Computing.Net > Forums > Security and Virus > Boot security question

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Boot security question

Reply to Message Icon

Name: Kaldec
Date: August 25, 2003 at 11:43:15 Pacific
OS: Windows 9x
CPU/Ram: P3/64Mb
Comment:

At the boot process, is there any setting in the CMOS (or elsewhere) which can check on the integrity of the MBR BEFORE the MBR is loaded ? I have heard of applications which can check that the MBR is OK before executing the IPL code in the MBR. If the MBR is not OK the application can change it into a "known good" copy stored elsewhere on the disk and then boot from it. But is this possible ? How ?



Sponsored Link
Ads by Google

Response Number 1
Name: lloyd33
Date: August 25, 2003 at 16:34:20 Pacific
Reply:

The BIOS would have to support that feature. Go into the setup by hitting whichever key you have to hit (usually del, F1, or F2) when your computer first boots and see if you have anything in the menu about checking the MBR. If not, I don't believe it would be possible on that computer without changing out the BIOS. I could be wrong on this, but I seriously doubt that any kind of 'application' would be able to execute machine level code immediately following POST and before reading the MBR. That's pretty much a hard-wired area left to the ICs on the motherboard.


0

Response Number 2
Name: anonproxy
Date: August 25, 2003 at 17:50:37 Pacific
Reply:

I am sure there are systems which store flash copies of the MBR (not your average PC). That said, the whole boot sequence is a chain and it is very hard to step back in the chain to fix anything (or look too far ahead). It is in fact in the best interests of everyone (including hackers and virus writers) to leave the MBR alone - the more abstract components of the OS are far easier to hide within and manipulate. Corruption is rare.

The applications you have heard of most likely implement a simple step-through precedure, which a lot of systems (especially older ones) performed and reported on screen. This ensures that the MBR is ordered properly, and if an OS is found, the BIOS prints OK. Norton DiskDoctor can be set to run through the MBR and partition tables. Other than that, there are anti-virus programs which check the MBR at boot.



0

Response Number 3
Name: hylian_lynk
Date: August 25, 2003 at 18:14:31 Pacific
Reply:

Some Amibios have a trend chipaway virus scanning chip built into it. However it puzzles me why you want to scan mbrs from bios, any decent antivirus will check the integrity of your mbrs on boot.


0

Response Number 4
Name: lloyd33
Date: August 26, 2003 at 08:55:17 Pacific
Reply:

Hylain_lynk has a very good point. There really is no need to scan your MBR from the BIOS. I mean, your system is either going to boot or its not. Get a CD burner and make backup CDs of your hard drive's contents. That way you can sleep better at night and stop worrying about boot sector viruses. If you don't back up your important data, someday your hard drive is going to fail, virus or not, and then the computer tech is going to tell you that he has no choice but to FDISK your drive and reformat it. Save yourself a lot of trouble.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Boot security question

Security Question for Internet www.computing.net/answers/security/security-question-for-internet/18626.html

Virus protection, security questions www.computing.net/answers/security/virus-protection-security-questions/493.html

Security Question www.computing.net/answers/security/security-question/27360.html