If the user double clicks on Servese, an error message about a missing DLL file will pop up on the screen. The virus will then create two files: "Services.exe" and "User.dat". Double clicking on "Services.exe" will cause the service ExplorerServices to run. If the user double clicks on "Calc.exe", it will cause Calc.exe's icon to change and will change it to a .dll file. Then, Servese will duplicate the program with a different icon. It will still run normally, however. Running "Cdplayer.exe" will also cause it to change into a .DLL file. Therefore, it converts any programs the user runs into to a .DLL file, and will duplicate it with a different icon.
If a start file is affected, the system may not boot when the user restarts.