FANDOM


Smallwikipedialogo
Most of this page uses content from Wikipedia. The original article was at Pogue. The page may have contained some inaccurate or outdated information, so please edit it so it contains better information.
The list of authors can be seen in the page history. As with Malware Wiki, the text of Wikipedia is available under the Creative Common Attribution-ShareAlike 3.0 License.
Remove this template when most of the Wikipedia content has been removed or the Wikipedia information is outnumbered by non-Wikipedia information.

Pogue is one of the early viruses to use the Dark Avenger Mutation Engine and was not written by Dark Avenger himself. It is also notable for playing music at certain times. Masud Khafir, Its creator went on to create the first Windows virus. This virus contains code from other viruses by Dark Avenger and TP, including 512, Eddie, Sevensthon, and Yankedoodle. It was created by Masud Khafir, who would later that year create Winvir, the first Windows virus, and the file-compressing Cruncher. Probably because it is an early virus to use the Dark Avenger Mutation Engine, some virus researchers believed this virus originated in Bulgaria.

Payload

Pogue becomes memory resident when executed. It installs itself near the top of memory below the 640K DOS boundry. In memory, the virus consumes 9,728 bytes of memory.

Files with a .com extension are infected when they are executed, opened or copied. If an uninfected file is copied, both the source and the new file will be infected. It avoids infecting COMMAND.COM by ignoring any file beginning with the three letters COM. It appends its code to the end of the files resulting in a file from 2,973 to 3,850 bytes longer.

Pogue encrypts itself on most infected files. On a few files, the text "Pogue Mahone!", "TNX2DAV"or "Pgoue Mahone!" will be visible if they are unencrypted.

If the time is between 8:00 and 9:00, the virus will play music through the system speaker.

Name

Pogue gets its name from the name it places in the files it infects. "Pogue Mahone" is a spelling corruption of the Irish Gaelic phrase "póg mo thóin", meaning "kiss my a**". In 1996, an Irish band known as "The Pogues" wrote a song named "Pogue Mahone". The virus predates the song by four years, but there seems to be no link between the two. There is also an Irish restaurant and pub in Toronto with the name "Pogue Mahone". In spite of the rather rude name, the bar appears to be a family place and even has a kids menu.

The word "Pogue" by itself also has a number of meanings. It is a fairly common family name. Pogue was the name of a deceased terrorist on the 1990's TV series La Femme Nikita in the episode Slipping into Darkness. It is also a derogatory term used by frontline soldiers for rear support troops.

Sources

Patricia Hoffman. VSUM, Pogue Virus.

40Hex, Number 7, Volume 2, Issue 3, VSUMX 9204

Trident. Interview with Masud Khafir

James Christopher Monger. AllMusic, "The Pogues, Pogue Mahone."