Eight Tunes Virus
Virus Name: Eight Tunes
V Status: Rare
Discovered: April, 1990
Symptoms: File growth; music; decrease in available memory
Origin: West Germany
Eff Length: 1,971 Bytes
Type Code: PRsA - Parasitic Resident .COM & .EXE Infector
Detection Method: ViruScan, AVTK, NAV, F-Prot, Sweep, PCScan,
IBMAV, NAVDX, VAlert, ChAV,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: NAV, or delete infected files
The Eight Tunes, or 1971, virus was originally isolated in April
1990 by Fridrik Skulason of Iceland. This virus is a memory
resident generic file infector of .COM, .EXE, and overlay files.
The virus will not infect COMMAND.COM, or .COM files which are
smaller than 8K. After the virus is memory resident, programs are
infected as they are executed. Infected files will increase in
length by between 1,971 - 1,985 bytes.
Available memory will decrease by 1,984 bytes when the virus is
This virus does not cause system damage; however, it is disruptive.
When the virus is memory resident, it will play 8 German folk songs
at random intervals thirty minutes after the virus becomes memory
Known variant(s) of Eight Tunes are:
Eight Tunes-Mod1: Received in October, 1993, this variant is
functionally similar to the original virus. It has been
altered to avoid detection by some anti-viral utilities,
and is not believed to be in the public domain.
Origin: Unknown October, 1993.