| Alias: | Seventh Son-284 |
| Strain: | Seventh Son virus strain |
| detected when: | October 1991 |
| where: | Eastern Europe |
| Classification: | File (COM) virus |
| Length: | 284 Bytes |
Preconditions | |
| Operating System(s): | DOS |
| Version/Release: | |
| Computer model(s): | IBM compatibles |
| Caroname: | Seventh_Son.284 |
Attributes | |
| Easy identification: | The displayed text "Seventh son of a seventh son" can be found in infected programs. |
Type of Infection: | Infects only COM files |
| Infection Technique: | |
| Infection Trigger: | Execution of an infected program. |
| Storage Media affected: | Infects any diskette and hard disks |
| Interrupts hooked: | --- |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Permanent damage: --- Transient damage: displays the text "Seventh son of a seventh son" |
| Damage Trigger: | Permanent damage: --- Transient damage: executing an infected program |
| Particularities: | --- |
| Similarities: | Seventh Son variants (.332, .350) |
Agents | |
| Countermeasures: | McAfee Scan,Skulason F-PROT,Solomon FINDVIRU |
| Standard means: | Delete infected files and replace with un- infected originals or backups. |
Acknowledgements | |
| Location: | Virus Test Center, University Hamburg, Germany |
| Classification by: | Michaela Schroeder, Peter Liem, Doerte Hachfeld, Holger Pres |
| Documentation by: | Holger Prescher, Doerte Hachfeld, Peter Liem, Michaela Schro |
| Date: | 20-July-1992 |
| Information Source: | Reverse-Engineering of virus code |
(c) 1996 Virus-Test-Center, University of Hamburg