When the virus is loaded into memory, it triggers the payload by instant.
After that it hooks INT 21h to infect any EXE executable that is run, by encrypting its code, and insert it into the end of the file.
Some routines were poorly programed, the virus might crash the system after installing itself into memory, files infected by this virus usually cannot function properly and cause a system crash when run.
The exact memory usage is 21,056 bytes.
Before the virus starts infecting files, it activates by switching the video mode to CGA, and display the text with an image of Claudia Schiffer (in a way similar to Implant):
Das ist ClaudiaSchiffer virus by OS Sometimes when U stroling down the Avenue the way U walk it makes men Thinkof HAVING U when U walking Down the street everybody stops & turns 2 stare at U! (IrM) Hope 2 meet U...somewhere in time
The virus returns to DOS and restore the video mode after a keypress.
Did you know?
Claudia Schiffer is a German model, actress and fashion designer. She rose to fame from 1990s and became one of the most successful models in world. In Europe and America fashion she also have the other title of "Realized Babie".