Sophos

XM97/Jini-A

Aliases
  • Ninja
  • Jini-A
  • (intended)
  • excel97.intended.jini
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

XM97/Jini-A is an Excel macro virus. Some anti-virus companies have reported that this is an "intended" virus (in other words that it does not replicate properly). However, Sophos researchers have confirmed that it can replicate under certain conditions.

Upon infecting a workbook the virus may delete all other sheets but the active one.

The virus creates a file in the XLSTART directory called SHN.XLS and copies the viral macros into it.

After the infected worksheet has been open for two minutes the virus renames all the items in the File menu.

It may display a message box containing the following text:

Hye. You have just got me.
It's shani a little jini. You may call me a virus in your termenology
It's a good idea taking backup of you files.
I am freindly but get wild sometimes!
It looks like you have caught up by a VIRUS

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer