It is a dangerous nonmemory resident parasitic virus. It searches for NewEXE (Windows) files in the current directory, then overwrites DOS stub code. The virus does not save original stub routine and infected files cannot be recovered. Then the virus decrypts and displays the message (standard DOS stub message):
This program requires Microsoft Windows.
The virus also contains encrypted text in Russian and the strings:
*.exe
(c) DNazi
