Page 1 of 1

Virus in Teamspeak RC2

Posted: 08 Jun 2004, 14:41
by Tach Deneva
You may already have heard about this - 'PWS.hooker.Trojan' has been infecting TS2 - I just found it in my TS folder. Dunno how it got there, but chances are if you use TS2, you've got it, too. See the following link for full details:

http://securityresponse.symantec.com/av ... rojan.html

TD

Posted: 08 Jun 2004, 14:46
by Mooseman
yup, had it, nortons deleted it, now i get a 'keypress dll' error...ts 2 seems to work still tho, so i won't complain too much :)

Posted: 08 Jun 2004, 17:07
by BlackHawk*K
hmm must of gotten off lucky. i dont have the reg key nor any of the file names on my system... wounder how i got out of this one LOL.

one thing though, there are some adware stuff out there that is worse then any virus ( almost ) i spent a 3 day struggle with one and finaly beat the bad boy :P it was realy bad, if i played any sort of game it would actualy take all my internet bandwidth for a few seconds disconnecting me from games etc. then would dump to desktop and open a window with some stupid add... i tell ya, that damn thing killed me more times then i can count in a game.

Posted: 08 Jun 2004, 19:20
by Tach Deneva
Norton AV found the keypress.dll file in TS, and two other files in the hidden C:\RECYCLE folder. I had to disable System Restore to get rid of those two. No key in the registry. No complaints from TS about a missing dll. Norton says I'm clean now.

I can't figure where the dang thing came from, tho.

TD

Posted: 09 Jun 2004, 10:49
by Mooseman
here's a link to a fix for it....bascially a new version of the req'd .dll file....according to TS, the old one was acting like a key logger, accidentally of course



http://www.teamspeak.org/forums/attachm ... mentid=393

Posted: 09 Jun 2004, 11:40
by Featherhorse
Mooseman wrote: accidentally of course
Or course....
A simple oversight, I'm sure.

I'll have to check mine when I get home tonight.
I wonder if I might not have it since I haven't fired up the old PC in a few months.
I'll let you guys know what I find.

I'm still with you in spirit, was just telling Mince yesterday about a dream I had where we were dropping with MekTek PaK V5.0, and I was still using the old light gauss Uzi and lovin every minute of it.

Fethr

Oh, and we won the drop by the way.
:drink_bud :play

Posted: 09 Jun 2004, 15:51
by Tach Deneva
Featherhorse wrote:A simple oversight, I'm sure.
Yup. Just an oversight. Which also explains why TS wants to connect to the TS homesite (some kinda 'abuse' page there) every time ya run it. I used to block it with Sygate Personal Firewall, which meant starting TS, stopping it from connecting to the TS abuse thing, then restarting TS again so I could connect to SD's server. Pain in da butt. Now I just let it rip.

TD

Posted: 10 Jun 2004, 13:00
by BlackHawk*K
a guy in my planetside outfit posted this as the fix to TS.
At this time we have put together a new Teamspeak client installation executable which you may download from:
ftp://teamspeak.krawall.de/releases...nt_rc2_2032.exe

Simply shutdown your Teamspeak client if it is running and re-install Teamspeak using this executable right on top of your existing installation and the problem should go away. It is NOT necessary to first uninstall your existing Teamspeak client and you will also NOT lose your current Address Book and other client settings

Posted: 14 Jun 2004, 20:15
by Firemane
Thanks for the warning, Tach. I turned off my restore & ran my AV program. It didn't detect it so I guess I don't have it (knock knock).