Public Service Announcement - Virus found on CloneCD Database program

[Rev]

Hi folks,

I discovered in horror when my friend notified me I have virus on my HDD (which is already gone now).

My McAfee viruscan (latest update) didn't pick it up, but my buddy's norton AV did. This is no advertising. The virus name is IRC.Mimic and its listed on Norton's virus list as a Trojan type so I seriously think its not hoax.

I sent two emails, one to the webmaster where I found this virus and also to CD MediaWorld webmaster. No reply from both party yet so I thought I'd say it here.

Below is the full quote of what I mail to them:

Rev
ps: take care ppl, just heard another virus unleased yesterday (the Nimda or so) that slows down internet access.

----------------------------------------------------------------

17 Sept '01

Dear Webmaster,

Hi, i'd just like to let you know that one file present in the linked website for cd-protection detector utility CD-Clone Database has a virus called IRC.Mimic. This is not hoax, as my friend notified me about it and the virus definition did exist on Norton Antivirus's website (http://www.symantec.com/avcenter/venc/data/irc.mimic.html)

I will notify the webmaster of this site (http://www.mod.myokay.net/english/StarGate.html) shortly about his file containing virus. The file that harbors it is the Borland Database Engine needed for the CloneCD Database 2.0.0.2 to work properly.

I am surprised on my finding with NAV, as my McAfee virus detector did not detect this virus at all, even with latest update.

[BOT]

Get rid of Nortons!
The only thing Nortons is good for is reporting trojans that do not exist.

[Rev]

Evidence?

The McAfee tech-support team was terrible. I sent them mail with every single detail about my problem, and what they say back to me: "we need the specs and version of viruscan that's running".

OK, so I tell him : read my msg buddy, I told you that on my last mail. Now they want me to mail McAfee Software Retail division, because its not Mcafee.com's business (i mailed them with the address posted on their site).

Load of BS these people are.

[BOT]

The only bullshit here is yours!
You are not the first idiot, nor the last who will post messages about non existing trojans.
If you don't delete Nortons then you are asking for lots of false alarms - Nortons is the most useless virus scan utility there is.

[Rev]

Hey,

cool off redneck - i'm saying these tech-support guys are BS. not you. (stop pointing that shotgun at me!).

I was saying: give me just a drop of evidence that those norton guys are geeky and have plenty of spare time around to make up viruses. You're not making your point by just saying "ah don't believe him, believe me instead! Why, because I said so".

See, even the people you call "idiot" knows how things work, and what can be called suspicious and what not.

Rev

ps: while you're here - do you know what happened to the Red Alert2 files (and other Westwood games) on GameCopyWorld/

[crispy]

Just thought I'd add my tuppence worth!

Sadly, NAV is notoriously bad at identifying Trojans, and does spit out loads of false positives. It's heuristic "bloodhound" algorithms are quite literally mad!
You must remeber that reliance on just one or two AV apps is a bad idea. If you really want protection from possible trojans, then get yourself something like TDS-3.

Scan it with that and something like THE CLEANER as well. Only then would I get worried if these reported the same findings.