Path: utzoo!utgpu!news-server.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!pacific.mps.ohio-state.edu!zaphod.mps.ohio-state.edu!samsung!munnari.oz.au!uhccux!uhunix1.uhcc.Hawaii.Edu!olson
From: olson@uhunix1.uhcc.Hawaii.Edu (Todd Olson)
Newsgroups: comp.sys.amiga
Subject: Re: Butonic Virus
Keywords: How to detect, and destroy?
Message-ID: <9286@uhccux.uhcc.Hawaii.Edu>
Date: 9 Sep 90 05:09:05 GMT
References: <1940@lpami.wimsey.bc.ca>
Sender: news@uhccux.uhcc.Hawaii.Edu
Organization: University of Hawaii
Lines: 58

In article <1940@lpami.wimsey.bc.ca> lphillips@lpami.wimsey.bc.ca (Larry Phillips) writes:
>
>Yes, and send a copy to Steve Tibbett as well, so that he can include the kill
>for it in the next VirusX.
>

More info, from an Aussie disk magazine, 

The Butonic Virus is also of the directory type. It will write          
itself to a disk as file with a length of 2916 bytes. Once again the      
name of the file appears to be a blank line.                              
Butonic can change the name of the active windows, to names such        
as                                                                        
                                                                          
  Ich Braunch jetzt Alk!             Bitte keinen Wodka!                  
  Mehr Buszyklen fur den Prozessor   Paula meint,Agnus sei zu dick        
                                                                          
The Butonic Virus changes the following vectors.....                    
                                                                          
        KickTagPtr           Varies in memory, fast memory if present     
        DoIO                 Varies in memory, fast memory if present     
                                                                          
This is another destructive virus, it has the ability to destroy        
the directory structure of a disk. When it shows itself it will           
display an alert with the following text.                                 
                                                                          
             Hi                                                           
                                                                          
             Jeff's Speaking here...                                      
             (w) by the genius BUTONIC                                    
             V3.00/9.2.89 - Gen.0026                                      
                                                                          
             Greetings to *Hackmack*,*Atlantic*,                          
             & Alex,Frank,Wolfram,Gerlach,Miguel,Klaus,Snoopy-Data!       


				Todd Olson

BTW the copy goes to SteveX on Monday.


>-larry
>
>--
>It is not possible to both understand and appreciate Intel CPUs.
>    -D.Wolfskill
>+-----------------------------------------------------------------------+ 
>|   //   Larry Phillips                                                 |
>| \X/    lphillips@lpami.wimsey.bc.ca -or- uunet!van-bc!lpami!lphillips |
>|        COMPUSERVE: 76703,4322  -or-  76703.4322@compuserve.com        |
>+-----------------------------------------------------------------------+


--
                       olson@uhunix.uhcc.hawaii.edu
____________________________________________________________________________
"Take your work seriously, but never take yourself seriously and do not take
what happens to either yourself or your work seriously." --Booth Tarkington