Poor Man Virus
Virus Name: Poor Man
V Status: Rare
Discovered: October, 1993
Symptoms: .COM file growth
Eff Length: 1,168 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, Sweep, AVTK, IBMAV, NAV,
NAVDX, VAlert, ChAV,
NShld, Sweep/N, AVTK/N, IBMAV/N, Innoc, NProt, NAV/N,
Removal Instructions: Delete infected files
The Poor Man, or Beggar, virus was submitted in October, 1993. Its
origin or point of isolation is unknown. Poor Man is a non-resident
direct action infector.
When a program infected with the Poor Man virus is executed, this
virus may infect one .COM program located in the C: drive root
directory of the C: drive DOS subdirectory. Infected .COM programs
will have a file length increase of 1,168 bytes with the virus
being located at the end of the file. The program's date and time
in the DOS disk directory listing will not be altered. The following
text is visible within the viral code in all Poor Man infected
"Good morning, Sir! How nice it is! Please giv"
"Good morning, sir! How nice it is!"
"Please give me some money, I,m a poor man."
"Do some good things, sir!"