Discovered on: December 02, 2003
Last Updated on: December 03, 2003 10:38:16 AM
W32.Kwbot.S.Worm@mm is a mass-mailing variant of W32.Kwbot.Worm. The worm attempts to spread through the Kazaa file-sharing network and uses its own SMTP engine to email itself to contacts in the Windows address book.
The email message has the following characteristics:
Subject: (randomly chosen from the following list)
check this out
please give me feedback on this
long time no see
pictures of the kids
good antivirus
Attachment: app.exe
W32.Kwbot.S.Worm@mm is packed with UPX v1.20.
Also Known As: Backdoor.IRCBot.gen [KAV]
Type: Worm
http://www.symantec.com/avcenter/venc/data/w32.kwbot.s.worm@mm.html

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic