The virus infects the system on AutoOpen call and writes itself to
documents on FileSaveAs call. The virus creates a counter in system
profiles (WIN.INI) file:
The virus increases this counter on each AutoExec, and when the counter reaches
10, the virus changes the Windows palette colors.