The virus code can run automatically, simply when the message carrying the virus is viewed in the preview pane.

I won't clutter the message with all sort of tidbits about the worms that are going around. Read the above and believe it!