Hobbit posing as Bugbear cleaner

Written in Visual Basic, this virus attempts to spread by mailing itself to email addresses extracted from the temporary internet files, and sharing itself using the KaZaa peer-to-peer file sharing network. The original source code has been released, leading to multiple compilations of this virus.

This worm arrives as in an email message containing the following information:

Subject: AntiVirus Updates:
Body: A Removal to scan for the new BugBear Virus. Recommended by%senders name% (note there is no space after the word "by")

http://vil.mcafee.com/dispVirus.asp?virus_k=99739

Regards,

Pieter