The virus also creates the files OUT.COM, DOM.COM, KOS.COM that are
infected by viruses “Ph33r”, “Hare.7786”, “Natas.4746” and copies these
files with the names C:MSAV.COM, C:KILL.COM, C:GMOUSE.COM. The virus
also inserts calls to these files into the C:AUTOEXEC.BAT file.