3 ms·
https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html https://www.fireeye.com/blog/threat-research/2015/12/fin1-ta... - it's an MBR
by voltagex_ 11y ago
https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html https://www.fireeye.com/blog/threat-research/2015/12/fin1-ta... - it's an MBR (UEFI?) virus. "New", but not new.
- acqq 11y ago"The installer will install the bootkit on any hard disk that has a MBR boot partition, regardless of the specific type of hard drive. However, if the partition uses the GUID Partition Table disk architecture, as opposed to the MBR partitioning scheme, the malware will not continue with the installation process." It's a MBR attack and the modern Windows systems aren't typically MBR anymore.
- waspleg 11y agoI don't know about you but my primary system disk is an SSD, which is far less than 2 TB... Guess what kind of partition it is (and guess which one it came with)? I've found AOEMEI (?) to be good for converting other partitions from MBR to GPT but their shareware version won't do boot partitions without paying ;)
- baghira 11y agoWindows will not boot in UEFI mode if the partition table is of MBR kind. One must manually enable the BIOS legacy mode, hence the comment on modern Windows systems (younger than 4 years, say).