Here’s some additional info:
http://securityresponse.symantec.com/avcenter/venc/data/html.redlof.a.html

The actual virus can be found in your \System\ directory as either Kernel.dll or Kernel32.dll.

Be careful, under WIN9x I think the real kernel is named “kernel32.dll”.