>So MBR is an ordinary file like any other ?
>
>Is it inside C:/ driver, or outside it ?
No, it's not an ordinary file, or even a part of any partition - it's the first few sectors of the disk.
Even under OSs like WinXP it's possible for processes to access and modify the MBR. This is how some drive-imaging tools work - they modify the MBR so the next time the system boots it loads the disk imaging software, then when the disk imaging software is finished the MBR is changed back so the regular OS loads.
So, if AV software can access the MBR of the boot disk there's no theoretical reason it can't access the MBR of a slave drive as well.
Regards. Al
"Violence is the last refuge of the incompetent." -- Isaac Asimov
"Never let your sense of morals prevent you from doing what is right." -- Isaac Asimov
Neither a despot, nor a doormat, be
Every app wants to be a database app when it grows up
