7808 Virus

Virus Name: 7808 Aliases: V Status: Rare Discovery: May, 1991 Origin: Unknown Symptoms: .COM & .EXE growth; file date/time changes; "Not enough memory" message Eff Length: 7,808 Bytes Type Code: PNA - Parasitic Non-Resident .COM & .EXE Infector Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV, NAVDX, VAlert, PCScan, ChAV, NShld, Sweep/N, Innoc, AVTK/N, NAV/N, NProt, IBMAV/N, LProt Removal Instructions: Delete infected files General Comments: The 7808 virus was received in May, 1991. Its origin and point of isolation is unknown. 7808 is a non-resident infector of .COM and .EXE programs. It does not infect COMMAND.COM. When a program infected with 7808 is executed, the virus will search the current drive and directory for a .COM or .EXE program to infect. It will infect the first uninfected .COM or .EXE program, other than COMMAND.COM, which it finds in the directory. Infected programs will increase in length by 7,808 bytes. The virus will be located at the beginning of infected programs. Infected programs will also have their file date and time in the DOS disk directory updated to the system date and time of infection. The first program in the current directory, other than COMMAND.COM, may also be reinfected by 7808. When reinfection occurs, an additional 7,808 bytes is added to the file. Attempts to execute programs infected with 7808 may result in the message "Not enough memory" being displayed, and the program the user is attempting to execute terminating. When this occurs, a program in the current directory will not be infected. Another symptom of 7808 infection is that programs will take longer to load when executed due to the virus searching the current disk directory. Execution of infected programs will also result in their file date and time in the disk directory being updated.