[chirp_users] Possible Virus
I thought I would give the new chirp-next a try, but unfortunately my virus checker deletes the chirpwx.exe file saying it has a Heur.AdvMLB Heuristic Virus.
Has anyone else had this warning ?
Until this is verified as not the case or a false positive I have had to go back to the chirp-daily.
Cheers Dave..
I am using Windows Defender and MalwareBytes and neither flags CHIRP. Norton has been known to flag as a false positive.
John
-----Original Message----- From: chirp_users-bounces@intrepid.danplanet.com [mailto:chirp_users-bounces@intrepid.danplanet.com] On Behalf Of g7jiq1 Sent: Friday, January 6, 2023 11:25 AM To: chirp_users@intrepid.danplanet.com Subject: [chirp_users] Possible Virus
I thought I would give the new chirp-next a try, but unfortunately my virus checker deletes the chirpwx.exe file saying it has a Heur.AdvMLB Heuristic Virus.
Has anyone else had this warning ?
Until this is verified as not the case or a false positive I have had to go back to the chirp-daily.
Cheers Dave.. _______________________________________________ chirp_users mailing list chirp_users@intrepid.danplanet.com http://intrepid.danplanet.com/mailman/listinfo/chirp_users This message was sent to John LaMartina at johnla@usa.net To unsubscribe, send an email to chirp_users-unsubscribe@intrepid.danplanet.com To report this email as off-topic, please email chirp_users-owner@intrepid.danplanet.com Searchable archive: https://www.mail-archive.com/chirp_users@intrepid.danplanet.com
On 6 Jan 2023 at 14:48, John La wrote:
I am using Windows Defender and MalwareBytes and neither flags CHIRP. Norton has been known to flag as a false positive.
John
John is correct. Norton is well-known for false-positives.
The chirp files have never been known to contain viruses....yet. Some hacker could, possibly, attach one, but it would be short-lived since the chirp people take necessary precautions.
I also use Windows Defender and MalwareBytes.
Ken W7EKB Old SYSAD
------- Original Message ------- On Friday, January 6th, 2023 at 08:24, g7jiq1 g7jiq1@gmail.com wrote:
I thought I would give the new chirp-next a try, but unfortunately my virus checker deletes the chirpwx.exe file saying it has a Heur.AdvMLB Heuristic Virus.
Has anyone else had this warning ?
As an experiment I grabbed the chirp-next-20230107-[win32.zip, installer.exe] files from https://trac.chirp.danplanet.com/chirp_next/next-20230107/ and ran them through virustotal.com.
chirp-next-20230107-win32.zip (https://www.virustotal.com/gui/file/1166435ba1881327a13f115e0a0cf4b9e75067a1...) detects on four different antivirus packages (Antiy-AVL, Gridinsoft (no cloud), Jiangmin, and Zillya) out of 67. chirpwx.exe is the file that seems to tweak those antivirus packages, as well as the fact that chirp-next tries to determine if it's running in a debugging environment and checks to see if there are any .dll files (Windows libraries) it needs that are missing. This is not uncommon behavior, so as a heuristic it's bobbins. I wouldn't worry about it.
As for chirp-next-20230107-installer.exe, it was already installed and scanned (https://www.virustotal.com/gui/file/d4cec6f1171d56cfae3a1801355ee60df308c0d7...) so there was pretty much zero wait time. Out of 67 different antivirus packages, only two (Antiy-AVL and SecureAge) triggered, and that was largely because the installed contacts one other IP address on the Net to download a couple of dependencies.
4 out of 67 and 2 out of 67, respectively, pretty solidly suggest that there's nothing malicious with the chirp-daily builds.
The Doctor [412/724/301/703/415/510] WWW: https://drwho.virtadpt.net/ The old world is dying, and the new world struggles to be born. Now is the time of monsters.
participants (4)
-
g7jiq1 -
John La -
Kenneth G. Gordon -
The Doctor