New Backdoor Trojan Kills Windows Boot Process

[RicheemxX]

This could be one scary virus

"A recently discovered backdoor sample (detected as Backdoor:Win32/Yonsole.A) can accept and execute a command from a remote server to modify the Master Boot Record (MBR) on the affected machine," Feng said. "The modification to the MBR is like the old "Stoned" virus for DOS. However, in this case, the MBR does nothing but display a banner in the center of the screen and freeze the PC. We detect the new MBR as Trojan: DOS/Yonsole.A."
New Backdoor Trojan Nukes Windows Boot Process

more detail from MS via technet

[Taxmancometh]

Prevention
Take the following steps to help prevent infection on your computer:

*
Enable a firewall on your computer. Done! Anyone who suggests just SPI is all you need is a bone head.

*
Get the latest computer updates for all your installed software. Except for MS. Use caution when updating. ..sides effects will be known.
*
Use up-to-date antivirus software. Preferably one with a renowned solid engine. Antivirus programs very in detection capability month to month...
*
Limit user privileges on the computer. No brainier here. Especially with kids
*
Use caution when opening attachments and accepting file transfers. If you don't know why you would receive it, then you have no reason to open it...
*
Use caution when clicking on links to Web pages. The cumbersome Noscript for Firefox is great.
*
Avoid downloading pirated software. A virtual machine is great for p2p. (The legal stuff of course) And if it has several hundred seeds, then it's probably alright anyway
*
Protect yourself against social engineering attacks. Social engineering attacks?? This is where you have too much time on your hands. These social network games, etc are a treasure trove for malware. Just like the porn sites.
*
Use strong passwords. PWDhash for Firefox!

[howste]

Where can I download this "common sense and logic" you mentioned?

[Taxmancometh]

[Taxmancometh]

Looks like Avira already had the detection pattern in the database back in February.

BDS/Agent.AAMH - Summary

Of course I'm going by Mccarfree's alias "Generic BackDoor "

This might be it: TR/Spy.ZBot.aqwe.80 - Summary


Be kinda funny if someone created a boot screen that looked like this and uploaded to one of the wincustomize type sites.