- JEFF-BUTONIC V3.10

Type: Filevirus.
Filelength: 2916 Bytes.

Damage: (ref. Jeff 3.00)

Parts to the code is displaced, possible to fool anti-virus programs.
Encrypted texts have changed, e.g. "Sauf blos keinen Wodka!" etc.
Encryption: eori.w #$b4ed,(a1)+

Original program: *JEFF* VIRUSKILLER
Packed with Mastercruncher: 7368 Bytes.
Unpacked: 9064 Bytes.

The originator is also known as: Jeff-Maker, Jeff-Remover.

The program shows text that indicate that it attemts to find 
the Jeff-virus. But in reality it writes JEFF 3.10 on Df0:

e.g. Virus found - please wait
    Startup-sequence cleaned
    Virus removed
etc.

JEFF V3.10 is part of the file, encrypted with [ eori.b $FF,(a0)+


  ------------------------------------------------------------
   Translated to English by Steen Jacobsen  2001 VHT-Denmark
   Org. Test by Heiner Schneegold.
  ------------------------------------------------------------

[Go back]