------------------------
    Amiga Virus Encyclopedia    
    ScareCrow 1 Trojan 
 ------------------------
 
 
    - SCARECROW Trojan destruction

          Known file name: IO4-INVI.EXE
          Name justification: see below
          File length packed: # 63484 bytes
          Unpacked file length: # 100348 bytes
          Not reset-proof
          No bent vectors
          An AMOS program
          According to Doc: an Intel Outside 4 demo
          Procedure:
          An image is output, which also contains text:
          SCARECROW JUST ERASED ALL LAMENESS
          Then a reset is necessary
 
      Damage:
           - user startup is rewritten Length: # 4560 bytes
             then contains: Text DevilCheck 2.0 bug report
           - startup-sequence is rewritten Length: # 4924 bytes
             then contains: Text VirusScanList V1.35 Sept. 96
 
          VT only offers delete.
          The overwritten files cannot be saved. Place them
          better in S-Dir copies.


    Original test by Heiner Schneegold
    Translated from german to english by Google translate