It infects EXE files while infected application is running by writing itself to the end of infected applications. Virus itself does not keep original modified timestamp. Therefore, it's possible to identify which files have been infected in case that no such applications have been modified by user itself.
On 1st of any month, it will show following message: "My Baby Do you Love me ? Do not Say No !" Also, it will start deleting all files on all local hard drives.
Appears on these pages
Virus.Win32.Saynob.2406 or Saynob (also known as Fakelove) is a virus that runs on Windows...