ladies and gentlement I present to you!!!
Mocbot/W32.Wargbot/Worm.IRCBOT.JK/JL/IRCBOT-ST (choose any of those name that you like)
The worm is using the recent vulnerabilities found in Microsoft Server Service.
Read the details here:
www.microsoft.com/technet/security/Bulletin/MS06-040.mspx
isc1.sans.org/diary.php?storyid=1557
Analysis on the worm can be found here.
www.lurhq.com/mocbot-ms06040.html
isc.sans.org/diary.php?storyid=1592&isc=526790b5781b92880c50cf7a37bc04bf
Well guy get your antivirus fired up and kill this dam thing!
EOF