Tajfun Virus
Virus Name: Tajfun
Aliases: Tajfun 1.0, Tajfun.250
V Status: New
Discovered: July, 1994
Symptoms: .COM file growth; file date/time changes
Origin: Unknown
Eff Length: 250 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: F-Prot, AVTK, Sweep, IBMAV, ViruScan, NAVDX,
VAlert, NAV,
NProt, AVTK/N, Sweep/N, IBMAV/N, NShld, NAV/N
Removal Instructions: Delete infected files
General Comments:
The Tajfun, Tajfun 1.0, or Tajfun.250, virus was received in July,
1994. Its origin or point of isolation is unknown. Tajfun is a
non-resident, direct action .COM infector, including COMMAND.COM.
It doesn't appear to do anything besides replicate.
When a program infected with the Tajfun virus is executed, this
virus will infect all of the .COM programs located in the current
directory. Infected programs will have a file length increase of
250 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will have
been updated to the current system date and time when infection
occurred. The following text strings are visible within the viral
code in all infected programs:
"*.com"
"tajfun1.0"