The so-called storm worm has returned with a vengeance as more than two million trojan-based spam began bombarding inboxes on Thursday, researchers said.