Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!usc!zaphod.mps.ohio-state.edu!magnus.ircc.ohio-state.edu!tut.cis.ohio-state.edu!giza.cis.ohio-state.edu
From: erd@giza.cis.ohio-state.edu (Ethan R Dicks)
Newsgroups: comp.sys.amiga.misc
Subject: Does anyone have Steve Tibbet's e-mail address?
Keywords: new Virus
Message-ID: <88998@tut.cis.ohio-state.edu>
Date: 27 Feb 91 22:00:29 GMT
Sender: news@tut.cis.ohio-state.edu
Distribution: na
Organization: Ohio State Computer Science
Lines: 26

I was trying to contact Steve Tibbet to see if he had a copy of the
Butonic Virus (which was recently handed to me by a local Amiga user),
but was unable to find e-mail information in the documentation of
VirusX-4.00.

I saw no references to the Butonic virus in the VirusX-4.00 docs.  I did
decrypt the full text contained in the virus; it is a couple of hundred
longwords worth of ASCII text all XORed with $AAAAAAAA to hide its true
content.  A few months ago, four of the messages were posted to comp.sys.amiga
which appeared in the title bar of the active window.  There are also several
more messages which were not mentioned.  I do not have the complete list here,
but at least one of the messages mentioned the Atari-ST.  I will try and post
the complete text to comp.sys.amiga.misc, so that others may see what
messages appear if the Butonic Virus is running.  BTW, the virus calls
itself "Jeff," written by the "genius Butonic."

Good luck, all, and happy hunting,

-ethan


--
Ethan R. Dicks       | ######  This signifies that the poster is a member in
Software Results Corp|   ##    good sitting of Inertia House: Bodies at rest.
940 Freeway Drive N. |   ##
Columbus OH    43229 | ######  "You get it, you're closer."