When the virus is run, it writes a special routine into the MBR, which is used for the second payload.
After infecting the MBR, it displays a high quality 16-bit image followed by a beep. The picture might be done with an optimized 16-bit palette color. After that it will return to DOS after a keypress.
For the second payload, if the PC is rebooted, the special routine is run, which would erase the disk sectors.
This family has 7 variants in total:
Currently it is unknown that how the virus spread and it does not infect any executable file during runtime.