This Trojan worm is received as an attachment "Pics4You.exe" by email that has no subject line and the body of the message reads, "Here's some pictures for you!"

Upon execution, this Trojan worm opens up OLE (Object Linking and Embedding) and enables DCOM (Distributed Component Object Model). Then it creates an entry in the registry so that a copy of itself executes every time the system is re-booted. It also changes the Start page of Internet Explorer to
http://www.geocities.com/SiliconValley/Vista/8279/
index.html,
a personal website that links to an adult content website.

After infecting the host computer, this Trojan worm attempts to use Microsoft Outlook to send itself to up to 50 email users listed in the Outlook address book.
On Jan. 1, 2000 or any day during the year 2000, this Trojan worm writes to the computer's CMOS memory and invalidates the system integrity or checksum data. When the system is rebooted, the user is warned that the "CMOS checksum is invalid," to make the user believe that it is a Y2K related problem and not a computer worm. After validating the CMOS data the computer continues to boot and if the file "cbios.com" is located in the root directory of the c: drive, the virus loads itself and completely reformats d: and c: local drives.