I rmemeber that the Mosquito script virus showed a picture when it was run as a .bmp and that when run as a .bat it really became active and overwrites several image types with itself. Could something like this be the case here?