Purpose of MSAV in MS-DOS 6.22 Explained

This article examines why Microsoft introduced Microsoft Anti-Virus (MSAV) into the MS-DOS 6 operating system lineage up through MS-DOS 6.22. It covers the surging virus epidemic of the early 1990s, the licensing deal behind the utility, its core technical capabilities, and the strategic reasons Microsoft chose to include native security tools directly inside the operating system.

In the early 1990s, personal computing experienced a dramatic rise in malicious software. Threats such as the "Stoned" and "Michelangelo" viruses circulated globally via shared floppy disks, frequently damaging Master Boot Records (MBR) and corrupting critical file systems. Because standard users lacked basic defenses out of the box, public anxiety regarding data loss was at an all-time high. To make MS-DOS competitive and reliable, Microsoft needed an integrated security solution.

Rather than developing an antivirus engine from scratch, Microsoft licensed a streamlined version of Central Point Anti-Virus (CPAV) from Central Point Software. This utility debuted in MS-DOS 6.0 and remained a core diagnostic utility through the final standalone release, MS-DOS 6.22.

The primary purpose of MSAV in MS-DOS 6.22 was to provide routine on-demand scanning and removal of known file and boot sector infectors. Users could execute the utility from the command line or through an intuitive, menu-driven text user interface (TUI). MSAV scanned executable files, memory, and boot sectors, automatically cleaning or deleting infected payloads before they could execute.

Beyond signature scanning, MSAV introduced integrity verification. The program created hidden baseline files named CHKLIST.MS inside scanned directories. These files contained checksums of executable files, allowing MSAV to detect unauthorized changes, accidental corruptions, or zero-day polymorphic viruses that lacked explicit detection signatures.

MSAV also worked alongside VSAFE.COM, a terminate-and-stay-resident (TSR) program included in MS-DOS. While MSAV handled manual scans, VSAFE provided real-time memory monitoring that intercepted suspicious behaviors, such as attempts to format hard drives, overwrite boot records, or modify executable files.

Ultimately, introducing MSAV gave MS-DOS 6.22 users baseline security without requiring expensive third-party utilities like Norton AntiVirus or McAfee ViruScan. By providing built-in virus detection, integrity checking, and real-time execution monitoring, Microsoft protected user data during an era of expanding file-sharing risks and solidified MS-DOS as a self-sufficient operating environment.