Tool to sandbox or protect MBR from rootkits

[broughie]

Is there a tool or program which can isolate MBR from rootkit attack aside from using safe practices realtime AV & anti malware progs hips etc
All of latter useless to me when getting zero access rootkit & caro malware wrecking my pc > now using sandboxie but still concerned about rootkits is there anything to block them ?

 

[Petrovic]

Windows 8))
With safe loading at the moment can completely eliminate rootkits, bootkits, vinlokery ICBM
UEFI allows the firmware to implement a security policy.
Safe boot - is a protocol UEFI, rather than a component of the operating system Windows 8.
Safe boot UEFI is part of the architecture of secure boot Windows 8.

 

[Littlebits]

UAC protects the MBR, just don't approve any unknown files without a digital certificate. Learn to utilize UAC.

Don't download files from unknown sources only from trusted software vendors, open-source projects or download sites like Softpedia, MajorGeeks, SnapFiles, DownloadCrew, FileHippo, Filepuma, etc. that scans their files for malware.

Rootkits don't magically appear on your system you have to be the one to download them manually and then manually execute them.

Learn how to avoid fake alert websites by using browser extensions like WOT and Webutation. Use an updated secure browser and keep your browser add-ons like Flash Player updated, disable Java plugin from your browser.

Most rootkits are distributed by fake alert websites offering fake software updates, fake malware scans, cracks and keygens, etc.

If you always only download files from trusted sources you should never be exposed to rootkits.

The best way to block rootkits is your own actions, depending on security software alone will fail you.

Enjoy!!

 

[Moose]

You can try the following software's: for preventing rootkits!

UnHackMe: Paid Software
http://malwaretips.com/Thread-GotD-UnHack-Me?highlight=UnHackMe

Malwarebtyes Anti-rootkit: Free at this point
http://www.malwarebytes.org/products/mbar/

Malwarebtyes Anti-rookit is great and very quick at scanning for rookits

 

[Petrovic]

Malwarebytes Anti-Rootkit -BETA

Kaspersky TDSSKiller Rootkit Removal Utility
http://usa.kaspersky.com/downloads/tdsskiller

Bitdefender Rootkit Remover
http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/

 

[Littlebits]

You can try the following software's: for preventing rootkits!

UnHackMe: Paid Software
http://malwaretips.com/Thread-GotD-UnHack-Me?highlight=UnHackMe

Malwarebtyes Anti-rootkit: Free at this point
http://www.malwarebytes.org/products/mbar/

Malwarebtyes Anti-rookit is great and very quick at scanning for rookits

Malwarebytes Anti-Rootkit -BETA

Kaspersky TDSSKiller Rootkit Removal Utility
http://usa.kaspersky.com/downloads/tdsskiller

Bitdefender Rootkit Remover
http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/

Those are just removal tools after you system has already been infected by rootkits, they will not block rootkit infections and most other security products will also fail to block them if the user manually executes a malicious download.

Thanks.

 

[Deleted member 178]

afraid of rootkits? use the IT Pro method !

reformat every week !

/joke

 

[mag1c]

Appguard is the best program to use.

Blocks MBR Rootkit's from executing, best to set it to lockdown when just browsing and it will block anything.

 

[Ramblin]

now using sandboxie but still concerned about rootkits is there anything to block them ?

Sandboxie doesnt allow drivers to be installed in a sandbox. Most rootkits if not all install drivers. If you keep using Sandboxie, it is not likely your system will get infected by one.

By the way, five years ago, searching for tools to prevent rootkit infections is how I discovered Sandboxie. I think you already found what you are looking for.

Bo

 

[Amiga500]

You cannot beat a restore of a clean image.its quick and effortless.

 

[MalwareVirus]

UAC (ultimate automatic catching) + Sandboxie(trust no one) + SD(stop the detection start the virtualization)

 

[nsm0220]

cis sandbox should do the trick