It's a memory resident harmless parasitic encrypted virus. It hooks INT 01, 21h. It disables the tracing mode by using INT 01. INT 21h is used for the file infection. The virus infects COM-files on their execution. It encrypts the virus body and writes it to the file end. The decryption routine is saved into the file beginning - so the virus consist of two parts: the decryption part (at the file beginning) and the main virus body (at the file end). This virus contains the internal text string: "COMEXE Fans Ver 0.01".
