Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Jini


Aliases:


Jini

Malware
Virus
X97M

Summary

X97M/Jini is an Excel 97 macro virus.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details


Variant:Jini.A

This is a Excel macro virus that infects by copying the contents of workbook and it relies in a password protected module.

When an infected workbook is opened, the virus creates an infected workbook "shn.xls" to the Excel startup directory.

The virus does not infect if the name of the workbook start with "Book".

The payload activates when the system has been infected for thirty days. At this time the virus chages the names of items in the "File" menu to following:

After that the virus starts to show random message boxes at random times. These message boxes contain one of the following texts:

  Is it your birthday
    How old are you
    Shala La La La La, Shala La La La La
    What is the play and what is my part ?
    I wonder if you are attaced by a virus...
    Life is Beautiful
    Take games as your life but do not take life as a game


Variant:Jini.A1 (Jini.corrupted)

This is a corruption (misdisinfection) of the original X97M/Jini.A, that is able to replicate.



Detection

F-Secure Anti-Virus detects and disinfects both, X97M/Jini.A and X97M/Jini.A1.



Description Created: F-Secure; November 2000
Technical Details: Katrin Tocheva and Sami Rautiainen



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free