Popureb A small rootkit with a big reputation
There has been a lot of discussion in recent weeks about some new variants of the Popureb rootkit that clobber your Master Boot Record (MBR).

Initial reports from Microsoft even suggested the only way to recover was to reinstall Windows, which fortunately is not true. But knowing how this rootkit work will surely increase your knowledge.

SophosLabs published a technical paper that looks at the inner workings of Popureb.

Download
http://www.sophos.com/medialibrary/PDFs/technical%20papers/popureb.pdf?dl=true