CompuServe Messages

#Jeff 2 Virus

    11-Dec-93 21:45:02
Sb: #124751-#Jeff 2 Virus
Fm: John Gager 71336,624
To: Peter Jones 70374,656
Peter: Although I have never heard of the Jeff virus, the message from the screen in a red rectangle that shows (w) By the genius butonic, a search through the Virus Checker docs does show this: BUTONIC: This is another file type virus. It uses the DoIO vector to check for reads to the Root Block of a disk. It will then write the virus to the disk and add it to the startup-sequence as the first instruction. The filename of the virus and its comment make it invisible when doing a DIR but shows up with a LIST. This will also bring up GURU messages and change the title of the active window to some german stuff. To get rid of it we clear the ROMTAG, restore the DoIO vector and delete the file off the disk. You will need to remove the blank line from the startup-sequence where the virus was. The second version of this infects the Level 2 Interrupt as well and uses different file names to hide itself in the Startup-Sequence. So I would suggest downloading VC633.LHA in Library 9 of this forum and see if it will help. Actually I have a hard time understanding the mentality (which isn't much) of someone who writes a virus. They certainly are not proving their preceived superior programming skills and offer nothing to the Amiga community. I know Dave Haynie doesn't like them <g>.