Description
This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
Indication of Infection
If the key sequence CTRL-ALT-D is pressed, the following message is displayed:
About Dajjal virus
Diprogram oleh: ~Akut Wajuxacqupi~
Programed by: ~Akut Wajuxacqupi~
Nama proyek: Program eksperimental virus komputer
Project name: Computer virus experimental program
Nama virus: Dajjal
Virus name: Dajjal
Tempat pembuatan: Jakarta, Indonesia
Made in: Jakarta, Indonesia"
Saat pembuatan: Mei 1998"
Created in: May 1998
Dipersembahkan untuk: Umat manusia"
Dedicated for: All human being
Waktu tampil: Mulai Bulan Nopember 1998;
Tiap hari Senin sebelum pukul 12; dan
Pada hari istimewa
Show messages: Start in November 1998;"
Every Monday before 12 am; and
At special date
[OK]
Infected workbooks will have these properties:
Title = "Tokoh pengendali dunia yang tersembunyi"
Subject = "Yahudi"
Author = "Dajjal"
Keywords = "Malapetaka Fitnah; Akhir zaman"
Comments = "Dia bukan tuhan! Dia akan terbunuh oleh Isa Al Masih"
This virus contains date activated messages.
May 14
"REFORMASI"
[Year - 1998]" tahun yang lalu terjadi penjarahan, perampokan, perusakan, dan pembakaran atas nama reformasi di Jakarta."
"Reformasi itu harus dilakukan di setiap saat demi kesempurnaan suatu sistem."
"Kesemuanya itu akan berpulang pada kepentingan rakyat banyak."
"Tapi janganlah reformasi yang mulia itu ternodai oleh anarkisme yang biadab!"
[OK]
August 17
"HUT RI"
"Negeri kita tercinta sedang berulang tahun hari ini."
"Mari kita rayakan!"
[OK]
December 10
"Ulang tahun 51268"
"Saya berulang tahun hari ini."
"Tolong doakan agar saya menjadi manusia yang berguna."
"Terima kasih."
[OK]
This virus contains one other possible message display mechanism. If the day is Monday and the hour is before 12pm, one of 17 randomly chosen messages will display.
Methods of Infection
This virus creates an infectious workbook in the XLSTART folder named "PJDAPKIR.XLS". Any workbook opened on the system will become infected. This virus hooks the Excel event handler of opening workbooks in order to run its code.
Aliases
X97M/Jal