Virus in Teamspeak RC2

Tach Deneva · Post by **Tach Deneva** » 08 Jun 2004, 14:41

You may already have heard about this - 'PWS.hooker.Trojan' has been infecting TS2 - I just found it in my TS folder. Dunno how it got there, but chances are if you use TS2, you've got it, too. See the following link for full details:

http://securityresponse.symantec.com/av ... rojan.html

TD

Mooseman · Post by **Mooseman** » 08 Jun 2004, 14:46

yup, had it, nortons deleted it, now i get a 'keypress dll' error...ts 2 seems to work still tho, so i won't complain too much

BlackHawk*K · Post by **BlackHawk*K** » 08 Jun 2004, 17:07

hmm must of gotten off lucky. i dont have the reg key nor any of the file names on my system... wounder how i got out of this one LOL.

one thing though, there are some adware stuff out there that is worse then any virus ( almost ) i spent a 3 day struggle with one and finaly beat the bad boy

it was realy bad, if i played any sort of game it would actualy take all my internet bandwidth for a few seconds disconnecting me from games etc. then would dump to desktop and open a window with some stupid add... i tell ya, that damn thing killed me more times then i can count in a game.

Tach Deneva · Post by **Tach Deneva** » 08 Jun 2004, 19:20

Norton AV found the keypress.dll file in TS, and two other files in the hidden C:\RECYCLE folder. I had to disable System Restore to get rid of those two. No key in the registry. No complaints from TS about a missing dll. Norton says I'm clean now.

I can't figure where the dang thing came from, tho.

TD

Mooseman · Post by **Mooseman** » 09 Jun 2004, 10:49

here's a link to a fix for it....bascially a new version of the req'd .dll file....according to TS, the old one was acting like a key logger, accidentally of course

http://www.teamspeak.org/forums/attachm ... mentid=393

Featherhorse · Post by **Featherhorse** » 09 Jun 2004, 11:40

Mooseman wrote: accidentally of course

Or course....
A simple oversight, I'm sure.

I'll have to check mine when I get home tonight.
I wonder if I might not have it since I haven't fired up the old PC in a few months.
I'll let you guys know what I find.

I'm still with you in spirit, was just telling Mince yesterday about a dream I had where we were dropping with MekTek PaK V5.0, and I was still using the old light gauss Uzi and lovin every minute of it.

Fethr

Oh, and we won the drop by the way.
:drink_bud :play

Tach Deneva · Post by **Tach Deneva** » 09 Jun 2004, 15:51

Featherhorse wrote:A simple oversight, I'm sure.

Yup. Just an oversight. Which also explains why TS wants to connect to the TS homesite (some kinda 'abuse' page there) every time ya run it. I used to block it with Sygate Personal Firewall, which meant starting TS, stopping it from connecting to the TS abuse thing, then restarting TS again so I could connect to SD's server. Pain in da butt. Now I just let it rip.

TD

BlackHawk*K · Post by **BlackHawk*K** » 10 Jun 2004, 13:00

a guy in my planetside outfit posted this as the fix to TS.

At this time we have put together a new Teamspeak client installation executable which you may download from:
ftp://teamspeak.krawall.de/releases...nt_rc2_2032.exe

Simply shutdown your Teamspeak client if it is running and re-install Teamspeak using this executable right on top of your existing installation and the problem should go away. It is NOT necessary to first uninstall your existing Teamspeak client and you will also NOT lose your current Address Book and other client settings

Firemane · Post by **Firemane** » 14 Jun 2004, 20:15

Thanks for the warning, Tach. I turned off my restore & ran my AV program. It didn't detect it so I guess I don't have it (knock knock).

RLGaming.com

RLGaming's Forums

Virus in Teamspeak RC2

Virus in Teamspeak RC2