Butonic v1.1 - Amiga Virus Encyclopedia


     Amiga Virus Encyclopedia
     Butonic v1.1 Virus
     Name         : Butonic v1.1

     Aliases      : Bahan

     Type         : Bootblock
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : 3 april 1991

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2

     Damage       : Overwrites boot

     Comments     : The ButonicV1.1 virus uses the cool-
                    capture to stay resident in memory. After 15
                    resets the virus gives out a message:

                    BUTONIC`s VIRUS 1.1
                    GREETINGS TO HACKMACK

                    Further the virus uses the DoIO()-Vector to
                    infect other disks.
                    If you are pressing the right mousebutton
                    and the s-key while you are booting, the
                    generationsnumer will be shown:

                    < GENERATION NR. XXXXX >

                    You can`t read this texts in the bootblock
                    because they are coded.
                    Sometimes the virus is called BAHAN because
                    you can read this string in the bootblock.
                    But This string is only the ASCII-representation
                    CLR.W D1
                    SWAP  D1

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
     Test made by : Safe Hex International

     Ascii of Butonic v1.1 virus (Decoded):


Virum Help Team
Denmark & Canada
Copyright © All rights reserved