CHP.exe

Viruses and worms
1

Hello.

A program called Create Hidden Process , which allows dos programs and batched to be started without popping up a black dos box seems to be under scrutiny these days.
I use that program quite extensively , especially with custom keys on keyboards and other various hardware starting batches and doing tasks.

There is a program of the same name , that’s been spotted as being a virus , it is however larger in size 57kb from what i’ve read… the chp I use is only 7. I know file names aren’t a factor in the scanning process , but maybe due to word of mouth , in the initial creating process , the program I use may have been added ?

Here is the webpage of the chp.exe program I use : http://www.commandline.co.uk/chp/

On the page , there is a pre-compiled version of the program , and the whole program in source available. I’m sure that both are exempt of viruses.

If anyone in charge of the virus database is reading this ,
Please remove it from avast.

Thank you in advance.

2

Here in this scan avast gives it as clean: http://vscan.urlvoid.com/analysis/d8cd05308fd2ad6e768945e3b02ce6e5/Y2hwLTAtMS0xLTEzLXppcA==/

polonus

3

Ok… what more can I add…

I have to specify it was found using the boot time scanner , not scanned from windows.

This is a screenshot of the result , which includes a crc of the file in my folder . I downloaded the file online again afterwards, and it’s the same crc.

http://i46.tinypic.com/1o6d10.png

Thank you for taking the time to check.

4

This is because the boot-time scanner also looks for PUPs, whilst the regular scans by default don’t scan for PUPs.

PUP = Potentially Unwanted Program - See http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci1066761,00.html. Not included in this definition are tools which can be used for good or evil, some have been legitimately installed for a specifically good purpose, but could have been unknowing installed for a malicious purpose.

So in this instance the tool could be used for good (e.g. its purpose if installed by the user) or evil if not installed by the user and an anti-virus cant determine intent.

5

I’ve done pretty evil things with notepad , the echo command , a plastic fork , a piece of gum and an elastic band !

Anyway … is there a way to just tell avast to ignore , not just the single occurrence of that program ? Ie , any file being that file in whichever guise name or location , not being identified as a new and novel acronym ?

Well , all in all it’s not that bad tbh , it’s just a bit of extra work when I do an install , and some extra explaining.

Either way , thnx for the responses.

And oh … CHP.EXE doesn’t kill people , people kill people.

6

You’re welcome.

Now you are probably aware why scanning for PUPs isn’t enabled by default in the normal on-demand scans as most people don’t have a clue what they are all about. However, the boot-time scan is more thorough, not only does it scan for PUPs and will also scan archives.

There is nothing to stop you configuring the boot-time scan, not to scan for PUPs or scan archives.