Similar to other T4 variants, this virus spreads from application to application by replacing a call to InitDialogs with a jump to viral code, which it appends to the CODE resource containing the InitDialogs call. It has a destructive payload that deletes files. Note that if the original call to InitDialogs did not pass a nil parameter, a complete repair is not possible because the original parameter information is not retained in the viral code.