronize and translate the stuffs of our works(of course those are written in Korean).
All things are real and official product including our MBR guard and I think we don't have a plan to convert our MBR guard in English version.

Thanks for your interest and throw me some questions as following mail address if you have.
yhjeon@inca.co.kr
 

yhjeon

New Member
Dec 27, 2011
2
Furthermore, it supports 64bit OS
based on (http://www.nprotect.com/v7/down/sub.html?mode=vaccine_view&subpage=4&no=308&page=&field=&field_value=)

*Ver : 3.0.1.4
*MD5 : fde66c9a0d147ebca057da005e384a8c
*Supporting OS : Windows XP/Vista/7 (32/64bit)
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top