From: Warrl kyree Tale'sedrin (warrl@blarg.net)
Date: Tue Jun 02 1998 - 02:32:31 MDT
From: ChuckKuecker <ckuecker@mcs.net>
> In IBM PC clones (DOS), the boot sector is only read during boot up. No
> files are read when the disk is inserted unless you execute one from the
> disk. Win 95, etc., I can't speak for.
The above is partially incorrect as applied to magnetic disks (I am not certain
about CDROM formats).
The boot sector actually contains a variety of information, ONE PART of which
is executable code. The other parts include necessary information about the
layout of the disk.
On any attempt to open a file or directory on a disk (or upon detection of a
removable-media change in OSes equipped to recognise this event), the boot
sector is read -- so that the layout information is available to the system.
However, the executable code is *not* executed, except from the boot device at
system boot.
A virus is, of course, executable code. Thus, its presence in a boot sector is
not important unless that boot sector's executable code is in fact executed.
US$500 fee for receipt of unsolicited commercial email. USC 47.5.II.227
This archive was generated by hypermail 2.1.5 : Fri Nov 01 2002 - 14:49:09 MST