File Share Encryption

 View Only
Back to discussions
Expand all | Collapse all

Virus Scanner Detects Root-kit / PGP in MBR (Verify PGP MBR Hash)

  • 1.  Virus Scanner Detects Root-kit / PGP in MBR (Verify PGP MBR Hash)

    Posted Mar 02, 2016 08:41 PM

    Hi there, I doubt this is actually a virus, but actually PGP's properity MBR modification. I'd like to verify this so I can tell the virus scanner to leave the MBR alone. 

    I have a hash for the current MBR which is: SHA1: C6189B7468084BDFFFE4D99E338CB27BBAC057A0

    Symantec Encryption Desktop, Version: 10.3.2 MP11

    Windows 7 Ultimate SP1

    P.S I am curious, does PGP detect MBR modification, and what happens if I really am hit by an MBR virus, will I not be able to decrypt my drive, how does PGP safeguard against Evil Maid Attacks? I believe this has been a recent issue in our company recently. :(



  • 2.  RE: Virus Scanner Detects Root-kit / PGP in MBR (Verify PGP MBR Hash)

    Posted Mar 12, 2016 01:24 AM

    How can I get someone to answer this question? It's been 10 days.