Virus Help Team
Would you like to react to this message? Create an account in a few clicks or log in to continue.


Virus Help Team - Amiga Antivirus Support
 
HomeCalendarLatest imagesFAQSearchMemberlistUsergroupsRegisterLog in

 

 Jackal Trojan (vprot10.lha)

Go down 
AuthorMessage
Jan Andersen
Admin
Jan Andersen


Posts : 29
Join date : 2020-04-04
Location : Copenhagen, Denmark

Jackal Trojan (vprot10.lha) Empty
PostSubject: Jackal Trojan (vprot10.lha)   Jackal Trojan (vprot10.lha) EmptyThu Apr 30, 2020 9:07 pm

Hi All....                                              30 april 2020

An new trojan has been found. It was shortly on Aminet, but have been
removed now, by the admins.
   
The trojan will install a bootblock virus, where you can read this:
   
J.E.R.E.M.Y./C.O.R.O.N.A.!BY!THE.JACKAL!2020
   
Here is some info about the trojan:
-----------------------------------------------------------------------
Trojan name... : Jackal dropper
Trojan file....... : vprot10
Trojan size..... : 1884 bytes (packed with CrunchMania)
                      : 2284 bytes (unpacked)
Trojan archive : vprot.lha
Archive size.... : 4.322 bytes
Archive info.... : * Small utility that stays in background and detects
                          any change on resident memory vectors. Very easy to
                          use. Just put VPROTECT in your startup-sequence file.
                       * Doesn't work from Workbench.
                       * TIP: if you click both mouse buttons on VPROTECT
                          window it will scan resident memory vectors again.
                          If nothing happends memory is ok.
                      * Not tested on KS higher than 1.3
                                                                              Johan Jyllson
-----------------------------------------------------------------------

When I testing the bootblock virus. Under Kickstart 2.0 and 3.1,  after
I rebootet with the virus  in memory and booted  from the floppydisk, I
did get  Checksum errors on the  both floppy  disk. If it is the virus,
I'm not sure, but I tried it twice and got same error.

VirusZ III v1.04 with xvs.klibrary v33.45 (or higher) can find this trojan
and bootblock
   
https://www.vht-dk.dk/amiga/vz/vz.htm <- Link to download VirusZ
https://www.vht-dk.dk/amiga/xvs/xvs.htm <- Link to donload xvs.library
   
Thanks to CrashDisk for informing us about this trojan.

   
Regards....
Jan Andersen
Virus Help Team


Ascii of Jackal bootblock virus:
Jackal Trojan (vprot10.lha) Jackal

HEX of Vprot v1.0 trojan:
Jackal Trojan (vprot10.lha) Jackalhex
Back to top Go down
View user profile http://vht-dk.dk
 
Jackal Trojan (vprot10.lha)
Back to top 
Page 1 of 1
 Similar topics
-
» Jode Capullos 2 Trojan
» Fuzz Trojan (stellarx.lha)
» We are desperately looking for these virus and trojan's at the moment

Permissions in this forum:You cannot reply to topics in this forum
Virus Help Team :: Virus Warnings-
Jump to: