| Comments: |
The virus deletes files in the
C:\, C:\Windows, C:\Documenti, and C:\Programmi folders.
Due to the naming of the latter
two folders, the worm will only delete documents and programs
on a specific non-English version of Windows. It then points
drives A and D (typically the floppy disk drive and the CD-ROM
drive) to empty folders that it created on the hard drive.
The virus also blocks the keyboard, so that the batch file
can not be terminated.
|
