It is a dangerous memory resident encrypted parasitic virus. It writes itself to the end of .COM and EXE files. When an infected file is executed, the virus hooks INT 21h, intercepts FindFirst DOS call and on these calls searches for COM (except COMMAND.COM) and EXE files in the current directory and infects them.
The virus uses not correct anti-debugging tricks and as a result does not work on Pentium computers. Depending on the system date and its internal data the virus also hooks INT 1Ch and in some time halts the computer and displays the message:
+------------------------------------+
| |
| Waiting for halting systemall |
| |
+------------------------------------+
The virus also contains the text strings:
Sys areaCOMMAND*.com *.exe
(C) Izhevsk 1996
