Kaspersky Lab the IT security company has uncovered one new rootkit, malware that contaminates the boot sector of a computer's hard-drive, and dubbed it Rootkit.Win32.Fisp.a.
Says Vyacheslav Zakorzhevsky a researcher at Kaspersky Lab, the said rootkit gets disseminated via Trojan-Downloader.NSIS.Agent.jd, which contaminates end-users' PCs when they attempt at taking down a movie file obtainable from one Chinese pornographic website that's actually phony. Securelist.com published this in news on April 5, 2011.
Apparently, if run successfully, Rootkit.Win32.Fisp.a copies the earlier MBR (master boot record) as also plants a self-generated code (having one encrypted driver) that substitutes the sectors. Thereafter, during the infected PC's startup, the malevolent code runs as also retrieves the real MBR to enable Windows to load as usual.
...
