Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!samsung!munnari.oz.au!uhccux!uhunix1.uhcc.Hawaii.Edu!olson
From: olson@uhunix1.uhcc.Hawaii.Edu (Todd Olson)
Newsgroups: comp.sys.amiga
Subject: Re: Butonic Virus
Keywords: How to detect, and destroy?
Message-ID: <9281@uhccux.uhcc.Hawaii.Edu>
Date: 8 Sep 90 09:00:49 GMT
References: <9230@uhccux.uhcc.Hawaii.Edu> <105933@convex.convex.com>
Sender: news@uhccux.uhcc.Hawaii.Edu
Organization: University of Hawaii
Lines: 31

In article <105933@convex.convex.com> swarren@convex.com (Steve Warren) writes:
>In article <9230@uhccux.uhcc.Hawaii.Edu> olson@uhunix1.uhcc.Hawaii.Edu (Todd Olson) writes:
>>It seems as though there is a new virus here in Hawaii called the Butonic
>>virus, I a disk that I know it is on, and was wondering if there is an easy
>>way to find and kill this virus?  I would like to have something as easy as
>>VirusX to work with, but I am willing to use anything else that will work
>>against it.  BTW what do most of you use for virus protection and 
>>irradication?  Please E-Mail unless it is of vast net importance...
>
>If you really must frighten us all with tales of a new virus, please
>include with your tale a brief description of the symptoms.

Well if you insist:

The virus is a file that sits in the home directory and sticks itself as
the first line in the startup-sequence.  It is a file that is 2916 bytes
and it is named with some invisible characters (not spaces), I don't know
if the name changes as it replicates, because I do not really want to
find out what it does to har drives.  I do know that it changes the CLI/Shell
windows name to several German(?) phrases one of which I do believe trans-
lates to "the proffesor".  I will send a copy to SteveX as E-mail has sug-
gested.  

			Todd Olson


--
                       olson@uhunix.uhcc.hawaii.edu
____________________________________________________________________________
"Take your work seriously, but never take yourself seriously and do not take
what happens to either yourself or your work seriously." --Booth Tarkington