Summary

Summary
Action
More Information
| Included in our products from | November 2002 (3.63) |
|---|---|
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please read the instructions for removing worms.
More Information
W32/Rodok-A is a worm that spreads via MSN Messenger and sends the message
"Hey!! Could you please check out this program for me? :) I made it myself and want people to test it. Its a readme with the program that explains what it does! http://home.no.net/downl0ad/BR2002.exe <-- There you can download it! give me advices on what to upgrade please!!"
The worm also attempts to download and execute Troj/Brat from the web site described in the message. Afterwards the worm displays a fake CD key generator.
W32/Rodok-A is also capable of stealing keys for the games Half-Life and Counter-Strike and sending them to a Hotmail email address.
