AMIGA KNIGHT VIRUS (31-July-1993)
== Computer Virus Catalog 1.2: VirusTest_bomb_936 Bomb (31-July-1993) ==
Entry...............: VirusTest_bomb_936 Bomb
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: ---
              where.: ---
Classification......: Bomb
Length of Virus.....: 936 bytes (+ 1 byte in "virustest.data")
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-OS
Version/Release.....: 1.2/all, 1.3/all
Computer model(s)...: All AMIGA models
--------------------- Attributes ---------------------------------------
Easy Identification.: There is a "startup-sequence" entry called
                         "virustest", and there is always a 2nd file
                         called "virustest.data" with 1 byte length in
                         root directory. If diskette is write protected,
                        bomb will write to Shell:
                        "User Request : Please remove write Protection 
                         and press left Mouse Button to continue.."
Type of infection...: --- (damage only)
Infection Trigger...: ---
Storage media affected: Floppy disks only
Interrupts hooked...: ---
Damage..............: Permanent damage: formating the floppy disk
Damage Trigger......: Permanent damage: starting this program with the 
                         byte in "virustest.data" counted down to zero.
Particularities.....: Calling DosFunction with Dosbase in A5 Register
                         can crash recent Operating System versions.
Similarities........: TimeBomb V0.9 (seems to be a new version)
--------------------- Agents -------------------------------------------
Countermeasures.....: VirusZ 3.06, VT 2.54, VirusChecker 6.28
Countermeasures successful: VirusZ 3.06, VT 2.54, VirusChecker 6.26
Standard means......: Delete the files "virustest", "virustest.data",
                         and "startup-sequence" entry, or use VT 2.54.
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Jens Vogler
Documentation by....: Jens Vogler
Date................: 31-July-1993
Information Source..: Reverse analysis of virus code

.