suspected false positive trojan in teamspeak

Detox · Jun 8, 2004

I use Teamspeak RC2 with my gaming friends. Two of them recently had their Norton AV call a file "keypress.dll" a trojan. I have done some searching about on the web and found this "trojan" has only been detected (from what I've seen so far anyway) by Norton, McAfee, and AntiVir.

Since my TDS3 and NOD32 do not call it as such, I believe this is a false positive.

Anyone seen or heard anything in regards to this?

kjempen · Jun 14, 2004

No one's posted any reply yet so here goes (even though you've probably read this already... This is quoted from TeamSpeak's web page:

ATTENTION TEAMSPEAK USERS! Posted by: [florence] on 10-06-2004 @ 08:00 Background As of about a week ago, many users within the Teamspeak community informed us of a possible virus issue -- specifically with the "keypress.dll" file which is installed by the Teamspeak client. The Problem Since we were informed of this issue the Teamspeak Team has been heavily involved in trying to determine the accuracy of this claim. After rigorous internal testing and numerous phone calls into all of the major antivirus companies including Symantec (Norton Antivirus), Network Associates (McAfee), and Trend Micro, NONE of these companies can verify NOR deny that a virus actually exists in "keypress.dll". To the best of our collective knowledge, it is so far more likely that this is a "false positive" -- meaning that the antivirus application is finding data in keypress.dll that LOOKS like the same sort of data found in an infected file containing the Trojan "PWS-Wexd" (virus)...even though the file is most likely not infected at all. If you are still truly concerned that this may actually be a virus, please try visiting the following link: http://us.mcafee.com/virusInfo/defa...&virus_k=100476 This URL contains detailed information on the PWS-Wexd Trojan, including a section on "indications of infection" -- which we have meticulously verified so far do NOT exist on anyone's supposed infected computer. The Solution At this time we have put together a new Teamspeak client installation executable which you may download from: ftp://teamspeak.krawall.de/releases...nt_rc2_2032.exe Simply shutdown your Teamspeak client if it is running and re-install Teamspeak using this executable right on top of your existing installation and the problem should go away. It is NOT necessary to first uninstall your existing Teamspeak client and you will also NOT lose your current Address Book and other client settings. Summary It is our every intent to resolve matters such as these in a timely manner...and with as much information to validate a working solution as possible. We want to thank you for your patience as we work through this issue. Please visit the following forum thread for further information and discussion: http://www.teamspeak.org/forums/showthread.php?t=14466 - The TeamSpeak Team
Click to expand...

bigc73542 · Jun 14, 2004

more info here

Log in or Sign up

suspected false positive trojan in teamspeak

Detox Retired Moderator

kjempen Registered Member

bigc73542 Retired Moderator

Log in or Sign up

suspected false positive trojan in teamspeak

Detox Retired Moderator

kjempen Registered Member

bigc73542 Retired Moderator

Useful Searches