PDA

View Full Version : Trojan in Teamspeak2


Iggy
06-11-2004, 02:11 AM
Found this on my system thanks to Teamspeak
PWS.Hooker.Trojan
It was residing in the system volume information folder.
According to Symantec, it is a key logger trojan attempting to find passwords. It logs all key strokes then sends the info to the hacker.
Here is the link:
http://securityresponse.symantec.com/avcenter/venc/data/pws.hooker.trojan.html

Until I am convinced otherwise, I will not be using Teamspeak again. No more MPs for me.

Iggy

jdtrainman
06-11-2004, 02:36 AM
One rapidly learns the high value of a firewall quickly when playing on the internet! I seriously doubt that you got that virus through TeamSpeak, though..... Probably came in through another open port...

What makes you think that TeamSpeak was the culprit or the way in? From what I just read on the site you posted this is a VERY old virus. It MAY well have been laying dormant on your machine for a very long time...

JBD

Iggy
06-12-2004, 12:35 AM
I hope you are right. Nortons found it in the Teamspeak2 folder. One of the dlls was infected with it. I didn't find it until I did an online scan at the symantec web site.
You may be correct, maybe it didn't come with the Teamspeak program but I don't think I had it on my system for long time.
I do a full system scan every other day and had just stumbled upon Symantec's online virus scanner and tried it out. I guess it is more of a trojan horse then a virus.
I don't have any open ports that are not needed and I use any number of scanners to determine that. That does not guarantee I don't have any but I try to do my best.
Anywho, I overreacted and automaticaly assumed it was Teamspeak since it was found there. For that I apologize.
I will do some more searching. I was hoping that somebody else would have had the same problem with Teamspeak. It would narrow things down a bit.

Iggy