..........................  VIRUS HELP TEAM  .........................


     Hi All....                                               30 april 2020

     An new trojan has been found. It was shortly on Aminet,  but have been
     removed now, by the admins.
     
     Origin of the archive: Republic of Serbia
     
     The trojan will install a bootblock virus, where you can read this:
     
     J.E.R.E.M.Y./C.O.R.O.N.A.!BY!THE.JACKAL!2020
     
     Here is some info about the trojan:
     -----------------------------------------------------------------------
     Trojan name... : Jackal dropper
     Trojan file... : vprot10
     Trojan size... : 1884 bytes (packed with CrunchMania)
                    : 2284 bytes (unpacked)
     Trojan archive : vprot.lha
     Archive size.. : 4.322 bytes
     Archive info.. : * Small utility that stays in background and detects
                        any change on resident memory vectors. Very easy to
                        use. Just put VPROTECT in your startup-sequence file
                      * Doesn't work from Workbench.
                      * TIP: if you click both mouse buttons on VPROTECT
                        window it will scan resident memory vectors again. 
                        If nothing happends memory is ok.
                      * Not tested on KS higher than 1.3
                                                               Jxxxx Jxxxxxx
     -----------------------------------------------------------------------

     The programs install a new bootblock virus that we have named 'Jackal'.
     You can  read Virus  Help Team's test  of the 'Jackal'  bootblock virus
     right here.
     
     When I was testing the bootblock virus.  Under Kickstart  2.0  and 3.1,
     after  I  rebootet  with  the  virus  in memory  and  booted  from  the
     floppydisk, I did get Checksum errors on the both floppy disk. If it is
     the virus, I'm not sure, but I tried it twice and got same error.


     Thanks to CrashDisk for informing us about this trojan.
     

     Removal: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher


     Regards....
          __      Jan Andersen
     __  ///     ---------------
     \\\///      Virus Help Team
      \XX/        www.vht-dk.dk


     HEX of VProtect v1.0 trojan: