scorpion.227
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Scorpion.2278
It is a very dangerous nonmemory resident encrypted parasitic virus. When an infected file takes control, the virus infects the C:\COMMAND.COM file. The virus then searches for COM and EXE files, then writes itself to the end of the file. While infecting the C:\COMMAND.COM the virus writes itself into the "hole" at the end of the COMMAND.COM. As a result, the length of the C:\COMMAND.COM file stays the same.
The virus deletes the CHKLIST.MS file, if it exists. In some cases the virus searches for other files and deletes them. Depending on the system data and installed hardware the virus formats the hard drive sectors, displays the message, hooks INT 1Ch and plays a tune. The message looks as follows:
+---------------------------+
DEATH ON TWO LEGS V2.8
(c) BLACK SCORPiON, 1996
Written in Moscow
+---------------------------+
The virus also contains the text strings:
*.* *.EXE *.COM
C:\COMMAND.COM
DEATH ON TWO LEGS WAS HERE
Copyright @2006 scorpion.227