We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:DOS/Gupboot.A
Aliases: No associated aliases
Summary
Trojan:DOS/Gupboot.A is a trojan that overwrites your computer's master boot record (MBR). The trojan is dropped by Trojan:Win32/Gupboot.A.
The overwritten MBR causes your computer to use a malicious copy of "explorer.exe" that is installed by Trojan:Win32/Gupboot.A.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
Additional recovery instructions for Trojan:DOS/Gupboot.A
This virus may cause damage to the master boot record (MBR) . You will need to run the following commands using the "bootrec.exe" tool to ensure a complete repair of your computer:
bootrec /fixmbr
bootrec /fixboot
bootrec /rebuildbcd
For more details on these commands, please refer to Microsoft Security Article KB927392, with specific focus to the options "/fixmbr", "/fixboot" and "/rebuildbcd".
