English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Virus.DOS.Taz.987

Detected Jan 23 1997 20:00 GMT
Released Jan 23 1997 20:00 GMT
Published Jan 12 2000 13:21 GMT

Technical Details

These are dangerous memory resident parasitic encrypted viruses. They hook INT 1Ch, 21h and write themselves to the end of .COM files that are accessed. While infecting a file they check the file name and delete some anti-virus programs. "Taz.995" beeps on any INT 1Ch call. "Taz.1041" displays the message on execution of some anti-virus programs. The viruses contain the text strings:

"Taz.987,995":

[TAZ-10] By The W
(C) Sector Infector 1993
___ TZ-10 ___
Released 12-06-93
Yes, it is a Firefly Hack!
I Miss Ya, Taz!
"Taz.1041":
[TAZ-10] By The W
(C) Sector Infector 1993
Released 12-06-93
Yes, it is a Firefly Hack!
Time to FUCK it UP!
FUCKIN IT
uhhh.....
huh huh

Bookmark and Share
Share
Virus

Viruses replicate on the resources of the local machine.

Unlike worms, viruses do not use network services to propagate or penetrate other computers. A copy of a virus will reach remote computers only if the infected object is, for some reason unrelated to the virus function, activated on another computer. For example:

  • when infecting accessible disks, a virus penetrates a file located on a network resource
  • a virus copies itself to a removable storage device or infects a file on a removable device
  • a user sends an email with an infected attachment.

Aliases

Virus.DOS.Taz.987 (Kaspersky Lab) is also known as:

  • Taz.987 (Kaspersky Lab)
  • Virus: Taz (McAfee)
  • Taz-987 (Sophos)
  • FireFly-987 (ClamAV)
  • Taz.987 (Panda)
  • Taz.987 (FPROT)
  • Virus:DOS/Taz.987 (MS(OneCare))
  • Taz.987 (DrWeb)
  • PS-MPC.0994.DO.Gen.Damaged (BitDef7)
  • Taz.987 (VirusBuster)
  • TAZ-987 (AVAST)
  • Virus.DOS.Taz (Ikarus)
  • Taz (AVG)
  • Taz.987 (NAV)
  • NseCheckFile2() returned 0x00010018 (Norman)
  • Taz (NAI)
  • FireFly.1087 (PCCIL)
  • Taz-0987 (Rising)
  • Taz.987 (VirusBusterBeta)