Selected viruses, spyware, and other threats: sorted alphabetically

X97M/Jini.A is a macro virus attacking Excel workbooks (files with the extension XLS). The virus consists of the macros auto_open, shfstq, aista and payghamat. The macro auto_open is activated at opening of an infected document. By that the virus is activated and takes over control by activation of each worksheet.
The virus attacks opened workbooks and their worksheets. It creates the file shn.xls in the directory which the variable Application.StartupPath is pointing at. By doing so it ensures activation of the virus at each start of Excel. Documents are attacked when they are being opened.
30 days after the computer was initially attacked the virus alters names of buttons in the Excel menu "File". Then the virus displays a window with randomly chosen text and finally the following notice:

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.