Virus Name: 7808
V Status: Rare
Discovery: May, 1991
Symptoms: .COM & .EXE growth; file date/time changes;
"Not enough memory" message
Eff Length: 7,808 Bytes
Type Code: PNA - Parasitic Non-Resident .COM & .EXE Infector
Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep,
IBMAV, NAVDX, VAlert, PCScan, ChAV,
NShld, Sweep/N, Innoc, AVTK/N, NAV/N, NProt, IBMAV/N,
Removal Instructions: Delete infected files
The 7808 virus was received in May, 1991. Its origin and point of
isolation is unknown. 7808 is a non-resident infector of .COM and
.EXE programs. It does not infect COMMAND.COM.
When a program infected with 7808 is executed, the virus will
search the current drive and directory for a .COM or .EXE program
to infect. It will infect the first uninfected .COM or .EXE program,
other than COMMAND.COM, which it finds in the directory. Infected
programs will increase in length by 7,808 bytes. The virus will be
located at the beginning of infected programs. Infected programs
will also have their file date and time in the DOS disk directory
updated to the system date and time of infection.
The first program in the current directory, other than COMMAND.COM,
may also be reinfected by 7808. When reinfection occurs, an
additional 7,808 bytes is added to the file.
Attempts to execute programs infected with 7808 may result in the
message "Not enough memory" being displayed, and the program the
user is attempting to execute terminating. When this occurs, a
program in the current directory will not be infected. Another
symptom of 7808 infection is that programs will take longer to
load when executed due to the virus searching the current disk
directory. Execution of infected programs will also result in
their file date and time in the disk directory being updated.