Login Register






Thread Rating:
  • 0 Vote(s) - 0 Average


MBRFilter filter_list
Author
Message
MBRFilter #1
MBRFilter is a driver which will lock your MBR to read only which protects you from MBR rootkits and any other malware which may modify the MBR.

This driver will prevent writes to sector 0 on all drives. This can cause an
issue when initializing a new disk in the Disk Management application. Hit
'Cancel' when asks you to write to the MBR/GPT and it should work as expected.
Alternatively, if OK was clicked, then quitting and restarting the application will allow partitoning/formatting.

https://github.com/Cisco-Talos/MBRFilter
[Image: YmmIqHV.gif]
Donations: 1CCR21K2fnu2yAinUTFPsVdY7u4FkjNPs5

Reply

RE: MBRFilter #2
Wonderful contribution.

Although the likely hood of an MBR Infection Is not too common, It's certainly good practice to set It to read only.
Appreciated.
[Image: AD83g1A.png]

Reply

RE: MBRFilter #3
(11-10-2017, 05:26 AM)mothered Wrote: Wonderful contribution.

Although the likely hood of an MBR Infection Is not too common, It's certainly good practice to set It to read only.
Appreciated.

If only they had set the computers MBR to read only in light of the recent Bad Rabbit attack they could have avoided a lot of problems.
[Image: YmmIqHV.gif]
Donations: 1CCR21K2fnu2yAinUTFPsVdY7u4FkjNPs5

Reply

RE: MBRFilter #4
(11-10-2017, 08:45 PM)S3xySmurf Wrote: If only they had set the computers MBR to read only in light of the recent Bad Rabbit attack they could have avoided a lot of problems.

Definitely so.

It's a classic case of "If It ain't broke, don't fix It", however the neglect to "fix" what can avoid/prevent potential problems, Is overlooked.
[Image: AD83g1A.png]

Reply

RE: MBRFilter #5
(11-11-2017, 04:23 AM)mothered Wrote:
(11-10-2017, 08:45 PM)S3xySmurf Wrote: If only they had set the computers MBR to read only in light of the recent Bad Rabbit attack they could have avoided a lot of problems.

Definitely so.

It's a classic case of "If It ain't broke, don't fix It", however the neglect to "fix" what can avoid/prevent potential problems, Is overlooked.

Saying that the whole Petya incident could have been avoided as well but then again, if it ain't broke
[Image: YmmIqHV.gif]
Donations: 1CCR21K2fnu2yAinUTFPsVdY7u4FkjNPs5

[+] 1 user Likes S3xySmurf's post
Reply







Users browsing this thread: 1 Guest(s)