------------------------
     Amiga Virus Encyclopedia
     Butonic v1.1 Virus
     -------------------------
     
     
     Name         : Butonic v1.1

     Aliases      : Bahan

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : 3 april 1991

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2
                    1.3

     Damage       : Overwrites boot

     Comments     : The ButonicV1.1 virus uses the cool-
                    capture to stay resident in memory. After 15
                    resets the virus gives out a message:

                    BUTONIC`s VIRUS 1.1
                    GREETINGS TO HACKMACK

                    Further the virus uses the DoIO()-Vector to
                    infect other disks.
                    If you are pressing the right mousebutton
                    and the s-key while you are booting, the
                    generationsnumer will be shown:

                    < GENERATION NR. XXXXX >

                    You can`t read this texts in the bootblock
                    because they are coded.
                    Sometimes the virus is called BAHAN because
                    you can read this string in the bootblock.
                    But This string is only the ASCII-representation
                    of:
    
                    CLR.W D1
                    SWAP  D1
                    RTS

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
 
     Test made by : Safe Hex International


     Ascii of Butonic v1.1 virus (Decoded):