This worm is a Visual Basic 6 (VB6) program that spreads using MSN Messenger. It requires Msvbvm60.dll to run.

When activated, this worm registers its process to the system as MsgSprd.

It next creates the value

MSN Messenger %download location%
\PIC1324.exe

in the registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Run

and displays the following message:

It remains active (silently), waiting for contacts to send you messages by MSN messenger.

When a contact is made by MSN Messenger, this worm waits a few seconds and sends the following message to the contact:

hey, want me to send my new pic?
i took it yesterday

If the contact responds with any of the following key words in their message:

• yes
• sure
• yea
• guess
• send
• there
• maybe
• ok cool

it sends itself to that contact along with the message:

alright, here ya go
hope you like it

This worm contains the following text inside itself:

I come in piece. My name is Jerry. The purpose of me is to spread. I'm not annoying, nor dangerous.