This is a buggy polymorphic virus. It often just corrupts the MBR
instead of infecting it. Lithium has anti-debugging code.
When Windows is started, Lithium detects it and add parameter "/D:FC"
to the WIN.COM command line. This turns off 32-bit disk access and
bypasses the warning usually given by Windows when INT 13h has been
intercepted by a virus.
