high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 13 February 2007 20:05:08 (GMT) |
| Last updated | 7 July 2008 23:24:35 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Your options
- Please send us a sample to assist in improving our technology
- Use the instructions for removing generically detected files to delete the file from your computer
- If problems persist, contact Sophos support for assistance with removal
More Information
Mal/Zapchas-A is a family of Trojans for the Windows platform.
Members of Mal/Zapchas-A run continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
When members of Mal/Zapchas-A are installed some of the following files are typically dropped:
aliases.ini
control.ini
explorer.exe
mirc.ico
mirc.ini
nicks.txt
postcard.gif.exe
remote.ini
script.ini
servers.ini
sup.bat
sup.reg
svchost.exe
users.ini
The main dropped executable executable is usually a version of the mIRC chat application, sometimes infected with another virus.
Members of Mal/Zapchas-A often create the following folders:
download
sounds
system\logs
Members of Mal/Zapchas-A often set a registry entry at the following location to run the main dropped executable:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
