It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and on several DOS calls (file and disk accessing calls) it searches for .EXE files in the current directory, then writes itself to the end of the file. On April, 29th it displays the message:
ZHANGFAN:
HAPPY BIRTHDAY TO YOU!
