| Alias: | --- |
| Strain: | --- |
| detected when: | --- |
| where: | --- |
| Classification: | Link virus (directory type), resident |
| Length: | 1.Length on storage medium: 6048 byte 2.Length in RAM : up to 28552 byte |
Preconditions | |
| Operating System(s): | AMIGA-DOS |
| Version/Release: | 1.2/all, 1.3/all, 2.0/all, 3.0/all |
| Computer model(s): | All AMIGA models |
| Caroname: | Amigaknight |
Attributes | |
| Easy identification: | Typical text: string "initial_cli" visible in an infected file; file "initial_cli" in root directory; string "initial_cli" as first entry in startup-sequence. |
Type of Infection: | Self-identification method: virus searches for "initial_cli" as 1st entry in startup sequence. System infection: RAM resident, reset resident |
| Infection Technique: | |
| Infection Trigger: | Start of "initial_cli" program |
| Storage Media affected: | Only floppy disk in OriginalFileSystem format |
| Interrupts hooked: | None |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Permanent damage: changing startup-sequence writing itself on disk Transient damage: screen buffer manipulation; vector graphic and test demo showing the text: "YEAH, THE INVASION HAS STARTED! YOUR TIME HAS RUN OUT, AND SOON WE WILL BE EVERYWHERE! THIS IS GENERATION 0039 OF THE EVIL AMIGAKNIGHTSVIRUS GREETINGS TO DUFTY, DWARF, ASID, CUCUMBER, ASTERIX, ANDY, AND ALL AMIGIANS I KNOW" |
| Damage Trigger: | Permanent damage: inserting an OriginalFileSystem floppy Transient damage: 5th reset after last infection |
| Particularities: | KickTagPtr is used for making virus system resident |
| Similarities: | --- |
Agents | |
| Countermeasures: | VT 2.54, VirusZ 3.06, VirusChecker 6.28 |
| Standard means: | VT 2.54 |
Acknowledgements | |
| Location: | Virus Test Center, University Hamburg, Germany |
| Classification by: | Karim Senoucci |
| Documentation by: | Karim Senoucci |
| Date: | 31-July-1993 |
| Information Source: | Virus dissasembly, Heiner Schneegold, SHI |
(c) 1996 Virus-Test-Center, University of Hamburg