Hi All.... 30 april 2020
An new trojan has been found. It was shortly on Aminet, but have been
removed now, by the admins.
The trojan will install a bootblock virus, where you can read this:
J.E.R.E.M.Y./C.O.R.O.N.A.!BY!THE.JACKAL!2020
Here is some info about the trojan:
-----------------------------------------------------------------------
Trojan name... : Jackal dropper
Trojan file....... : vprot10
Trojan size..... : 1884 bytes (packed with CrunchMania)
: 2284 bytes (unpacked)
Trojan archive : vprot.lha
Archive size.... : 4.322 bytes
Archive info.... : * Small utility that stays in background and detects
any change on resident memory vectors. Very easy to
use. Just put VPROTECT in your startup-sequence file.
* Doesn't work from Workbench.
* TIP: if you click both mouse buttons on VPROTECT
window it will scan resident memory vectors again.
If nothing happends memory is ok.
* Not tested on KS higher than 1.3
Johan Jyllson
-----------------------------------------------------------------------
When I testing the bootblock virus. Under Kickstart 2.0 and 3.1, after
I rebootet with the virus in memory and booted from the floppydisk, I
did get Checksum errors on the both floppy disk. If it is the virus,
I'm not sure, but I tried it twice and got same error.
VirusZ III v1.04 with xvs.klibrary v33.45 (or higher) can find this trojan
and bootblock
https://www.vht-dk.dk/amiga/vz/vz.htm <- Link to download VirusZ
https://www.vht-dk.dk/amiga/xvs/xvs.htm <- Link to donload xvs.library
Thanks to CrashDisk for informing us about this trojan.
Regards....
Jan Andersen
Virus Help Team
Ascii of Jackal bootblock virus:
HEX of Vprot v1.0 trojan:
