Author Topic: Klient 2.1.6 & Trojan ?! (and incidentally french cars...)  (Read 15332 times)

0 Members and 1 Guest are viewing this topic.

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« on: October 21, 2004, 02:36:53 AM »
Hi all !

First : congratulations for this ultimate antivirus tool !

Next : it detects a trojan while i install my IRC Client : Klient 2.1.6 : www.klient.com

Should Klient's developpers fix it or ALWIL's team should do so ?

Greetings...

K8L the ircless man.
« Last Edit: October 21, 2004, 03:41:08 AM by K8L »
-=K8L=-

Offline inthewildteam

  • Advanced Poster
  • **
  • Posts: 772
  • Computers can do that?
Re:Klient 2.1.6 & Trojan ?!
« Reply #1 on: October 21, 2004, 02:45:57 AM »
Welcome to the forum,

Is your version still "non beta"?
So? I drive a Citroen

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?!
« Reply #2 on: October 21, 2004, 02:48:12 AM »
(Citroën are nice cars but i prefer Renault.)

It happens when i install the trial version of Klient. Just try to do so : www.klient.com

Gr33tz
« Last Edit: October 21, 2004, 03:41:25 AM by K8L »
-=K8L=-

Offline inthewildteam

  • Advanced Poster
  • **
  • Posts: 772
  • Computers can do that?
Re:Klient 2.1.6 & Trojan ?!
« Reply #3 on: October 21, 2004, 02:50:08 AM »
Citroën are nice cars but i prefer Renault.

It happens when i install the trial version of Klient. Just try to do so : www.klient.com

Gr33tz

 ;)  which version and is it still not public?
So? I drive a Citroen

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?!
« Reply #4 on: October 21, 2004, 02:51:48 AM »
Renault Twingo v2 (Black)

jk

It's a shareware u can try it out for free, and it is the latest : http://www.klient.com/download_file.php?download_id=379
-=K8L=-

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?!
« Reply #5 on: October 21, 2004, 03:00:06 AM »
Hint : "Win32:Trojano-603 [Trj]" detected while installing.

NB : seriously try to drive a Renault.
-=K8L=-

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re:Klient 2.1.6 & Trojan ?!
« Reply #6 on: October 21, 2004, 03:06:34 AM »
K8L... I'm not understanding the link between software and cars  ::)
The best things in life are free.

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?!
« Reply #7 on: October 21, 2004, 03:09:44 AM »
Check every details.










Hint : "So? I drive a Citroen" is inthewildteam's signature.
-=K8L=-

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re:Klient 2.1.6 & Trojan ?!
« Reply #8 on: October 21, 2004, 03:14:39 AM »
Check every details.

Sorry, I won't  ;D
My time is almost just for help here...  ;)
« Last Edit: October 21, 2004, 03:14:59 AM by Technical »
The best things in life are free.

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #9 on: October 21, 2004, 03:19:43 AM »
I can see that since you didn't check the previous message's hint !

 ;D

Forget it ! 8)

SUM UP FOR NON-MONTHYPYTHONNISTS :

When you install klient (popular irc client @ www.klient.com) you get a trojan virus alert.
-=K8L=-

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #10 on: October 21, 2004, 03:39:29 AM »
Parrallel discussion should be soon active here :
http://www.klient.com/forums/showthread.php?s=&threadid=2843

Good night !
-=K8L=-

Offline zsotohu

  • Newbie
  • *
  • Posts: 7
  • -=| ibizagoth power ownz |=-
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #11 on: October 21, 2004, 11:31:41 AM »
Hi there!

I use Klient myself as well, without any problems, or Trojan alerts (exept for the fact that Klient uses scripts, and it spins the a-ball like a sputnik  :P)
(Well, I had to switch to NOD trial since I have problems with astrology software written for 16-bit environment... bah...)
-=| HU + EU |=-

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #12 on: October 21, 2004, 12:20:13 PM »
Hi K8L,

please tell us exactly WHERE avast detects the trojan:
 in the installer-archive itself (if so, which file..?),
or somewhere else on the disk.. while extracting.. ??

--> Full path/folder/filename, see avast report/logs..



 ;)

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #13 on: October 21, 2004, 12:54:36 PM »
Hi !

It detects the Trojan just after first extraction, during installation on c:\ drive :

C:\Program Files\Klient\KlientObjects.dll

Another infected file was detected after 20th october's VPS update : C:\Program Files\Klient\Bans.dll but now i uninstalled, the installation fails since it won't copy KlientObjects.dll so Bans.dll cannot be copied.

The installer is downloaded via the editor's official site, so you can try it out (update VPS first) otherwise it probably won't detect it.

See ya !

21/10/2004 02:37:34   AUTORITE NT\SYSTEM   1804   Sign of "Win32:Trojano-603 [Trj]" has been found in "C:\Program Files\Klient\KlientObjects.dll" file.  
21/10/2004 02:53:41   AUTORITE NT\SYSTEM   1804   Sign of "Win32:Trojano-603 [Trj]" has been found in "C:\Program Files\Klient\KlientObjects.dll" file.  
21/10/2004 02:54:13   AUTORITE NT\SYSTEM   1804   Sign of "Win32:Trojano-603 [Trj]" has been found in "C:\PROGRA~1\Klient\KLIENT~2.DLL" file.  
21/10/2004 03:06:31   AUTORITE NT\SYSTEM   1804   Sign of "Win32:Trojano-603 [Trj]" has been found in "C:\Program Files\Klient\Default Script\Bans.dll" file.  
21/10/2004 12:55:49   AUTORITE NT\SYSTEM   1804   Sign of "Win32:Trojano-603 [Trj]" has been found in "C:\Program Files\Klient\KlientObjects.dll" file.  
« Last Edit: October 21, 2004, 01:00:28 PM by K8L »
-=K8L=-

Offline K8L

  • Newbie
  • *
  • Posts: 13
  • I'm a fitchet !
    • L'Eclectic
Re:Klient 2.1.6 & Trojan ?! (and incidentally french cars...)
« Reply #14 on: October 21, 2004, 01:07:00 PM »
On Klient's forum :

Quote
quension
Apparent Geek

Registered: Sep 2002
Location: WA state coast, USA
Posts: 843
   

I can't find anything about that message, at all. It doesn't look like a standard name, Google doesn't know, Avast's site doesn't list it, etc. My best guess would be a hit from a heuristic scanner.

Any chance you can get some details out of an Avast support person? Give them a link to Klient's download page, they can test for themselves that way

Give it a try, he's right. It's a popular program.

See ya  :D
-=K8L=-