Virus from TS -- Mod update: File is not a virus.

[Fotchi]

Hey everyone,

C:\Program Files\teamspeak2_RC2\KeyPress.dll

When I loaded up Teamspeak today the above mentioned trojan was found. According to Mcafee it just came out today.

PWS-Wexd.dll was the actual trojan and it was deleted. I would strongly suggest that anyone who ran teamspeak today update their .dat files and run a check on the system. Not sure but it might be a keystroke recorder. Not much information about it on the web yet.

[V98ci]

Hmmm, that file is in mine also but has a date of 9/12/2002. Norton ran today and didn't find anything. :hmmm:

[Saretta]

Maybe something in this (PWS-Wexd.dll) file changes something in the KeyPress.dll ....

[Sepra]

Jag also encountered this same virus from TS last night.

[Slash]

I'm scanning the server now, it could also be something floating around the internet that just uses the same port that TS does.

[Fotchi]

Here is a link that might be helpful. I now have a total of 5 files from TS that have been deleted due to possible trojan.

http://www.teamspeak.org/forums/showthread.php?t=14276

Dont know whats going on.

[Fotchi]

It seems to be a bad .dat file update for McAfee users. I dont know why it is spreading in my TS file. Here is another link

http://forums.mcafeehelp.com/viewtopic.php?p=149056#149056

[OUTLAWS The Machine]

I blame Slash. :shifty:


Let me know what to do about this. I dont have any antivirus software. :unsure:

[OUTLAWS The Machine]

Sent it to webimmune and they confirmed that it is a flase positive and will be fixed in the next dat. Could someone post that on the teamspeak.org forums so they can all relax? I cant since im at school right now.

Not sure what a false positive is, but it doesnt sound bad. :dunno:

[Slash]

1. The TS server is clean

2. Machine, you are crazy dude!!!

[OUTLAWS The Machine]

Originally posted by Slash@Jun 4 2004, 09:15 AM
1. The TS server is clean

2. Machine, you are crazy dude!!!
:tounge: :ha:

[FUS1ON]

If you do a test like i.e. a preg test and it comes back positive, you gonna have company in 9 mos. :oooo: , A false positive is when you get a false reading on a test that came back positive ......... In other words, Nothing to worry about on your end.

[Sepra]

:rofl: Sho

BTW, I got that Trojan from TS this morning.

[OUTLAWS Spike]

rut ro. I got this message today when I opened up TS

[FUS1ON]

I got the message today also. Go ahead and let you AV prog. quaratine the infected file/s.

According to this thread LINK (http://www.teamspeak.org/forums/showthread.php?t=14466) that have come out with a new version. You need to (1) Make note of your server settings, (2) Uninstall the TS version you were using, (3) Download and install the newer rc2_2032 version.

EDIT Mine remembered the server settings.

[Death Engineer]

Holy crap batman. A hooker and a trojan??