-----------------------------------------------------------------------------
 WildList Notes - (c)1995 Joe Wells - c1jwells@watson.ibm - wildlist@aol.com
-----------------------------------------------------------------------------

Virus Name:  Stoned.Standard

Aliases:     New Zealand, Marijuana.

Infects:     MBR on first hard drive. DOS boot sector on floppy disks.

Disk Size:   1 sector.

Location:    MBR or boot sector. Original MBR is stored at cylinder 0, 
             sector 7, head 0. On floppy disks at cylinder 0, sector 3, 
             head 1. 

Memory Size: The virus reserves 2k of memory by modifying the available
             memory word at 40:13. On a 640k system the value will be 
             changed from 280h to 27Eh. Chkdsk will report 653312 bytes 
             (638k) of memory free.

Location:    In 2k reserved at top of conventional memory.

Special:     [none]

Effects:     When triggered the virus prints part of its message (see below).

Trigger:     On booting from an infected floppy, there is a 1 in 8 chance 
             that the message below will be displayed.

Messages:    "Your PC is now Stoned!" is displayed. The rest of the message,
             "LEGALIZE MARIJUANA!" is not. Both are visible in an infected 
             boot sector or MBR.

Bugs:        The virus infects all floppies as though they are 360k 
             diskettes.

Origin:      Wellington, New Zealand in 1987.

Notes:       The virus overwrites the sector at cylinder 0, sector 3, 
             head 1 on floppies. On 360k diskettes this is the last sector 
             of the root directory, but on other diskette formats this is 
             earlier in the root directory. For example, on 1.44m diskettes, 
             the second directory sector will be overwritten. This greatly 
             increases the risk of lost data. 


