Ming Virus
Virus Name: Ming
Aliases: Ming.1017
V Status: New
Discovered: July, 1994
Symptoms: .COM file growth
Origin: Hong Kong
Eff Length: 1,017 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, ViruScan, Sweep, IBMAV, NAV,
NAVDX, VAlert, PCScan, ChAV,
NProt, NShld, IBMAV/N, Sweep/N, AVTK/N, NAV/N, Innoc
Removal Instructions: Delete infected files
General Comments:
The Ming virus was received in July, 1994. It appears to be from
Hong Kong. Ming is a non-resident, direct action infector of .COM
files, including COMMAND.COM.
When a program infected with the Ming virus is executed, this virus
will infect one .COM file located in the current directory. Infected
programs will have a file length increase of 1,017 bytes with the
virus being located at the end of the file. The program's date and
time in the DOS disk directory listing will not be altered. The
following text strings are visible within the viral code in all
Ming infected programs:
"Nice To Meet You! Copyright(c) 1-11-1993 By Ming. From
Tuen Mun, Hong Kong"
"Version 3.10"
"COM"
"1\SFC"
"\ra\menus \ *.com"
"files.mnu"
"C /C DOOR.BAT *M"
The Ming virus may interfer with the functioning of the Remote Access
bulletin board package.