Slashdot Mirror


Fizzer Worm Uninstalling Itself

boredMDer writes "According to a recent update on the Dshield.org mailing list, apparently the Fizzer Task Force has gained control of the Geocities webpage from which Fizzer updates itself. From an IRC-Security mailing list: 'We have also postted a Fizzer cleaner to the actual URL that the bot downloads its updates from, as a self extracting and running executable.' The Fizzer-uninstaller posted there creates the file '%WinDir%\uninstall.pky', which then causes Fizzer to remove all of its registry keys. Looks like the Fizzer worm will soon come to an end."

4 of 434 comments (clear)

  1. A more far fetched theory by VTS · · Score: 0, Troll

    The worm is of alien origin!
    When it realised how primitive the machiene it was running on (%WinDir%) it decided to commit scuicide!
    Oh well, we will have to wait a bit longer to get in touch with those aliens...

    --
    --- No 16-bit support in Vista? Half of our modules still use it! ---
  2. Re:wtf? by A55M0NKEY · · Score: 0, Troll

    I haven't been able to use IRC for a long time now. I wish they'd put an executable on that web site that would delete the fizzer-user's hard drive so they learn a lesson about not letting themselves be host to a host of viruses.

    --

    Eat at Joe's.

  3. Re:wtf? by Natty+P · · Score: 0, Troll

    If you apply the actual circumstances to your example this would be like the thief that has already broken into your house calling the police to arrest him.

  4. Re:Huh? by Erasmus+Darwin · · Score: 0, Troll
    "How do you feel about fire trucks running red lights?"

    That's a piss-poor analogy. A fire truck is being operated by people who have been trained and certified to use it in a manner contrary to regular traffic laws.