It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. It leaves a memory resident program that hooks INT 9 and depending on its internal counter modifies the data in keyboard buffer - it replaces Cyrillic 'a' with 'o' and 'e' with 'i' (the most common grammar mistakes in Russian).
