Normally it is impossible to create files with names reserved for old DOS device drivers e.g. ‘con’, ‘lpt1’, ‘lpt2’, etc., yet some malware still manages to create them.

How?

Answer here