search

kvirc / KVIrc

The KVIrc IRC Client
http://www.kvirc.net/
GNU General Public License v2.0
238 stars 75 forks source link

Windows Defender detects "kvimy.dll" module as keylogger. #2675

Open mantarray opened 2 weeks ago

mantarray commented 2 weeks ago

Hello. I installed KVIrc Quasar today, and after trying to log onto a server, Windows Defender detected a Keylogger trojan in a file named kvimy.dll

Detected: TrojanSpy:Win32/Keylogger

Afected items: C:\Program Files\KVIrc\modules\kvimy.dll

Windows Defender was able to delete the file. Should I be worried? Is this a false positive? I can't find any info on "kvimy.dll" and I'm a bit worried. Thanks!

ctrlaltca commented 2 weeks ago

Hi, i can confirm this is a false positive, as this already happened in the past. Kvimy.dll is a kvirc module that exports a $my.idle() function that checks for user idle time. This is done by checking for user activity on the keyboard/mouse, and this unfortunately resembles how some keylogger works. I'll take a look if i can fix it in some way, thank you for reporting the issue.