According to the description of the virus on the Sophos Web site, when the virus is run, it displays the message "Deleted files are going to be saved into a hidden directory and replaced during uninstallation. (1) files are being deleted every 30 minutes."

The trojan will also display pornographic images on the infected computer, as well as a message saying it is moving the user's files into invisible hidden folders...In order to unlock the computer, the user is asked to send $10.99 via Western Union...