Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!unix.cis.pitt.edu!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: AMBASE%RUG.NL@CUNYVM.CUNY.EDU
Newsgroups: comp.virus
Subject: BOOTCOMP.ZIP - Use BIOS-ints to compare bootsector with saved (PC)
Message-ID: <0002.9102131854.AA05691@ubu.cert.sei.cmu.edu>
Date: 11 Feb 91 04:36:00 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 12
Approved: krvw@sei.cmu.edu

Summary: Reposted by Keith Petersen

I have uploaded to SIMTEL20:

pd1:<msdos.virus>
BOOTCOMP.ZIP    Use BIOS-ints to compare bootsector with saved

This package uses the original BIOS interrupts to get the "current"
bootsector and partitiontable and compare it with a previously saved copy.
Since the original interrupts are used, no virus can mislead the program.

Arjen Merckens (ambase@rugr86.rug.nl)