1 Topic by analog

  • analog
  • analog
  • Member
  • Offline

Topic: [help] what is this?

Comodo antivirus, on my new laptop, displayed worry messages that say

teeworlds.exe is trying to install global hook ig4icd32.dll

A global hook is a Windows feature which allows  applications such as media players, keyboard enhancement programs etc. to inject  executable files (e.g. .dll files) into other applications for various purposes. But this is also commonly exploited by malware programs for keylogging, screen capturing or controlling legitimate applications. If teeworlds.exe is one of your everyday applications, then you can safely allow this request.

is this normal? or false positive? the antivirus says it's okay, but something to watch.

http://www.nuby.posterous.com

2 Reply by Lure (edited by Lure 2010-12-13 10:56:21)

  • Lure
  • Member
  • Offline

Re: [help] what is this?

What does lsof say? Does anything funny show up if you look at entries with that library / teeworlds and maybe then where else the connections / files that are involved with both show up?

I'm not sure how this works... but many nvidia related libs & the hardware device seem to be accessed / called on my machine by teeworlds directly just like anything that works with hardware acceleration - maybe that's just what that comodo thing of yours is complaining about? None of the accessed libraries seem to do anything funny though. No outbound connections, no access where they don't belong... Are you using a strange intel driver or something? Or is your teeworlds packaged with its own version of it for compatibility reasons or something?

3 Reply by analog

  • analog
  • analog
  • Member
  • Offline

Re: [help] what is this?

It was my first run of teeworlds trunk version when this appeared. It did not happen with teeworlds 0.5.2, only trunk.

http://www.nuby.posterous.com