Remove Fizzer. Description and removal instructions

 
Title: Fizzer

Type: Worms
Severity scale:Fizzer severity is 80  (80 / 100)
 
Fizzer is a dangerous Internet worm spreading by e-mail in messages with infected attachments and through file sharing networks. The parasite sends malicious letters to all the addresses it finds in the Windows Address Book, cookies, cached web pages and user personal documents. It locates a shared folder of Kazaa peer-to-peer application and infects all the files in it. Once executed, Fizzer runs a payload. It terminates running antivirus programs and security-related tools and starts to log all user keystrokes. The worm includes an integrated backdoor, which can be controlled through an IRC network or AIM chat. The backdoor gives the attacker unauthorized remote access to a compromised computer. Fizzer has the ability to silently update itself via the Internet. The parasite runs on every Windows startup.


Fizzer properties:
• Allows remote user connection
• Sends out logs by FTP or email
• Logs keystrokes
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Fizzer removal:

remover for Fizzer

Fizzer manual removal:

Kill processes:
iservc.exe, progop.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\systeminit
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\txtfile\Shell\Open\Command\@=%Windir%\progop.exe 0 7 %Windir%\notepad.exe %1 %Windir%\initbak.dat iservc.exe
Delete files:
iservc.exe, progop.exe, iservc.dll
Misc:
Fizzer opens the following TCP ports: 81, 2018, 2019, 2020, 2021.

All parasite files can be found in the main system directory C:\Windows or C:\Winnt.

Other programs to remove Fizzer:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 11/07/04
Information updated: 01/10/05

Additional resources related to Fizzer:

Attention: If you know or you have a website or page about Fizzer removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Fizzer parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: