Worm_fizzer.a

Firewalls, routers, servers, switches, SANs, PBXes, security and related topics
Locked
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Worm_fizzer.a

Post by Red Squirrel »

This is a mass-mailing worm that spreads via email, using its own SMTP server.

It sends an email message of varying formats to all the addresses found in Windows Address Book and Microsoft Outlook. An example of the email is shown below:

Subject: Fwd: moin lim
Message body:
I sent this program (Sparky) from anonymous places on the net.
Attachment: Elizab71.pif

The worm arrives as a file attachment with a .EXE, .PIF, .COM, or .SCR extension.

The malware also has the ability to propagate via Kazaa peer-to-peer file sharing network. Furthermore, it can connect to IRC servers and join channels so that it can perform its backdoor routines.

It runs on Windows 95, 98, ME, NT, 2000 and XP.


Source and more info:

http://www.trendmicro.com/vinfo/virusencyc...e=WORM_FIZZER.A

Archived topic from Iceteks, old topic ID:660, old post ID:5113
Honk if you love Jesus, text if you want to meet Him!
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Oh great! :bsod:

Mozilla Mail is supposed to be MUCH more secure than Outlook or Outlook Express, and I hope that is true. :banghead: Mozilla isn't supposed to let anything run within the e-mail, unlike OE... :banana: :banana:

Anyway, some great advice is to NEVER open attachments unless you know what they are. (Or if they are from me. :biglaugh: )

Archived topic from Iceteks, old topic ID:660, old post ID:5116
User avatar
Wren
Posts: 2881
Joined: Sat Jan 25, 2003 7:36 pm

Worm_fizzer.a

Post by Wren »

My OE won't download any attachments. My family and friends are always sending me something cute, according to them. They don't know I never see those cute things! :roflmao2:

Archived topic from Iceteks, old topic ID:660, old post ID:5120
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Wren wrote: My OE won't download any attachments. My family and friends are always sending me something cute, according to them. They don't know I never see those cute things! :roflmao2:
You can change that, but I don't know if you want to! :P :yo:

Even if you disable attachments, OE has holes.... A LOT of holes... OE and Outlook are hackers' favourite e-mail programs to target...... :roflmao2: :roflmao2: :bsod:

Archived topic from Iceteks, old topic ID:660, old post ID:5121
User avatar
Wren
Posts: 2881
Joined: Sat Jan 25, 2003 7:36 pm

Worm_fizzer.a

Post by Wren »

I set it up that way. ZoneAlarm seems to be doing a good job too.

Archived topic from Iceteks, old topic ID:660, old post ID:5123
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Worm_fizzer.a

Post by Red Squirrel »

I rarely get virus emails. Someone tried to spread one and I was the starting point. I'm hard headed with that, the virus did not go far. :roflmao2:

He kept sending it over and over. I replyed with a sentance that had the word FBI in it, and he suddently stopped. :P

Archived topic from Iceteks, old topic ID:660, old post ID:5133
Honk if you love Jesus, text if you want to meet Him!
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Wren wrote: I set it up that way. ZoneAlarm seems to be doing a good job too.
Okay, I have come to the conclusion that you are one geeky grandmother! :banana: :banana: :banana: :)

Remember: Geeky is always a good thing! :D

I haven't gotten a virus-infected e-mail in awhile. All of them didn't affect me, since I didn't open the attachments... B) I was using OE back then though... :bsod:

Archived topic from Iceteks, old topic ID:660, old post ID:5135
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Worm_fizzer.a

Post by Red Squirrel »

I use Outlook, not OE but they both have mostly the same security problems.

I don't use the address book or the auto preview frame though.

Archived topic from Iceteks, old topic ID:660, old post ID:5140
Honk if you love Jesus, text if you want to meet Him!
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Red Squirrel wrote: I use Outlook, not OE but they both have mostly the same security problems.

I don't use the address book or the auto preview frame though.
I do use the Windows Address Book, and I really don't know why! :roflmao2: :roflmao2:

I like the autopreview feature.... Mozilla has a neat little feature that allows YOU to decide what HTML tags are allowed.... I think that is cool! :banana: :banana:

Does Outlook allow Javascript? Mozilla doesn't by default, but you can enable it. :)

Archived topic from Iceteks, old topic ID:660, old post ID:5142
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Worm_fizzer.a

Post by Red Squirrel »

I think it does allow it, but I've never seen it. Hopefully not since it could be used maliciously in html emails! :eek:

Archived topic from Iceteks, old topic ID:660, old post ID:5144
Honk if you love Jesus, text if you want to meet Him!
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Red Squirrel wrote: I think it does allow it, but I've never seen it. Hopefully not since it could be used maliciously in html emails! :eek:
Maybe you can disable it if it does. :)

Archived topic from Iceteks, old topic ID:660, old post ID:5145
User avatar
Red Squirrel
Posts: 29209
Joined: Wed Dec 18, 2002 12:14 am
Location: Northern Ontario
Contact:

Worm_fizzer.a

Post by Red Squirrel »

This is Microsoft we are talking about. :roflmao2:

Actually I can disable html if I want, but I rather not.

Archived topic from Iceteks, old topic ID:660, old post ID:5151
Honk if you love Jesus, text if you want to meet Him!
Chris Vogel
Posts: 5140
Joined: Fri Jan 10, 2003 1:14 am

Worm_fizzer.a

Post by Chris Vogel »

Red Squirrel wrote: This is Microsoft we are talking about. :roflmao2:

Actually I can disable html if I want, but I rather not.
I wouldn't disable HTML either.

A great add on for Outlook would be a few features that Mozilla has. The option to disable Javascript and the options to allow certain HTML tags but not others are some great features.... B)

Archived topic from Iceteks, old topic ID:660, old post ID:5161
Locked