When the virus is run, it overwrites the binaries of the head of every DOS executable file in the current directory. When an infected program is run, the virus displays the message:
After that it returns to DOS without running the original program.
The infected files will no longer function.
This virus does not stay memory resident after an execution.
The virus activates on every Tuesday.
It renames the file extension by replacing the letter "O" with the digit "0" of COMMAND.COM file that is located in the upmost directory of C:. And it displays the message:
Error reading drive C: BillMeTuesday!
The system may fail to recognize the file due to the change of its extension.
It is easy to restore the original extension but the virus may change it again as long as the infected files are not cleared.