A worm that is usually sent via email as a program attachment named VIDEO.EXE. File is 25,600 bytes.

     Routine appears to be a straight Visual Basic porting of the W97M.Melissa payload routine. The marker is the value:
... by diejkdls

The email message has no subject line.

The body of the email message is:
Here's a digital video for you
The first time the worm is launched, it copies itself to C:\ZIP01.EXE. Then, it registers itself in Windows Registry to start every time Windows begins. The registry key is in:
HKLocalMachine\Software\Microsoft\Windows\
CurrentVersion\Run
as a value Agent5 in order to run C:\ZIP01.EXE

The worm also adds the following Windows Registry keys:
HKLocalMachine\Software\Microsoft\WindowsNT\
CurrentVersion\Windows\Run\Agent5
with the same value set to C:\ZIP01.EXE
There are also strings of MyPics and Video.exe inside the worm program.
     The worm attempts to delete the following files after the 16th of every month:
c:\WinNt\System\*.c*
c:\WinNt4\System\*.c*
c:\Windows\System\*.c*
c:\WinNt\System\*.o*
c:\WinNt4\System\*.o*
c:\Windows\System\*.o*
c:\WinNt\*.i*
c:\WinNt4\*.i*
c:\Windows\*.i*

As with other worm or trojan horse programs, the detected file must be deleted.