1. A method of detecting infection in a sector of a mass storage device of a computer, said method comprising: executing emulation software within an operating system of said computer, said emulation software creating an emulated computer within said operating system; reading, from said mass storage device of said computer, bootstrapping code from said sector of said mass storage device into said emulated computer; executing said bootstrapping code within said emulated computer; during said execution of said bootstrapping code, collecting and storing information resulting from said execution of said bootstrapping code; and comparing said stored information to information indicative of malware and outputting a result of said comparing.