INCOGNITO Virus (25-July-1992)
Entry...............: INCOGNITO Virus
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: Unknown
              where.: Unknown
Classification......: System virus (bootblock), resident
Length of Virus.....: 1. Length on storage medium: 1024 byte
                      2. Length in RAM:            1172 byte
--------------------- Preconditions ----------------------------------
Operating System(s).: AMIGA-DOS
Version/Release.....: 1.2/33.166, 1.2/33.180
Computer model(s)...: All models
--------------------- Attributes -------------------------------------
Easy Identification.: ---
Type of infection...: RAM resident, reset resident, bootblock
Infection Trigger...: INT[5] = Vertical Blank Interrupt
Storage media affected: Only floppy disks (3.5" and 5.25")
Interrupts hooked...: INT[5] = Vertical Blank Interrupt
Damage..............: Overwriting bootblock
Damage Trigger......: INT[5] = Vertical Blank Interrupt
Particularities.....: Changes DoIO vector; de/encrypts string 
                         "trackdisk.device" by longword-addition
                         and subtraction with #$90154354
Similarities........: ---
Particularities.....: First AMIGA virus using encryption techniques,
                         though not very complex.
--------------------- Agents -----------------------------------------
Countermeasures.....: GUARDIAN 1.2, VIRUSX 4.0, VIRUSCONTROL 2.0
Countermeasures successful: GUARDIAN 1.2, VIRUSX 4.0, VIRUSCONTROL 2.0
Standard means......: VIRUSCONTROL 2.0
--------------------- Acknowledgement --------------------------------
Location............: Virus Test Center, University Hamburg, FRG
Classification by...: Karim Senoucci
Documentation by....: Karim Senoucci
Date................: 7-July-1992
Information Source..: ---

.