Sophos

W32/Rodok-A

Aliases
  • BR2002
  • W32.HLLW.Henpeck
  • W32/Fleming.worm
Category
Type
What to do

Summary

 
Included in our products from November 2002 (3.63)
Detected by All Sophos products

Action

More Information

W32/Rodok-A is a worm that spreads via MSN Messenger and sends the message
"Hey!! Could you please check out this program for me? :) I made it myself and want people to test it. Its a readme with the program that explains what it does! http://home.no.net/downl0ad/BR2002.exe <-- There you can download it! give me advices on what to upgrade please!!"

The worm also attempts to download and execute Troj/Brat from the web site described in the message. Afterwards the worm displays a fake CD key generator.

W32/Rodok-A is also capable of stealing keys for the games Half-Life and Counter-Strike and sending them to a Hotmail email address.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer