Strong Security from the Enterprise to the Edge

MBRguard Support

What is MBRguard?

It prevents unauthorized changes to the master boot record (MBR) of a Windows computer to block malware attacks such as variants of KillDisk.

MBRguard will be integrated with our AppGuard, AppGuard Enterprise, EdgeGuard and Managed EdgeGuard security software products.

Stand-Alone Applet 

MBRguard is available as a stand-alone protection so that it may be exposed to diverse computing environments prior to its integration into AppGuard, AppGuard Enterprise, EdgeGuard, and Managed EdgeGuard”.  It has been in field testing since July 2009 with no reports of adverse conflicts.  However, conflicts are still possible and users, particularly with numerous security software products on the same PC, ought to exercise typical back-up/restore precautions.  The point and click installation automatically generates a system restore.

The minimalist approach of this applet provides highly effective protection against the MBR write operations of KillDisk, Mebroot, and numerous other malware attacks, some of which implant highly sophisticated Rootkit technology that evades conventional detection, some are practically undetectable.  MBRguard simply blocks without prompting end-users.  There is no GUI and it provides no alerts, these will be accommodated when integrated with our endpoint security products.

SHA1 Checksum: 151a98affad830f88cf05f19a86a4b58b04bf53c
File Size: 4.95 MB (5,199,573 bytes)

 

Supported operating systems:

  • Windows XP SP2/SP3 32-bit
  • Windows Vista SP0/SP1 32-bit
  • Windows 7, 32-bit

Note: MBRguard was initially named BootGuard and is labeled as such in Windows Add/Remove Software Control Panel and its driver is named btguard.sys.  Uninstalling MBRguard can be completed via Windows Add/Remove Software Control Panel.

 

Legal Note
Participants use the binary, referred above as MBRguard, at their own risk. MBRguard is the property of Blue Ridge Networks, Inc. Unauthorized distribution of the MBRguard binary is unlawful. Use of MBRguard after field testing is completed, as indicated by the removal of this web page from this website, is authorized as a courtesy to participants but Blue Ridge Networks reserves the right to withdraw that authorization.