None of this really matters. An article about Ken Thompson might be interesting. Talented writers produce non-fiction like this every day.
If they want an article published, they contact an editor at a magazine and send in a one-page proposal detailing why the article would be interesting and why they should be the one to write it. If they want a book published, same thing, only with a longer summary, a chapter, and breakdown of the rest of the book. They would certainly do lots of preliminary research and contact the important people first to make sure they’ll still alive, that their memories correspond to what the piece wants to say, and that they’re willing to cooperate.
Or you could just write it and throw it up on your website or blog. Nobody would read it, though. That’s the problem. Professional takes work, which is why books and magazines continue to be printed; they’re guaranteed that more effort has been put in and the result is more worth the time to read. Otherwise they could just Google “first computer virus” and read the 200,000 hits that already come up.
Please don’t order people out of the thread. You’re not their boss. Just respond to who you want to respond to and perhaps try to politely steer the thread in the direction you would prefer.
I have looked at each of the viruses on Wiki, and technical forensic virus sites, created before 1986. I read paragraphs about each. I am familiar with modern virus architecture. In the early 90’s I read 3 complete books on the topic.
None of them before 1985-6 seem to do anything to effect DOS on a PC, other than writing or displaying text. None of them are memory resident. This makes them quite different from a modern virus. I think this is significant on a PC. Please correct me if I’m wrong with a link. Maybe a new one was documented since then. I re-read a few PC virus descriptions yesterday before 1986, all of them familiar from decades ago. I’d like to be proven wrong if it is the truth!
A virus that is not memory resident cannot write to a disk to reproduce itself if there is only 1 drive in the system. It executes from that disk when it is booted or run and there is nowhere for it to go from there, unless there is a hard drive attached to the system. The first viruses did not support hard drives on a PC. Many of my friends did not have hard drives in 1985. Even with 2 floppies usually only one of them was bootable at any given time. Being memory resident and writing to hard drives was critical to its survival in the wild. The cookie monster virus did not have this ability, but it continued because people thought it was cute!
So you can see that being memory resident is a major innovation mentioned in a university paper written after our development was begun. It was difficult to achieve this without crippling DOS, due to the limited amount of memory available. The entire code fit into 1 sector on a disk. Not one cluster but 1 sector. If you don’t care or recognize this than maybe you don’t understand?
The concept was invented before the PC, but the term was created for the PC. That is exactly what we’re talking about! There was no TSR virus before 1986. That is simply what I’m saying.
There is a virus that is first to remain in memory. Nobody is debating this online. A commercial TSR executable is huge in comparison. To do this “properly” required 16k+ of code on a PC for it to be stable. We used less than 200 bytes. Can you spot the difference?
The Elk Cloner virus was written in 1982 by Rich Skrenta (15 at the time), and was still in the wild about ten years later. It was a boot sector virus, spread by infected floppies. It would stay memory resident and infect subsequent floppies put in the machine. In the days before hard drives were common, people would swap floppies around a lot, so this was pretty effective.
So no, if your friend is not Rich Skrenta he was not the first with either memory resident or a single disc sector virus, or with one that got into the wild and remained active. Elk Cloner affected Apple IIs. According to the second article I linked above, the first virus that affected DOS computers and that got into the wild was written by two brothers in Pakistan.
Sorry for the misunderstanding. Please try again. I should have specified IBM PC. It is actually much easier to do what he did with an Apple. I did something similar by creating a boot menu that resides in the boot sector. It would copy itself to other disks with the press of a key. Many people thought of this simultaneously without knowledge of the others existence.
The Elk Cloner virus only copies itself and displays text. Nothing more. At least mine had a menu! There was even an option to hide it when booting.
The Pakistan virus only writes text. It doesn’t do anything else. The Brain was not memory resident and does not write to hard drives.
You clearly don’t understand this subject. All code executes from memory, not disk. TSR is a term invented for DOS because it didn’t originally have this capability, necessary for any useful modern OS. And of course modifying the boot sector is nothing special anyway, that’s how you change an OS on a simplistic machine. Your friend may have created a computer virus, but this had been done frequently before 1986 in all sorts of computers. Releasing a PC virus ‘into the wild’ before that had no meaning because there was so little interconnectivity, but there was malware that had made it’s way into distribution disks and were appearing in bulletin board download. You may have a perfectly good story to tell, but your claim of being the first to do something significant has as much meaning as the #1 hit claim applied to all network primetime shows.
So your friend wrote the first IBM PC virus that was memory resident and did more than display text, but not the first virus, or the first IBM PC virus, or the first memory resident virus, or the first virus to do more than display text. If it’s a good story it might be interesting to some but if you have to keep redefining “first” to exclude others, at some point you’ll have defined a catagory so narrow that it will inspire limited interest.
As an outsider without a dog in this fight, I have to say that the more you need to narrow down what “first virus” means, the less interesting it becomes.
“It was the first virus. Well, the first that did anything. Anything in the wild, I mean. With resident memory. No, I meant on IBM PC resident memory…”
TSRs never needed to be 16k commercial executables. You can call INT 21H from a small com program just as readily. The print spooler that shipped with every copy of MS-DOS was just such a program, as I recall. Here’s some code for a TSR that’s even smaller and predates your claim by three years. This example does not require 16k. What about it do you consider “improper” or unstable?
You clearly don’t understand what I said. The S in TSR stands for Stay. I wrote one of the first commercial TSR’s in 1985. The first memory resident virus resided in EXE files, not only the boot sector which was also tried. There is a difference between executing in memory like all program do, and residing in memory, Staying, like the first virus to do so. I’m guessing you weren’t even born in 1986 We had a LAN that was used by every student in 1985. 4000 usernames. We had a variant that replicated this way as well, before any other existed. But much more success leaving the campus via floppies, of course.
We had a LAN that was used by every student in 1985. 4000 usernames. We had a variant that replicated this way as well, before any other existed. But much more success leaving the campus via floppies, of course.