It is harmless nonmemory resident parasitic Win32 virus.
It searches for Win32 EXE applications (PE EXE files) and writes itself to the beginning of the file. The original file content is moved down while infecting, so infected files are not destroyed. The virus contains errors in its code, so that it corrupts most of EXE files when it tries to infect them.
The virus looks for files in current directory only, and infects up to 6 files in there.
Known virus version checks Windows version and does work under WinME only.
Otherwise it displays following message box and exits:
WinME.Triton by Radix16/SMF
Please install WinME thx :)
The virus also creates the TRITON.EXE additional file in current directory and spawns it.
