It is a harmless nonmemory resident encrypted parasitic Windows virus. It searches for PE EXE files (Win32 executables), then writes itself to the end of the file to the last file section by increasing its size. The virus searches for PE files in the current and Windows directories.
The virus is Win95/98 specific. To access Windows functions is scans Windows kernel data addresses that are valid only under Win9x, not WinNT.
The virus contains the text strings:
[Becoming]
[Coded by Bumblebee]
