AMIGA KNIGHT VIRUS (31-July-1993)
Entry...............: Amiga Knight Virus
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: ---
              where.: ---
Classification......: Link virus (directory type), resident
Length of Virus.....: 1.Length on storage medium: 6048 byte
                      2.Length in RAM    : up to 28552 byte
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-DOS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes ---------------------------------------
Easy Identification.: Typical text: string "initial_cli" visible in 
                         an infected file; file "initial_cli" in root
                         directory; string "initial_cli" as first entry 
                         in startup-sequence.
Type of infection...: Self-identification method: virus searches for
                         "initial_cli" as 1st entry in startup sequence.
                      System infection: RAM resident, reset resident
Infection Trigger...: Start of "initial_cli" program
Storage media affected: Only floppy disk in OriginalFileSystem format
Interrupts hooked...: None
Damage..............: Permanent damage: changing startup-sequence
                                        writing itself on disk
                      Transient damage: screen buffer manipulation;
                         vector graphic and test demo showing the text:
                             "YEAH, THE INVASION HAS STARTED! YOUR TIME
                             HAS RUN OUT, AND SOON WE WILL BE EVERYWHERE!
                             THIS IS GENERATION 0039 OF THE EVIL 
                             AMIGAKNIGHTSVIRUS
                             GREETINGS TO DUFTY, DWARF, ASID, CUCUMBER, 
                             ASTERIX, ANDY, AND ALL AMIGIANS I KNOW"
Damage Trigger......: Permanent damage: inserting an
                                        OriginalFileSystem floppy
                      Transient damage: 5th reset after last infection
Particularities.....: KickTagPtr is used for making virus system resident
Similarities........: ---
--------------------- Agents -------------------------------------------
Countermeasures.....: VT 2.54, VirusZ 3.06, VirusChecker 6.28
Countermeasures successful: VT 2.54, VirusZ 3.06, VirusChecker 6.28
Standard means......: VT 2.54
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Karim Senoucci
Documentation by....: Karim Senoucci
Date................: 31-July-1993
Information Source..: Virus dissasembly, Heiner Schneegold, SHI

.