Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I see a lot of articals like Indestructible TDSS botnet is spotted in the tech press at the moment, but I have seen nothing about how to detect it. Any one know of any simple tool or test?

share|improve this question
it sits in the master boot record. According to the BBC article this is an area of the disk "rarely scanned by anti-virus products". That gives you an idea of the hysterical over-hyping of this. – Sirex Jul 1 '11 at 11:26
Oh, and don't forget the scary "custom encryption", which is obviously much more encrypted than normal encryption. – Sirex Jul 1 '11 at 11:27
@Sirex: this why I am trying to figure out if this is more that 'hysterical over-hyping' or there is more too this. If there is a problem what can we do to detect it and hence reinstall before it become a critical problem for our net. – David Allan Finch Jul 1 '11 at 11:39
Botnets are in vogue currently, as are lame hacking / ddos stories. It's hard to say what the real threats are currently due to massive over hyping. If it does live in the MBR, it should be detected by normal anti virus soon enough, I think the "indestructible" blarb was more to do with the c&c setup. – Sirex Jul 1 '11 at 12:22
More info for those interested... – Joe Internet Jul 1 '11 at 14:33

See my post here

Look at the EDIT section at the bottom, the Microsoft System Sweeper boot disc will detect and remove the boot sector virus.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.