Poor Man Virus

Virus Name: Poor Man Aliases: Beggar V Status: Rare Discovered: October, 1993 Symptoms: .COM file growth Origin: Unknown Eff Length: 1,168 Bytes Type Code: PNCK - Parasitic Non-Resident .COM Infector Detection Method: ViruScan, F-Prot, Sweep, AVTK, IBMAV, NAV, NAVDX, VAlert, ChAV, NShld, Sweep/N, AVTK/N, IBMAV/N, Innoc, NProt, NAV/N, LProt Removal Instructions: Delete infected files General Comments: The Poor Man, or Beggar, virus was submitted in October, 1993. Its origin or point of isolation is unknown. Poor Man is a non-resident direct action infector. When a program infected with the Poor Man virus is executed, this virus may infect one .COM program located in the C: drive root directory of the C: drive DOS subdirectory. Infected .COM programs will have a file length increase of 1,168 bytes with the virus being located at the end of the file. The program's date and time in the DOS disk directory listing will not be altered. The following text is visible within the viral code in all Poor Man infected programs: "c:\command.com c:\dos\command.com" "Good morning, Sir! How nice it is! Please giv" "money," "Good morning, sir! How nice it is!" "Please give me some money, I,m a poor man." "Do some good things, sir!"