backdoor/zapchast

[Duh_OZ]

Virustotal results below. Received file from a link in an e-mail -
standard 'you have a postcard' spiel:

Antivirus Version Update Result
AntiVir 6.33.0.70 12.27.2005 IRC/Zapchast.20
Avast 4.6.695.0 12.27.2005 no virus found
AVG 718 12.27.2005 IRC/BackDoor.Flood
Avira 6.33.0.70 12.27.2005 no virus found
BitDefender 7.2 12.27.2005 Trojan.Irc.Flood.EV
CAT-QuickHeal 8.00 12.27.2005 Backdoor.IRC.Cloner.ae
ClamAV devel-20051108 12.26.2005 Trojan.IRCBot-93
DrWeb 4.33 12.27.2005 IRC.Flood
eTrust-Iris 7.1.194.0 12.27.2005 no virus found
eTrust-Vet 12.4.1.0 12.25.2005 no virus found
Fortinet 2.54.0.0 12.27.2005 IRC/Zapchast.4D53-bdr
F-Prot 3.16c 12.26.2005 could be infected with an unknown virus
Ikarus 0.2.59.0 12.27.2005 Backdoor.Win32.mIRC-based
Kaspersky 4.0.2.24 12.27.2005 Backdoor.IRC.Zapchast
McAfee 4660 12.27.2005 Generic component
NOD32v2 1.1340 12.26.2005 no virus found
Norman 5.70.10 12.27.2005 no virus found
Panda 8.02.00 12.27.2005 Bck/Zapchast.BF
Sophos 4.01.0 12.27.2005 Troj/Zapchas-AE
Symantec 8.0 12.27.2005 no virus found
TheHacker 5.9.1.062 12.27.2005 no virus found
VBA32 3.10.5 12.27.2005 Backdoor.IRC.Zapchast

 

[Max Wachtel]

(e-mail address removed) AKA Duh_OZ on 12/27/2005 in

Virustotal results snipped

******************Reply Separator*************************

You should send the file to the vendors that need to update their sig
files.
max
--
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
Keeping Windows Clean: http://home.neo.rr.com/manna4u/keepingclean.html
Windows Help: http://home.neo.rr.com/manna4u/tools.html
Specific Fixes: http://home.neo.rr.com/manna4u/fixes.html
Forums for HiJackThis Logs:
http://home.neo.rr.com/manna4u/forums_for_hijackthis_logs.html
To reply by e-mail change nomail.afraid.org to gmail.com
nomail.afraid.org is setup specifically for use in USENET
feel free to use it yourself. Registered Linux User #393236