Rumor is that Myth III is infected with the recent nimda virus. SunStyle's post at MWA informs and warns:
I just Had couple of friends complaining about nimda virus... i end up checking my computer and i'm infected by same virus... I talk to a couple of other friends, they all say their computer is fucking up! I tell them to run virus software, they all got same virus! Guess what we all have in COMMON? We all have installed Myth 3 full!Also if you goto here http://www.mcafee.com/anti-virus/viruses/nimda/default.asp?cid=2444 it says:
McAfee.com has noticed an increase in the prevalence of the Nimda worm during the week of 10/29/01 - 11/2/01!Correct me if i'm wrong, but the myth 3 was realeased 2 days b4 demo? And demo was release on 10.31.01! So That would explain the sudden increase on this virus
This is definitely not something you want to ignore. Coffee and ax have confirmed the virus's presence on their hard drives. This doesn't look good.
It's too early to conclude whether or not this has affected all or most Windows users, but a recall for Myth III could be in order if this proves to be more than coincidence.
UPDATE: ax has sent us an image that shows the nimda virus on the Myth III CD. This is not a scan of ax's hard disk, but of the CD-ROM itself.
Comments
Anonymous (not verified)
update..
I fully scanned my hard drive and didnt find anything other than the copied ikernal.exe file. It's possible that this is a NAV false positive.
-ax
Anonymous (not verified)
Nimda
In reply to: update..I scanned both my harddrive and my Myth 3 CD for Nimda, using Network Associate's "Nimda Scan" utility, which I've found to be good at cleaning Nimda out of computers, and found nothing. Dunno what to say, except maybe NAV was giving you a false positive or you got it somewhere else.
Gawyn
Anonymous (not verified)
Re: Nimda
In reply to: Nimda: I scanned both my harddrive and my Myth 3 CD for Nimda,
: using Network Associate's "Nimda Scan" utility, which I've
: found to be good at cleaning Nimda out of computers, and
: found nothing. Dunno what to say, except maybe NAV was
: giving you a false positive or you got it somewhere else.
Obviously it isnt the latter, since it's scanning the *CD*, not the hard drive. It's definately possible that it could be a false positive.
Nimda scan probally wouldnt catch it if it existed, since this is a variant of it. I did try that, and got nothing. Who knows, it could even just be a batch of copies that are infected.
IKERNEL EX_ 344,923 09-05-01 4:24a ikernel.ex_
-ax
Anonymous (not verified)
more
Short update.
NAV added to it's list on November 9th (see http://securityresponse.symantec.com/avcenter/defs.added.html)
Mcafee doesnt even mention the name, although they do mention other names of nimda variants named by NAV.
-ax