Description:
An Excel97 macro virus that displays date-triggered messages and can make changes to Indonesian language text entries in spreadsheets. X97M/Jal.A begins infection by disabling several menu items and toolbars associated with macros and macro functionality, including commandbars toolsmacro, windowsunhide and toolscustomize.The virus then saves a copy of its code as " PJDAPKIR.XLS " in the xlstart directory before replicating from there. The virus can replace certain Indonesian words in infected spreadsheets. Jal.A also edits the functions of certain keys. For example, should a user attempt to access the keyboard shortcut, Control+ D (which is normally the 'fill down' function) it will instead call macro AboutVirus, which displays the following message: Diprogram oleh: ~Akut ajuxacqupi~ Programed by: ~Akut Wajuxacqupi~ Nama proyek: Program eksperimental virus komputer Project name: Computer virus experimental program Nama virus: Dajjal Virus name: Dajjal Tempat pembuatan: Jakarta, Indonesia Made in: Jakarta, Indonesia Saat pembuatan: Mei 1998 Created in: May 1998 Dipersembahkan untuk: Umat manusia Dedicated for: All human being Waktu tampil: Mulai Bulan Nopember 1998; Tiap hari Senin sebelum pukul 12; dan Pada hari istimewa Show messages: Start in November 1998; Every Monday before 12 am; and At special date About Dajjal virus. On particular dates, the virus will be triggered to display messages in Indonesian. On 14th May, Jal.A will display: tahun yang lalu terjadi penjarahan, perampokan, perusakan, Dan pembakaran atas nama reformasi di Jakarta. Reformasi itu harus dilakukan DI setiap saat demi kesempurnaan suatu sistem. Kesemuanya itu akan berpulang pada kepentingan rakyat banyak. Tapi janganlah reformasi yang mulia itu ternodai oleh anarkisme yang biadab! REFORMASI On 10th December; Saya berulang tahun hari ini. Tolong doakan agar saya menjadi manusia yang berguna. Terima kasih. Ulang tahun 51268 and on 17th August: Negeri kita tercinta sedang berulang tahun hari ini. Mari kita rayakan! HUT RI. In addition, Jal makes changes to the File Summary Information of the infected spreadsheet properties as listed below: Title: " Tokoh pengendali dunia yang tersembunyi " . Subject: " Yahudi " . Author: " Dajjal " . Keywords: " Malapetaka Fitnah; Akhir zaman " . Comments: " Dia bukan tuhan! Dia akan terbunuh oleh Isa Al Masih " Macro Name: SURIV_PJD_APKIR
|