Constructor.BAT.BWG
Description Constructor.BAT.BWG
Constructor creates batch payload programs. It is written in Basic for DOS.
It creates payload programs of the following types:
internet worms
mIRC worms
pIRC worms
installing to the win.ini
installing to the system registry startup key
installing to the startup directory
deletes antivirus programs
Constructor inserts the following comment in the beginning of batch files:
REM generated with BATCH WORM GENERATOR x.xx
Check other viruses! Be aware! Use Antiviral Software
Scorpio.1000
Description Scorpio.1000
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. It contains the text strings:
Plovdiv
Scorpio
Scorpion.2278
Description Scorpion.2278
It is a very dangerous nonmemory resident encrypted parasitic virus. When an infected file takes control, the virus infects the C:COMMAND.COM file. The virus then searches for COM and EXE files, then writes itself to the end of the file. While infecting the C:COMMAND.COM the virus writes itself into the "hole" at the end of the COMMAND.COM. As a result, the length of the C:COMMAND.COM file stays the same.
The virus deletes the CHKLIST.MS file, if it exists. In some cases the virus searches for other files and deletes them. Depending on the system data and installed hardware the virus formats the hard drive sectors, displays the message, hooks INT 1Ch and plays a tune. The message looks as follows:
+---------------------------+
¦ DEATH ON TWO LEGS V2.8 ¦
¦ (c) BLACK SCORPiON, 1996 ¦
¦ Written in Moscow ¦
+---------------------------+
The virus also contains the text strings:
*.* *.EXE *.COM
C:COMMAND.COM
DEATH ON TWO LEGS WAS HERE
|