When the virus is run, it infects every DOS executable file in the same directory by writing itself to the end of the binary.
This virus does not stay memory resident after program termination.
On December 25, when the user attempts to execute an infected program, the virus terminates it.
On April 1, the virus deletes the file after the runtime of an infected program.
The virus contains the internal text strings: