Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Win 9x rewriting floppy bootsectors without permission?!

Win 9x rewriting floppy bootsectors without permission?!

Win 9x rewriting floppy bootsectors without permission?!

This forum might not be the perfect place to ask this question but there doesn't seem to be a forum called "Windows: the dark side".
I discovered this piece of weirdness after developing a Y2k capability tester for my company. The program runs from a floppy, executes a virus checker, tests the date rollovers, does a quick scan for a list of applications on the hard drive and writes the results to a file on the floppy. (Since I was testing dozens of systems, I wanted the ability to insert a floppy, run the tests, pull the floppy and look at the results later.) I was also interested in detecting viruses that might be missed by running the checker without a clean boot, so I had my program compare the contents of the floppy boot sector with the contents of an image file.
Guess what... I found one. Everything seemed fine as long as I ran the program after a boot to "Command Prompt Only" but when I tried it under Windows, the alarms went off. My program informed me that the boot sector had been changed and there was a chance of viral infection. I checked the system with every scanner at my disposal and they all turned up negative. So I inspected the "suspicious" boot sector to see what had been changed. It was the OEM ID (4th - 11th bytes).
I wrote a utility to do a little experimentation. I can set the OEM ID under DOS, write protect the floppy, view the original sector under Windows, remove the write protection and watch the OEM ID change as soon as I access the disk.
I can't find any documentation on the reason behind this little Microsoft magic trick.
Does Bill Gates feel that he must own EVERYTHING, including my floppies?
If anyone has an answer, or even a comment, please respond.

RE: Win 9x rewriting floppy bootsectors without permission?!

I can make one suggestion : User IDs

Heard about Word files? The way they're modified when viewed as read-only, and loads of similar suspicious activity.

Bill Gates doesn't want to own your floppies : he just wants to keep an eye on you.

Big Bill is watching you

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close