I recently had an Alert come up on my Norton Security that I have Trojan "Boot.Mebroot" This is what Symantic states about Boot.mebroot "Boot.Mebroot is a detection for a Master Boot Record infected by Trojan.Mebroot." I can find various procedures on the Net and through Norton about removal and Repair of this affliction. I however have found nothing through Microsoft that deals with this "Windows" Threat! Here is a Link: http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2008-010819-3217-99 I could use some advice on this..except for the notice of Infection, I have not experienced any problems with my computer. Thanks

You can refer to Symantec Best Practices for such problems: http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2008-010819-3217-99&tabid=2 You can isolate the infected computers. Perform a full scan on them to remove completely the trojan and then perform a repair install of these computers. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Thanks Mr X, I did as is stated but the Warning still comes up. I put in the Win 7 64bit cd and went to repair Windows then to command prompt and put in bootrec.exe/fixmbr Then it stated that it was performed successfuly restarted and still it comes back... Is this an actual problem with Windows or Norton? No other Anti-virus programs are finding this trojan just Norton..why is that? I would think that if this was as big as Norton states it is, then I would see it discussed in the general web searches and via Microsoft Windows! Thanks anyway Bud

Hi Bidentify, it seems its a False Positive for Symantec Do you have a symantec Log ( of what file clearly being indicated as a Mebroot? ) if so please post a screenshot link or a log here for other people to know.CEH.ECSA.MVP Windows Security

Hello, like MILO said it may be a false positive alert. Personally, I recommand that you contact Symantec Technical Support for assistance. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration