home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Shareware Supreme Volume 6 #1
/
swsii.zip
/
swsii
/
198
/
DOS6ALL.ZIP
/
Q96557
< prev
next >
Wrap
Text File
|
1993-06-05
|
2KB
|
58 lines
ARTICLE-ID:Q96557
TITLE :MS-DOS: Boot-Sector Viruses on Compressed Drives
--------------------------------------------------------------------
The information in this article applies to:
- Microsoft MS-DOS operating system version 6.0
--------------------------------------------------------------------
Summary:
Boot-sector viruses are activated when you start your computer from
the infected drive (usually drive C) and alter MS-DOS startup code
located in the boot sector of your hard disk. DoubleSpace drives do
not actually have MS-DOS startup code to corrupt; however, if a virus
is detected on a compressed drive, it is likely that the host drive is
also infected.
You can detect and clean viruses from all local drives by using the
following command:
msav /c /l
More Information:
Removing Viruses from Boot Sectors of Compressed Drives
-------------------------------------------------------
In addition to startup code, the boot sector of a hard disk contains
information about the drive layout (including sizes of the drive, root
directory, and file tables). Compressed drives hold this information
in the boot sector; therefore, it is possible that a virus could
corrupt this information.
Which Boot Sector Is Executed During Startup?
---------------------------------------------
If drive C is uncompressed, its boot sector is run during system
startup. If drive C is compressed, the boot sector of its host drive
is run.
What the Boot Sector Does
-------------------------
The MS-DOS 5.0 and 6.0 boot sector startup code does the following:
- Confirms that the system files (IO.SYS and MSDOS.SYS) are the
first two files in the root directory of the drive.
- Loads and executes the first three sectors of the IO.SYS file.
The boot sector is executed by the master boot record (MBR). If you
have more than one partition, the MBR determines which one to run
using the partition table.
Additional reference words: 6.00 change