symantec reports rdbot/IRCbot was mailed as NAV updater:

Last Updated on: October 10, 2003 09:47:05 AM
...

The Trojan may arrive in an email with the following characteristics:

From: updates@symantec.com (spoofed email address)
Subject: Last Update.
Attachment: nav32.zip
Attachment Type: Zip file
Attachment Size: 15.5 Kbytes

...
complete info: http://securityresponse.symantec.com....ircbot.b.html

! if someone got this file ...i would like to get it, thx !

(i wanna unUPX and put in disassambler,so no need to ask me ,whoot?)