It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are opened or accessed with FindFirst ASCII DOS-calls. DOS also performs that call while file executing, so the virus also infects the files that are executed. The virus checks the name of the file, and does not infect A*.EXE files. The virus contains the internal text string:
(Avalgasil)666
