------------------------
Amiga Virus Encyclopedia
Jeff Butonic v3.10 Virus 
------------------------


- JEFF-BUTONIC V3.10

Type: Filevirus.
Filelength: 2916 Bytes.

Damage: (ref. Jeff 3.00)

Parts to the code is displaced, possible to fool anti-virus programs.
Encrypted texts have changed, e.g. "Sauf blos keinen Wodka!" etc.
Encryption: eori.w #$b4ed,(a1)+

Original program: *JEFF* VIRUSKILLER
Packed with Mastercruncher: 7368 Bytes.
Unpacked: 9064 Bytes.

The originator is also known as: Jeff-Maker, Jeff-Remover.

The program shows text that indicate that it attemts to find 
the Jeff-virus. But in reality it writes JEFF 3.10 on Df0:

e.g. Virus found - please wait
    Startup-sequence cleaned
    Virus removed
etc.

JEFF V3.10 is part of the file, encrypted with [ eori.b $FF,(a0)+

Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
         Kickstart all others: VirusZ III with Xvs.library installed
 

------------------------------------------------------------
 Translated to English by Steen Jacobsen © 2001 VHT-Denmark
 Org. Test by Heiner Schneegold.
------------------------------------------------------------