Written in Delphi

Released in September 1999

displayed dialog box

added:
c:\WINDOWS\SYSTEM\Nlhvld.dll (renamed WSOCK32.DLL) 
size: 40.960 bytes 

changed:
c:\windows\system.ini, [boot] "drivers" 
ntsvsrv.dll 

remark:
The trojan program is an email attachment called Y2KCOUNT.EXE that comes in an email message