CompuServe Thread

I have never heard of the "Jeff" virus, 2 or otherwise, but you could contact the "Safe Hex guys at: Safe Hex International Erik Loevendahl Soerensen Snaphanevej 10 DK-4720 Praestoe Denmark Phone: + 45 55 99 25 12 Fax: + 45 55 99 34 98 They say that you need to "Please send 2 "Coupon Response International" and a self addressed envelope, if you want info about SHI by letter." They should be able to help if anyone can.

Peter: Although I have never heard of the Jeff virus, the message from the screen in a red rectangle that shows (w) By the genius butonic, a search through the Virus Checker docs does show this: BUTONIC: This is another file type virus. It uses the DoIO vector to check for reads to the Root Block of a disk. It will then write the virus to the disk and add it to the startup-sequence as the first instruction. The filename of the virus and its comment make it invisible when doing a DIR but shows up with a LIST. This will also bring up GURU messages and change the title of the active window to some german stuff. To get rid of it we clear the ROMTAG, restore the DoIO vector and delete the file off the disk. You will need to remove the blank line from the startup-sequence where the virus was. The second version of this infects the Level 2 Interrupt as well and uses different file names to hide itself in the Startup-Sequence. So I would suggest downloading VC633.LHA in Library 9 of this forum and see if it will help. Actually I have a hard time understanding the mentality (which isn't much) of someone who writes a virus. They certainly are not proving their preceived superior programming skills and offer nothing to the Amiga community. I know Dave Haynie doesn't like them <g>.