|Type||Boot sector virus|
|Place of Origin||United States|
|Infection Length||1 boot sector|
When a disk infected with Pentagon is booted, the virus will become memory resident, occupying 5 kilobytes of RAM. The virus also contains two files, one named 0F9H (the number 249 in hexadecimal) and another named PENTAGON.TXT. 0F9H contains viral code that would not fit in a single boot sector as well as the original boot sector of the infected disk. PENTAGON.TXT is simply an empty file.
It infects 360 kilobyte floppies. Infected floppies can be identified by the string "HAL". It searches for and removes any copy of the Brain virus it finds. Parts of Pentagon are encrypted.
The string "HAL" found in the virus is the name of a fictional computer in 2001: A Space Odessy as well as the letters "IBM" each shifted back through the alphabet. The virus was thought to be extinct in the wild. Though nematodes have existed since the first malware, Reaper, Pentagon is the first nematode virus.
Patricia Hoffman. Online VSUM, Pentagon Virus.