Klient 2.1.6 & Trojan ?! (and incidentally french cars...)

Hi all !

First : congratulations for this ultimate antivirus tool !

Next : it detects a trojan while i install my IRC Client : Klient 2.1.6 : www.klient.com

Should Klient’s developpers fix it or ALWIL’s team should do so ?

Greetings…

K8L the ircless man.

Welcome to the forum,

Is your version still “non beta”?

(Citroën are nice cars but i prefer Renault.)

It happens when i install the trial version of Klient. Just try to do so : www.klient.com

Gr33tz

:wink: which version and is it still not public?

Renault Twingo v2 (Black)

jk

It’s a shareware u can try it out for free, and it is the latest : http://www.klient.com/download_file.php?download_id=379

Hint : “Win32:Trojano-603 [Trj]” detected while installing.

NB : seriously try to drive a Renault.

K8L… I’m not understanding the link between software and cars ::slight_smile:

Check every details.

Hint : “So? I drive a Citroen” is inthewildteam’s signature.

Sorry, I won’t ;D
My time is almost just for help here… :wink:

I can see that since you didn’t check the previous message’s hint !

;D

Forget it ! 8)

SUM UP FOR NON-MONTHYPYTHONNISTS :

When you install klient (popular irc client @ www.klient.com) you get a trojan virus alert.

Parrallel discussion should be soon active here :
http://www.klient.com/forums/showthread.php?s=&threadid=2843

Good night !

Hi there!

I use Klient myself as well, without any problems, or Trojan alerts (exept for the fact that Klient uses scripts, and it spins the a-ball like a sputnik :P)
(Well, I had to switch to NOD trial since I have problems with astrology software written for 16-bit environment… bah…)

Hi K8L,

please tell us exactly WHERE avast detects the trojan:
in the installer-archive itself (if so, which file…?),
or somewhere else on the disk… while extracting… ??

→ Full path/folder/filename, see avast report/logs…

:wink:

Hi !

It detects the Trojan just after first extraction, during installation on c:\ drive :

C:\Program Files\Klient\KlientObjects.dll

Another infected file was detected after 20th october’s VPS update : C:\Program Files\Klient\Bans.dll but now i uninstalled, the installation fails since it won’t copy KlientObjects.dll so Bans.dll cannot be copied.

The installer is downloaded via the editor’s official site, so you can try it out (update VPS first) otherwise it probably won’t detect it.

See ya !

21/10/2004 02:37:34 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.
21/10/2004 02:53:41 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.
21/10/2004 02:54:13 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\PROGRA~1\Klient\KLIENT~2.DLL” file.
21/10/2004 03:06:31 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\Default Script\Bans.dll” file.
21/10/2004 12:55:49 AUTORITE NT\SYSTEM 1804 Sign of “Win32:Trojano-603 [Trj]” has been found in “C:\Program Files\Klient\KlientObjects.dll” file.

On Klient’s forum :

quension Apparent Geek

Registered: Sep 2002
Location: WA state coast, USA
Posts: 843

I can’t find anything about that message, at all. It doesn’t look like a standard name, Google doesn’t know, Avast’s site doesn’t list it, etc. My best guess would be a hit from a heuristic scanner.

Any chance you can get some details out of an Avast support person? Give them a link to Klient’s download page, they can test for themselves that way

Give it a try, he’s right. It’s a popular program.

See ya :smiley:

We’ll check it.

Great !

Avast! Is the bomb !!! Keep doing good work.

Do you have latest version 2.1.6 ? Is your VPS up to date ?

:slight_smile:

Ok, seems to be fixed.

See ya all. :-*

azper Code Monkey

Registered: Sep 2002
Location: Virginia Beach
Posts: 145

Did they offer any insight as to what was triggering it?

Just curious

I’m curious too actually :wink: