Pentagon
Pentagon
Type Boot sector virus
Creator
Date Discovered 1988.01
Place of Origin United States
Source Language
Platform DOS
Infection Length 1 boot sector
Reported Costs

Pentagon is a boot sector virus from 1988. The virus deletes the Brain virus and predates Denzuko, a more famous and popular virus that does the same thing.

Behavior

When a disk infected with Pentagon is booted, the virus will become memory resident, occupying 5 kilobytes of RAM. The virus also contains two files, one named 0F9H (the number 249 in hexadecimal) and another named PENTAGON.TXT. 0F9H contains viral code that would not fit in a single boot sector as well as the original boot sector of the infected disk. PENTAGON.TXT is simply an empty file.

It infects 360 kilobyte floppies. Infected floppies can be identified by the string "HAL". It searches for and removes any copy of the Brain virus it finds. Parts of Pentagon are encrypted.

Other Facts

The string "HAL" found in the virus is the name of a fictional computer in 2001: A Space Odessy as well as the letters "IBM" each shifted back through the alphabet. The virus was thought to be extinct in the wild. Though nematodes have existed since the first malware, Reaper, Pentagon is the first nematode virus.

Sources

Patricia Hoffman. Online VSUM, Pentagon Virus.

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 3.0 License