Security vendors have been criticised for failing to react to the MBR rootkit and offer protection against it.