Constructor.DOS.PS-MP
Details
Constructor.DOS.PS-MPC
PS-MPC (The Phalcon/Skism Mass-Produced Code Generator) is the second most known virus constructor, after VCL. The features of that constructor are described in the documentation that is distributed in the main PS-MPC package:
The Phalcon/Skism Mass-Produced Code Generator is a tool, which generates
viral code according to user-designated specifications. The output is in
Masm/Tasm-compatible Intel 8086 assembly, and it is up to the user to
assemble the output into working executable form. The features of the
PS-MPC include the following:
- Over 150 encryption techniques, randomly generated during each
run of the PS-MPC
- Compact, commented code, much tighter than VCL
- COM/EXE infections
- Both resident and nonresident viruses
- Two types of traversals for nonresident viruses
- Three types of high memory residency routines for TSR viruses
- Optional infection of Command.Com
- Critical error handler support
The PS-MPC constructor was released in 1992 and distributed in source code as well as in executable files. That is one of the most popular constructors, and several other constructors G2, IVP were created by using the PS-MPC sources.
That constructor creates source ASM files of the virus. The user can select the virus features: encrypted or not, memory resident or not, COM/EXE/COM and EXE infection, effects etc.
It seems that the viruses from “Arcv” family are based on PS-MPC constructor.
Related Posts