------------------------
Amiga Virus Encyclopedia
Amiga Knights Virus
------------------------
=== Computer Virus Catalog 1.2: AMIGA KNIGHT VIRUS (31-July-1993) ======
Entry...............: Amiga Knight Virus
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: ---
where.: ---
Classification......: Link virus (directory type), resident
Length of Virus.....: 1.Length on storage medium: 6048 byte
2.Length in RAM : up to 28552 byte
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-DOS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes ---------------------------------------
Easy Identification.: Typical text: string "initial_cli" visible in
an infected file; file "initial_cli" in root
directory; string "initial_cli" as first entry
in startup-sequence.
Type of infection...: Self-identification method: virus searches for
"initial_cli" as 1st entry in startup sequence.
System infection: RAM resident, reset resident
Infection Trigger...: Start of "initial_cli" program
Storage media affected: Only floppy disk in OriginalFileSystem format
Interrupts hooked...: None
Damage..............: Permanent damage: changing startup-sequence
writing itself on disk
Transient damage: screen buffer manipulation;
vector graphic and test demo showing the text:
"YEAH, THE INVASION HAS STARTED! YOUR TIME
HAS RUN OUT, AND SOON WE WILL BE EVERYWHERE!
THIS IS GENERATION 0039 OF THE EVIL
AMIGAKNIGHTSVIRUS
GREETINGS TO DUFTY, DWARF, ASID, CUCUMBER,
ASTERIX, ANDY, AND ALL AMIGIANS I KNOW"
Damage Trigger......: Permanent damage: inserting an
OriginalFileSystem floppy
Transient damage: 5th reset after last infection
Particularities.....: KickTagPtr is used for making virus system resident
Similarities........: ---
--------------------- Agents --------------------------------------------
Countermeasures.....: VT 2.54, VirusZ 3.06, VirusChecker 6.28
Countermeasures successful: VT 2.54, VirusZ 3.06, VirusChecker 6.28
Standard means......: VT 2.54
--------------------- Acknowledgement -----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Karim Senoucci
Documentation by....: Karim Senoucci
Date................: 31-July-1993
Information Source..: Virus dissasembly, Heiner Schneegold, SHI
========================= End of AMIGA KNIGHTS Virus ====================
Antivirus removal...: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III with Xvs.library installed
Animated picture of the Amiga Knight Virus:
