It is a harmless nonmemory resident parasitic virus. It searches for NewEXE
(LX) files, reads 2048 (800h) bytes from the file beginning, writes that
data to the end of the file, and then writes itself to 2048 bytes of the
file header. Then the virus creates a temporary file, copies the host file there, disinfects and executes that file. Then the virus returns control to the system.
While searching and infecting the files, the virus uses OS/2 calls:
DosExit DosChgFilePtr DosClose DosDelete DosFindClose DosFindFirst
DosFindNext DosNewSize DosOpen DosGetEnv DosRead DosWrite DosExecPgm
The virus contains the text strings: