MS-DOS 6.22 Virus Definition Updates Explained

MS-DOS 6.22 does not include a dedicated utility for automatically updating virus definitions. While the operating system includes built-in antivirus protection through the Microsoft Anti-Virus (MSAV) utility, updating its signature database required users to manually acquire and replace definition files from external sources rather than running a built-in update tool.

The primary antivirus tool bundled with MS-DOS 6.22 is MSAV.EXE, alongside VSAFE.COM, a terminate-and-stay-resident (TSR) program providing real-time system monitoring. Both programs were licensed by Microsoft from Central Point Software, based on their Central Point Anti-Virus (CPAV) product.

Because MS-DOS 6.22 was released in an era prior to widespread consumer internet connectivity and automated background services, there was no native command or background updater to download or install new definitions. Instead, virus definition updates were distributed manually. Users had to obtain updated signature files directly from Microsoft or Central Point Software via bulletin board systems (BBS), online services like CompuServe, or through physical floppy disks.

Updating MSAV typically involved downloading an updated definition package, which contained newer versions of files such as MSAVIRUS.LST or updated core executables, and copying them directly into the C:\DOS directory. Once replaced, MSAV.EXE would recognize the expanded catalog of known virus signatures without requiring any further configuration from the user.