Seventh Son Virus

Alias:Seventh Son-284
Strain:Seventh Son virus strain
detected when:October 1991
where:Eastern Europe
Classification:File (COM) virus
Length:284 Bytes

Preconditions

Operating System(s):DOS
Version/Release:
Computer model(s):IBM compatibles
Caroname:Seventh_Son.284

Attributes

Easy identification:The displayed text "Seventh son of a seventh son" can be found in infected programs.

Type of Infection:

Infects only COM files

Infection Technique:
Infection Trigger:Execution of an infected program.
Storage Media affected:Infects any diskette and hard disks
Interrupts hooked:---
Stealth:
Tunneling/Selfprot:
Oligo/Polymorphism:
Encoding Method:
Damage:Permanent damage: --- Transient damage: displays the text "Seventh son of a seventh son"
Damage Trigger:Permanent damage: --- Transient damage: executing an infected program
Particularities:---
Similarities:Seventh Son variants (.332, .350)

Agents

Countermeasures:McAfee Scan,Skulason F-PROT,Solomon FINDVIRU
Standard means:Delete infected files and replace with un- infected originals or backups.

Acknowledgements

Location:Virus Test Center, University Hamburg, Germany
Classification by:Michaela Schroeder, Peter Liem, Doerte Hachfeld, Holger Pres
Documentation by:Holger Prescher, Doerte Hachfeld, Peter Liem, Michaela Schro
Date:20-July-1992
Information Source:Reverse-Engineering of virus code

(c) 1996 Virus-Test-Center, University of Hamburg