Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

How to remove MBR Rootkit?

Malicious code found in Master Boot Record of disk MBR (0x81).
Infection: Rootkit.MBR.Azusa.A (Boot image)
Action: failed.

Best Answer


  • etomcatetomcat Posts: 1,312



    Please create an image file of the affected disk part and submit that to the F-Secure Virus Lab at:


    They should be able to determine if it is a false alarm or a real incident and also suggest how to fix it.


    Note: choose and fill out the More Details... part also, else you won't get a response.


    Best Regards: Tamas Feher, Hungary.

This discussion has been closed.