|Place of Origin||India?|
|Infection Length||898 bytes|
When executed, the virus checks if another copy is in memory, and if not, becomes memory resident. It infects .com files, appending itself to them as they are executed. Shadow hides itself in memory and can't be viewed with the MEM command.