This virus infects COM and EXE files, and uses a complicated on-the-fly encryption to make code analysis difficult. The virus activates on random dates, corrupting data and sometimes disabling disk writes completely. VARIANT:TS.1200 This variant can not always be disinfected succesfully, because it doesn't preserve the stack segment setting when infecting EXE files.
VARIANT:TS.1200 This variant can not always be disinfected succesfully, because it doesn't preserve the stack segment setting when infecting EXE files.
This variant can not always be disinfected succesfully, because it doesn't preserve the stack segment setting when infecting EXE files.