QUOTE
WebsenseŽ Security Labs has received several reports of a new worm, "Nugache",...spreading on AOL/MSN Instant Messenger...The worm opens a back door on TCP port 8, and installs a bot...the bot appears to connect to infected peers instead of a static list. A peer-to-peer command & control channel makes it more difficult to block commands issued to the bot. The traffic over this channel also uses obfuscation in an attempt to bypass intrusion detection systems.
websensesecuritylabs

AOL IM bot cloaked in encryption