Jump to content
Sign in to follow this  
theavonlady

Teamspeak false positive trojan detected

Recommended Posts

Just in case you do a virus scan and come across Teamspeak file Keystroke.dll being infected, chances are it's nothing.

Quote[/b] ]RE: Teamspeak Client "Virus"

Background

As of about a week ago, many users within the Teamspeak community informed us of a possible virus issue -- specifically with the "keypress.dll" file which is installed by the Teamspeak client.

The Problem

Since we were informed of this issue the Teamspeak Team has been heavily involved in trying to determine the accuracy of this claim. After rigorous internal testing and numerous phone calls into all of the major antivirus companies including Symantec (Norton Antivirus), Network Associates (McAfee), and Trend Micro, NONE of these companies can verify NOR deny that a virus actually exists in "keypress.dll".

To the best of our collective knowledge, it is so far more likely that this is a "false positive" -- meaning that the antivirus application is finding data in keypress.dll that LOOKS like the same sort of data found in an infected file containing the Trojan "PWS-Wexd" (virus)...even though the file is most likely not infected at all.

If you are still truly concerned that this may actually be a virus, please try visiting the following link:

http://us.mcafee.com/virusIn....=100476

This URL contains detailed information on the PWS-Wexd Trojan, including a section on "indications of infection" -- which we have meticulously verified so far do NOT exist on anyone's supposed infected computer.

The Solution

At this time we have put together a new Teamspeak client installation executable which you may download from:

ftp://teamspeak.krawall.de/releases/ts2_client_rc2_2032.exe

Simply shutdown your Teamspeak client if it is running and re-install Teamspeak using this executable right on top of your existing installation and the problem should go away. It is NOT necessary to first uninstall your existing Teamspeak client and you will also NOT lose your current Address Book and other client settings.

Summary

It is our every intent to resolve matters such as these in a timely manner...and with as much information to validate a working solution as possible. We want to thank you for your patience as we work through this issue.

Please visit the following forum thread for further information and discussion:

http://www.teamspeak.org/forums/showthread.php?t=14466

- The TeamSpeak Team

Share this post


Link to post
Share on other sites

hmm, that explains why keypress.dll is deleted tounge_o.gif ÄŽ remember Norton deleting a file not too long ago, guess it was this file tounge_o.gif

Garcia

Share this post


Link to post
Share on other sites

I thought this was old news 5 weeks ago?

Some AV companies seem to update their signature databases really late/slow sad_o.gif

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×