Everything about C Brain totally explained
(c)Brain (the industry standard name being
Brain) is (in its first incarnation written in January
1986) considered to be the first
computer virus for the
PC. It infects the
boot sector of storage media formatted with the
DOS File Allocation Table (FAT) file system. The virus is also known as
Lahore,
Pakistani,
Pakistani Brain,
Brain-A and
UIUC.
Businessweek magazine at the time called the virus the
Pakistani flu.
Description
(c)Brain affects the computer by replacing the boot sector of a floppy disk with a copy of the virus. The real boot sector is moved to another sector and marked as bad. Infected disks usually have three
kibibytes of bad sectors. The disk label is changed to (c)Brain, and the following text can be seen in infected boot sectors:
» Welcome to the Dungeon (c) 1986 Brain & Amjads (pvt) Ltd VIRUS_SHOE RECORD V9.0 Dedicated to the dynamic memories of millions of viruses who are no longer with us today - Thanks GOODNESS!! BEWARE OF THE er..VIRUS : this program is catching program follows after these messages....$#@%$@!!
There are many minor and major variations to that version of the text. The virus slows down the
floppy disk drive and makes seven kilobytes of memory unavailable to DOS. (c)Brain was written by two brothers,
Basit and
Amjad Farooq Alvi, who lived in
Chahmiran,
Lahore,
Pakistan. The brothers told
TIME magazine they'd written it to protect their medical software from piracy and it was supposed to target copyright infringers only.
(c)Brain lacks code for dealing with
hard disk partitioning, and avoids infecting hard disks by checking the most significant bit of the BIOS drive number being accessed; (c)Brain doesn't infect the disk if the bit is clear, unlike other viruses at the time which were totally agnostic of disk partitioning and consequentially destroyed data stored on hard disks by treating them in the same way as floppy disks. (c)Brain often went undetected partially due to this deliberate non-destructiveness, especially when the user paid little to no attention to the slow speed of floppy disk access.
The virus came complete with the brothers' address and three phone numbers, and a message that told the user that their machine was infected and for inoculation the user should call them:
» Welcome to the Dungeon (c) 1986 Basit * Amjad (pvt) Ltd. BRAIN COMPUTER SERVICES 730 NIZAM BLOCK ALLAMA IQBAL TOWN LAHORE-PAKISTAN PHONE: 430791,443248,280530. Beware of this VIRUS.... Contact us for vaccination...
Author Response
When the brothers began to receive a large number of phone calls from people in
United States,
United Kingdom, and elsewhere, demanding them to disinfect their machines, the brothers were stunned and tried to explain to the outraged callers that their motivation hadn't been malicious. They ended up having to get their phone lines cut off and regretted that they'd revealed their contact info in the first place. The brothers are still in business in Pakistan as
Internet service providers with a company called Brain Limited.
It is speculated that the brothers created the virus as a "cute gimmick" to advertise their business.
Variants
Ashar is an older version of Brain. There are six variants where the message is different.
Further Information
Get more info on 'C Brain'.
|
External Link Exchanges
Do you know how hard it is to get a link from a large encyclopaedia? Well we're different and will prove it. To get a link from us just add the following HTML to your site on a relevant page:
<a href="http://_c_brain.totallyexplained.com">(c)Brain Totally Explained</a>
Then simply click through this link from your web page. Our crawlers will verify your link, extract the title of your web page and instantly add a link back to it. If you like you can remove the words Totally Explained and embed the link in article text.
As long as your link remains in place, we'll keep our link to you right here. Please play fair - our crawlers are watching. Your site must be closely related to this one's topic. Any kind of spamming, dubious practises or removing the link will result in your link from us being dropped and, potentially, your whole site being banned. |
