Payload (Variant A)Edit
When first run, the virus overwrites every .exe executable (except EMM386.exe and SETVER.exe as well as any executables that are being currently run and are locked by windows) in the Windows directory. This leads to many of the computer's files such as notepad.exe and calc.exe to become non responsive.
The virus displays the message:
"AV Intelligent Updater:
Please select an email address to send at your friend. Select email address with 'a' only not with 'A'."