Jackal Trojan (vprot10.lha)

Jackal trojan and bootblock virus is unknown to all Anti-Virus programs. TAKE CARE

Hi All....                                              30 april 2020

An new trojan has been found. It was shortly on Aminet, but have been
removed now, by the admins.
   
The trojan will install a bootblock virus, where you can read this:
   
J.E.R.E.M.Y./C.O.R.O.N.A.!BY!THE.JACKAL!2020
   
Here is some info about the trojan:
-----------------------------------------------------------------------
Trojan name... : Jackal dropper
Trojan file....... : vprot10
Trojan size..... : 1884 bytes (packed with CrunchMania)
                      : 2284 bytes (unpacked)
Trojan archive : vprot.lha
Archive size.... : 4.322 bytes
Archive info.... : * Small utility that stays in background and detects
                          any change on resident memory vectors. Very easy to
                          use. Just put VPROTECT in your startup-sequence file.
                       * Doesn't work from Workbench.
                       * TIP: if you click both mouse buttons on VPROTECT
                          window it will scan resident memory vectors again.
                          If nothing happends memory is ok.
                      * Not tested on KS higher than 1.3
                                                                              Johan Jyllson
-----------------------------------------------------------------------

When I testing the bootblock virus. Under Kickstart 2.0 and 3.1,  after
I rebootet with the virus  in memory and booted  from the floppydisk, I
did get  Checksum errors on the  both floppy  disk. If it is the virus,
I'm not sure, but I tried it twice and got same error.

At this time there are NO antivirus program  that will find this trojan
or bootblock virus.
   
Virus Help Team have been thinking about releasing the file from VirusZ
III, from our own Amiga's.  We have made recognition for  many utility,
demo, and even  some new bootblock viruses  and a lot of other harmfull
bootblocks  not known to any anti-virus programs.  If we release it you
can find it at our website under VirusZ III, at this asdress:
   
https://www.vht-dk.dk/amiga/vz/vz.htm
   
It is not there yet, but keep looking.

Thanks to CrashDisk for informing us about this trojan.

   
Regards....
Jan Andersen
Virus Help Team


Ascii of Jackal bootblock virus:


HEX of Vprot v1.0 trojan: