Page 1 of 1

TS Virus Warning

Posted: 04 Jun 2003, 14:05
by ELH~Lancer
Saw this on the TS site;

Dear TeamSpeak users,

Unfortunately the TeamSpeak name is victimized by a virus commonly known as w32.SoBig.C. Our name is used by this virus as the sender of the virus. It might be a person that has been in contact with us that unknowingly has spread this virus.
We are sure all of our computers are free of this virus and this virus is NOT send by us. If you receive a mail from either sales@teamspeak.org or wouter@teamspeak.org be sure to check if the mail contains an attachment (see below) and DO NOT open them but delete them.
If you asked for information at TeamSpeak and get a mail by these addressess without attachments it's safe to open them.

If you have opened the infected mail you can use this tool from Symantec to remove it.

Needless to say it's good to have a virusscanner. We'd like to stress that these mails are not sent by us. It is rumoured the virus uses the addresses of 52 wellknown companies to propogate itself. If nothing else: we are getting popular .


From the Symantec virus database:
A virus is raging around the internet with the following names:
W32/Sobig.c@MM [McAfee], Win32/Sobig.C [ESET], Sobig.C [F-Secure], I-Worm.Sobig.c [KAV], WORM_SOBIG.C [Trend], Win32.Sobig.C [CA], W32/Sobig-C [Sophos]

W32.Sobig.C@mm is a mass-mailing worm.
The attachment name will be one of the following:
screensaver.scr
movie.pif
submited.pif
45443.pif
documents.pif
approved.pif
application.pif
document.pif


Regards,

The TeamSpeak team