Warning -- a new virus is making its way around the Internet. The virus, dubbed Mebroot, lodges it self in the Master Boot Record (MBR), a part of the hard drive responsible for loading the operating system, where it is out of the reach of most anti-virus software.

The virus itself doesn't actually harm a PC, but it does load other software on the computer, including key-loggers that are triggered when a user visits any of 900 financial institutions' Web sites. The virus then captures the user's log-on information and sends it back to the virus writers, who specialize in stealing confidential information.

The virus is classified as a root kit, meaning it hijacks the administrator functions on the computer and evades detection by normal scanning methods, in this case by hiding in the MBR. Few anti-virus programs can detect the virus, and none can remove it. Because of its location in the MBR, the virus cannot be removed once the computer has been booted.

That said, an independent company GMER has developed software that can scan for and remove the rootkit.

Credit :

http://www.switched.com/2008/01/14/n...als-bank-data/

AOL - news.

That's why you also use a firewall. The firewall will block the trojan from being able to "talk" to the "bad guys".

Some firewalls work and some don't. That's why people come up with new virus to even break in a firewall etc.

They talk to the "bad guys" via your mail (SMTP PORT 25 or POP3 PORT 110) I guarantee your firewall does not block those ports. You ISP may block one of the above and force you to use their servers but this is not always the case. Just DONT download and run anything that is not familiar to you!

not always

Actually, many Anti-Virus programs can scan your master boot sector but require a restart. It will scan during your boot up, and take about 5 minutes depending on size of your drive and speed of your processor.

For a start good topic whoever started it. A rootkit also has the capabilities to run below processor level. Tojans and rats also can be made quite easily to not get detected either by using a binder and to put 2 files together or by hexing the software. virus's are only picked up once the signatures have been added to the AV. If i was to write a virus today myself then unless it was made public the signature would not be available or picked up for some time. Also a lot of people think Norton is the dogs ....Dinner to be polite but testing has proved otherwise. All its good for is hogging resources. I recommend kaspersky 6 or nod 32. Dont use windows firewall, if you want a free one goto zonelabs and download zonealarm.
Also good programs to have to keep your pc running nice and fresh are Spybot search and destroy, CCleaner, and Adaware SE Personal. You can also look for Rootkit removal tools like Uunhackme. If all processors are running normally you could always scan your drive with a linux live cd like knoppix.

Hope this clears a few things up