This virus infects programs by overwriting them, but unlike most overwriting viruses it will generally not destroy the host program. This is because it will only overwrite unused areas within the program. The virus searches for a block of at least 416 zero bytes, and places itself there. As such programs are rare, this reduces the chances of the virus spreading.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.