Hiya,

We have just found a file on one of our machines that has what Sophos has identified as troj/revopdo-A. There does not seem to be much info about this about, I have spoken to sophos and they are sending it to their labs. It seems to have dropped the file do.exe in the root of the C: drive on a Win98 SE box. Our proxy does not allow downloading of executable files so IE (the usual suspect) is pretty much out. The thing is Sophos don't currently seem to know how it spreads from what the guy said to me, wont have a chance to check it out more till later. Any adventurous people out there fancy having a look at a copy if I upload it ?