It's dangerous not memory resident overwriting virus. It searches for .ANS-files by using *.ANS mask, and overwrites them. On displaying of infected file (if ANSI driver is installed) the virus tries to rename host file to COM and execute it, then the virus displays the picture.
