Project Snowblind Worm

[Barman58]

Project Snowblind Worm


Sophos has posted an article on their blog about a game installer that also includes a worm.
The game is titled Project: Snowblind. It is a multi-player first-person shooter from Eidos. The worm that comes with the installer is vghhost.exe. It is a network worm and also an IRC backdoor Trojan.
It can perform screen captures and log information among other processes. The author of the of the article notes that users should download legitimate freeware games from reputable sites or from the game publisher’s website.
Source: Sophos

 

[stormy13]

Seeing as this game came out 4 years ago,

Project Snowblind - Wikipedia, the free encyclopedia

I get the feeling this is a false positive on Sophos part. That and if something like this was in the game, don't you think it would have been detected and reported long ago? Also a Google search of that file (vghhost.exe )doesn't bring up much,

vghhost.exe - Google Search

The origianl article on Sophos, and links to a few sites that reported it. Only way I can see this as being legit is if it came from a torrented version of the game, there is no way that a legit game developer/publisher would do something like this intentionally, not if they wanted to stay in business at least.