Brain (1986) was the first PC virus to spread globally, written by Pakistani brothers Basit and Amjad Farooq Alvi who ran a computer store in Lahore.
Technical details:
- Targeted MS-DOS boot sector on 360KB floppy disks
- Infected the boot sector by relocating the original boot sector to another part of the disk and replacing it with its own code
- Modified the volume label to display "(c) Brain"
- Included the brothers' contact info and phone number in the code itself
- Used stealth techniques: when programs tried to read the infected boot sector, Brain would redirect them to the original boot sector location
- Non-destructive payload - didn't corrupt or delete data
Origin story: The brothers created it as copy protection for their heart monitoring software. They wanted to track piracy of their medical app, not spread malware. The virus escaped their local market and became the template for boot sector viruses throughout the late 80s.
Brain pioneered several virus techniques still relevant today: stealth behavior, self-replication via removable media, and embedding creator metadata. It's the ancestor of modern malware, but started as accidental DRM that got out of control.
Technical details:
- Targeted MS-DOS boot sector on 360KB floppy disks
- Infected the boot sector by relocating the original boot sector to another part of the disk and replacing it with its own code
- Modified the volume label to display "(c) Brain"
- Included the brothers' contact info and phone number in the code itself
- Used stealth techniques: when programs tried to read the infected boot sector, Brain would redirect them to the original boot sector location
- Non-destructive payload - didn't corrupt or delete data
Origin story: The brothers created it as copy protection for their heart monitoring software. They wanted to track piracy of their medical app, not spread malware. The virus escaped their local market and became the template for boot sector viruses throughout the late 80s.
Brain pioneered several virus techniques still relevant today: stealth behavior, self-replication via removable media, and embedding creator metadata. It's the ancestor of modern malware, but started as accidental DRM that got out of control.
