Jini

Classification

Malware

Virus

X97M

Jini

Summary

X97M/Jini is an Excel 97 macro virus.

Removal

Automatic action

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

Find out more

Knowledge Base

Find the latest advice in our Community Knowledge Base.

User Guide

See the user guide for your product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details


Variant:Jini.A

This is a Excel macro virus that infects by copying the contents of workbook and it relies in a password protected module.

When an infected workbook is opened, the virus creates an infected workbook "shn.xls" to the Excel startup directory.

The virus does not infect if the name of the workbook start with "Book".

The payload activates when the system has been infected for thirty days. At this time the virus chages the names of items in the "File" menu to following:

After that the virus starts to show random message boxes at random times. These message boxes contain one of the following texts:

Is it your birthday

 How old are you

 Shala La La La La, Shala La La La La

 What is the play and what is my part ?

 I wonder if you are attaced by a virus...

 Life is Beautiful

 Take games as your life but do not take life as a game

Variant:Jini.A1 (Jini.corrupted)

This is a corruption (misdisinfection) of the original X97M/Jini.A, that is able to replicate.

Date Created: -

Date Last Modified: -