Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!mailrus!ames!apple!usc!bbn!ginosko!uunet!mcvax!kth!draken!tut!santra!saha.hut.fi!c37189h
From: c37189h@saha.hut.fi
Newsgroups: comp.sys.ibm.pc
Subject: Re: Request for boot sector information
Message-ID: <23659@santra.UUCP>
Date: 14 Jul 89 14:37:04 GMT
References: <1046@krafla.rhi.hi.is>
Sender: news@santra.UUCP
Reply-To: c37189h@saha.hut.fi ()
Organization: Helsinki University of Technology, Finland
Lines: 9

The string is located at offset 3 ... 0Bh at boot sector and it's filled with
whatever one's format program is wanting to fill it with. Quite often it is 
filled with the name and version number of the manufacturer. You'd better check
if it matches to what a virus changes it to or you'll get a huge number of
strings it may be!

---  
E-mail:  c37189h@saha.hut.fi             *   If you're feeling good, don't  *
UUCP:    ...!mcvax!santra!saha!c37189h   *   worry  -  You'll get over it!  *