I use Klient myself as well, without any problems, or Trojan alerts (exept for the fact that Klient uses scripts, and it spins the a-ball like a sputnik :P)
(Well, I had to switch to NOD trial since I have problems with astrology software written for 16-bit environment… bah…)
please tell us exactly WHERE avast detects the trojan:
in the installer-archive itself (if so, which file…?),
or somewhere else on the disk… while extracting… ??
→ Full path/folder/filename, see avast report/logs…
It detects the Trojan just after first extraction, during installation on c:\ drive :
C:\Program Files\Klient\KlientObjects.dll
Another infected file was detected after 20th october’s VPS update : C:\Program Files\Klient\Bans.dll but now i uninstalled, the installation fails since it won’t copy KlientObjects.dll so Bans.dll cannot be copied.
The installer is downloaded via the editor’s official site, so you can try it out (update VPS first) otherwise it probably won’t detect it.
See ya !
21/10/2004 02:37:34 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.
21/10/2004 02:53:41 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.
21/10/2004 02:54:13 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\PROGRA~1\Klient\KLIENT~2.DLL” file.
21/10/2004 03:06:31 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\Default Script\Bans.dll” file.
21/10/2004 12:55:49 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.
Registered: Sep 2002
Location: WA state coast, USA
Posts: 843
I can’t find anything about that message, at all. It doesn’t look like a standard name, Google doesn’t know, Avast’s site doesn’t list it, etc. My best guess would be a hit from a heuristic scanner.
Any chance you can get some details out of an Avast support person? Give them a link to Klient’s download page, they can test for themselves that way
Give it a try, he’s right. It’s a popular program.