Xandu.2385 is a computer virus that spreads through infected DOS .exe (executable) files. It was first identified in December 1994. Xandu.2385 is a memory resident virus that infects EXE files in DOS operating systems of version 5.0 and higher. It becomes memory resident at the top of system memory and uses interrupt 21.