BetaArchive Logo
Navigation Home Database Screenshots Gallery Image Uploader Server Info FTP Servers Wiki Forum RSS Feed Rules Please Donate
UP: 17d, 4h, 37m | CPU: 43% | MEM: 5526MB of 11705MB used
{The community for beta collectors}

Post new topic Reply to topic  [ 4 posts ] 
Author Message
 PostPost subject: The AMIBIOS Happy Birthday Mystery        Posted: Mon Aug 19, 2019 5:55 pm 
Reply with quote
User avatar
Offline

Joined
Sat Sep 01, 2018 1:16 pm

Posts
21

Location
Italy

Favourite OS
OS\2 Warp 4.5
Over the years, word has floated around the computer industry that some sort of corruption or errant code present in AMIBIOS in the 1993 – 1994 time frame would force computers to play the "Happy Birthday" song through the computer speaker on boot up. Extant reports generally indicate that this behavior could be interrupted and normal boot operation would resume by hitting one or more keys on the keyboard. Notably, one key component of this legend is that it would happen only once a year on the same date of November 13, which points to some hidden significance.

AMI says that's fake because someone said it used the sound card, but it's possible that it used the onboard beeper speaker,

so 100% fake or not? :$

_________________
Image

C'è solo l'Inter, AMALA!


Top  Profile
 PostPost subject: Re: The AMIBIOS Happy Birthday Mystery        Posted: Mon Aug 19, 2019 6:40 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Sun Aug 12, 2012 4:33 pm

Posts
2007

Location
Czechia
I haven't heard of BIOSes playing specifically "Happy Birthday" and the Internet seems pretty vague on that.

However, the Microsoft knowledge base documents a post-1997 Award BIOS feature that plays music through the PC speaker upon detecting a CPU fan or power supply failure under the awkwardly named Q261186: Computer Randomly Plays Classical Music.

_________________
AlphaBeta, stop brainwashing me immediately!

Image


Top  Profile
 PostPost subject: Re: The AMIBIOS Happy Birthday Mystery        Posted: Tue Aug 20, 2019 3:44 pm 
Reply with quote
FTP Access
Offline

Joined
Wed Dec 11, 2013 3:24 am

Posts
217

Favourite OS
Pencil and paper
The authoritive article on this seems to be this f-secure document:

https://www.f-secure.com/v-descs/birthday.shtml

Quote:
Summary

This is not a virus.

There is a a large set of trojanized AMI BIOS chips going around which halt the machine during boot-up on the 13th of November and play 'Happy Birthday' from the PC-speaker until you press a key.

The BIOS version is "M82C498 Evaluation BIOS v1.55", dated 04/04/93.

Do note that it's not a virus - it will not replicate anywhere from an affected machine.

If you have this problem, contact your hardware vendor for a BIOS replacement.


So if you can find a PC with this specific BIOS revision, you should be able to replicate it. Given the name, it sound like this revision should not have been on production computers... but we all know how that goes.


Top  Profile
 PostPost subject: Re: The AMIBIOS Happy Birthday Mystery        Posted: Wed Aug 21, 2019 1:40 pm 
Reply with quote
Donator
User avatar
Offline

Joined
Tue Aug 05, 2008 8:45 pm

Posts
743

Location
Two lefts and a diagonal sidestep from where you are.

Favourite OS
Windows 7 M3 (6801)
I found some additional info on this:
Quote:
There is a report of the following nature: You are supposed to contact
the chip company to get this resolved.

(Credit for this report goes to Jakub Kaminski, CYBEC.)

[There are trojanized BIOS chips out there]

The sticker on the trojanized BIOS chip says:
AMIBIOS
AMERICAN MEGATRENDS
486DX ISA BIOS (c) 1993
AB 3756612

The next three faulty chips (all with Flash ) had numbers (telephone report):
AB 3756271
AB 3756631
AB 3738981

The one that suppossed to be clean is (telephone report):
AB 3800510

So, it looks that there is at least 17650 trojanized systems around.

The easiest way of identifying the trojan is:
- change date to 13th of November (year doesn't matter)
- reboot PC

After displaying messages simmilar to the ones below, you'll here the tune.

Cache in 2-Bank!
33.06x2 MHz CPU Clock
Intel SL CPU Detected
(stops and plays here)

The significant ASCII strings inside BIOS area:
F000:0060
Date:-04/04/93 (C) 1985-1993,AMI
American Megatrends Inc.,All Rights Reserved...

F000:2DFA
M82C498 Evaluation BIOS v1.55

F000:8150
486 BIOS 5.00-2.1

F000:FF59
(C)1992AMI,404-263-8181

Jimmy Kuo
Norton AntiVirus Research


Also, apparently it was done by a disgruntled employee at AMI.

_________________
My Mixer stream page


Top  Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 




Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  

All views expressed in these forums are those of the author and do not necessarily represent the views of the BetaArchive site owner.

Powered by phpBB® Forum Software © phpBB Group

Copyright © 2006-2019

 

Sitemap | XML | RSS