In order to properly detect a BOOT Sector virus, we really should have a
diskette with the virus on it.

This can be accomplished by FORMATing a floppy on the infected system.
Use the FORMAT option of '/S' to cause the minimal DOS system files to
also be copied to that diskette.

The reason a diskette is needed, is that BOOT Sector viruses most often
hide the majority of themselves on a section of the diskette that DOS can
*NOT* read without using special code.
   (Technically, this area is beyond the normal 80 tracks of a 1.44M
    diskette.  Normal track numbers are 0 to 79.  A BOOT sector virus
    hides its code on tracks 80 & 81)

If you do not create a diskette to mail to us, we will not be able to
replicate the BOOT Sector virus and we cannot create a detection/removal
for it.

We have tested many 'diskette' image creation programs and have not found
any that can include those hidden tracks (80 & 81) in their image.

There is utility that we use on diskettes that may read the contents
of these tracks.  It is a simple DEBUG script that reads 36 sectors
from those tracks into a file that can then be included with any
image you create.

Please be aware that this is not as reliable as using the infected
diskette itself.
