Fandom

Malware Wiki

7son

1,321pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.7son or 7son is a parasitic virus on DOS.

There are 18 variants in 3 versions, represented by the following:

  • Virus.DOS.7son.271
  • Virus.DOS.7son.284.a
  • Virus.DOS.7son.440

BehaviorEdit

7son.271Edit

When the virus is run, it infects every DOS executable in current directory.

7son.284, 286...333.b, 334 and 350Edit

These variants infects every DOS executable in current directory except those having the size smaller than or equal to 1,000 bytes.

7son.440Edit

This variant infects every DOS executable in current directory, followed by running into an invalid opcode, which would lead to a system hang or the process to be killed (DOS 7.1).

Every time an infected file is run, a memory dump file is placed in root directory, having a random filename and no extension.

All these variants cannot infect files that are larger than 64KB.

VariantsEdit

This family has 18 variants in total:

  • Virus.DOS.7son.271
  • Virus.DOS.7son.284 (A, B, D and E)
  • Virus.DOS.7son.286
  • Virus.DOS.7son.327
  • Virus.DOS.7son.331
  • Virus.DOS.7son.332 (plus B and C)
  • Virus.DOS.7son.333 (A, B and C)
  • Virus.DOS.7son.334
  • Virus.DOS.7son.344
  • Virus.DOS.7son.350
  • Virus.DOS.7son.440

Other detailsEdit

There are no valid samples for 7son.333.c and 344 but the non-runnable joke programs, while some of the antiviruses still identified them as variants of 7son.

The virus contains the internal text string:

Seventh son of a seventh son
*.COM

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.