It's a memory resident not dangerous parasitic virus. It copies itself into the interrupt vector table at the address 0011:0000 and hooks INT 21h and INT 08h. Then it checks the INT 21h calls and on the FindFirst function call this virus searches for .EXE-files and writes itself at their ends. Sometimes it 'shakes' the screen.
