By Jon Newton 5/22/03
May 8 was the date Fizzer, a mass-mailing worm that sends itself to all contacts in the Windows Address Book, appeared for the first time.
And Fizzer really likes Kazaa.
McAfee says Fizzer has all kinds of components and an internal timer to trigger different processes at different times, going on that these include addresses gathered from different places such as Outlook Contacts list, Windows Address Book (WAB), addresses found on the local system, randomly manufactured addresses; and, IRC bot; AIM bot; Keylogger; KaZaa worm; HTTP server; Remote access server; Self-updating mechanism; and, Anti-virus software termination
It also says not only does the worm have its own SMTP engine and uses the default
SMTP server as specified in the Internet Account Manager registry settings,
it can also use any one of several hundred different external SMTP servers.
It turns up as an email attachment and, McAfee continues:
"The from address can be forged such that the apparent sender is not the
actual sender. Message body and subject lines vary, as do attachment names.
Attachments use standard executable extensions (.com, .exe, .pif, .scr). Such
Body: The peace
Subject: Re: You might not appreciate this...
Subject: Re: how are you?
Body: I sent this program (Sparky) from anonymous places on the net
Subject: Fwd: Mariss995
Body: There is only one good, knowledge, and one evil, ignorance.
Subject: Re: The way I feel - Remy Shand
Go here for more on Fizzer.
Jon Newton is the editor of p2pnet.net and is a regular contributer to MP3 Newswire. Jon's site is devoted to the politics of digital music and his insights as well as those of his co-writers can be read there. We urge you to explore it.
Other MP3 stories:
Nielsen/NetRatings: file traders buy music
File Traders in Court.