New E-Mail Virus Warning - Fizza.A
Posted: 12th May, 2003 By: MarkJ
Anti-Virus firm Central Command has issued a new online e-mail virus (worm) warning for the latest infection to hit the Internet - Fizza.A:
Details:
Name: Worm/Fizzu.A
Alias: W32/Fizzer.A-mm
Type: Internet Worm
Discovered: May 8, 2003
Size: 220.160KB
Platform: Microsoft Windows 9x/ME/NT/2000/XP
Description:
Worm/Fizzu.A is an Internet worm that spreads through e-mail by using addresses it collects in the Microsoft Outlook Address Book, as well as, in the Windows Address Book. It can also arrive through the file-sharing program Kazaa.
The worm may arrive in via email in the following format:
** Please note that received emails will all have different contents. The attachment name, subject line and body are built from a large list of English and German words.
Subject: Re: You might not appreciate this...
Body: There is only good, knowledgem, and one evil, ignorance Attachment: Service.scr
or
Subject: Why?
Body: I sent this program (Sparky) from anonymous places on the net
Attachment: Desktop.scr
If executed, the worm copies itself in the \windows\ directory under the filenames "INITBAK.DAT" and "ISERVC.EXE". Additionally, it creates the following new files in the Windows directory, "ISERVC.DLL" (7.680 KB) and "PROGOP.EX"E (15.360 KB).
Worm/Fizzu.A has been seen to terminate applications with the following process names:
- NAV
- SCAN
- AVP
- TASKM
- VIRUS
- f-prot
- VSHW
- ANTIV
- VSS
- NMAIN
It also has the ability to log keystrokes.
Details:
Name: Worm/Fizzu.A
Alias: W32/Fizzer.A-mm
Type: Internet Worm
Discovered: May 8, 2003
Size: 220.160KB
Platform: Microsoft Windows 9x/ME/NT/2000/XP
Description:
Worm/Fizzu.A is an Internet worm that spreads through e-mail by using addresses it collects in the Microsoft Outlook Address Book, as well as, in the Windows Address Book. It can also arrive through the file-sharing program Kazaa.
The worm may arrive in via email in the following format:
** Please note that received emails will all have different contents. The attachment name, subject line and body are built from a large list of English and German words.
Subject: Re: You might not appreciate this...
Body: There is only good, knowledgem, and one evil, ignorance Attachment: Service.scr
or
Subject: Why?
Body: I sent this program (Sparky) from anonymous places on the net
Attachment: Desktop.scr
If executed, the worm copies itself in the \windows\ directory under the filenames "INITBAK.DAT" and "ISERVC.EXE". Additionally, it creates the following new files in the Windows directory, "ISERVC.DLL" (7.680 KB) and "PROGOP.EX"E (15.360 KB).
Worm/Fizzu.A has been seen to terminate applications with the following process names:
- NAV
- SCAN
- AVP
- TASKM
- VIRUS
- f-prot
- VSHW
- ANTIV
- VSS
- NMAIN
It also has the ability to log keystrokes.
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
150,000+ Customers | View More ISPs
Cheapest ISPs for 100Mbps+
Modest Availability | View More ISPs
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
Large Availability | View All
Cheapest ISPs for 100Mbps+
Large Availability | View All
Helpful ISP Guides and Tips
Sponsored Links
The Top 15 Category Tags
- FTTP (5530)
- BT (3518)
- Politics (2542)
- Openreach (2298)
- Business (2266)
- Building Digital UK (2247)
- FTTC (2045)
- Mobile Broadband (1977)
- Statistics (1790)
- 4G (1668)
- Virgin Media (1621)
- Ofcom Regulation (1465)
- Fibre Optic (1396)
- Wireless Internet (1391)
- FTTH (1382)
Sponsored
Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules