It is memory resident virus that infects Windows PE executables. It infects KERNEL32.DLL. The next time Windows is reboot, the virus infects files that executed.