View original (French)

ZHPcleaner contains a virus

Solved
Bastien -  
seb77150 Posted messages 6285 Registration date   Status Member Last intervention   -
.ZHPcleaner contains a dangerous script for PCs.
Detected 6 times on Virus Total, this script is a Trojan, Script.SNH
Contrary to what its publisher claims, it is NOT a false positive, so be careful.

6 answers

  1.
    Jojolaguitare Posted messages 12012 Registration date   Status Member Last intervention   2 782
     
    Hello.

    I don't think it's that dangerous; otherwise, CCM would have removed it from its software downloads by default. ==>

    https://www.commentcamarche.net/telecharger/utilitaires/24801-zhpcleaner/

    This software is not essential. A FRST (Farbar Recovery Scan Tool) is far more effective.

    See you later . . .
    --
    " Patience leads to success, haste leads to nothing."
    2
  2. Bastien
     
    Yes, except that the version of ZHP you proposed is outdated.
    If you go to the publisher's website, you will find the 2020 version; that is the one that contains the virus, and I repeat, this is NOT a false positive.
    Run the test with Virus Total and then we can talk about it again.
    0
    1. Jojolaguitare Posted messages 12012 Registration date   Status Member Last intervention   2 782
       
      Please provide YOUR download link and then we can discuss it further. The last update of the CCM tutorial was on January 28, 2019, so it's not that outdated.

      See you later . . .
      0
    2. madmyke Posted messages 52304 Registration date   Status Moderator Last intervention   12 485
       
      It is therefore indeed a false positive only on your end.

      The matter is closed.
      0
    3. Bastien > madmyke Posted messages 52304 Registration date   Status Moderator Last intervention  
       
      No, not just at my place, and no, the subject is not closed as you can see.
      Now I also know that the editor himself was a helper here some time ago; it is possible that you are one of his friends given your radical reaction.
      0
    4. Jojolaguitare Posted messages 12012 Registration date   Status Member Last intervention   2 782 > Bastien
       
      Hargnish, arrogant, and provocative. Given your insults, I don't think you will last long on the CCM forum. There is a code of respect and politeness on the forum, but I seriously doubt that you will take it into account.

      . . .
      0
    5. seb77150 Posted messages 6285 Registration date   Status Member Last intervention   500 > Bastien
       
      We told you that this software is harmless and it has been verified by several representatives from CCM, so there’s no need to worry.
      0
  3. Bastien
     
    For someone who helps people on a tech forum not to know Nicolas Coolman's site is a bit curious, but here is the link:

    https://nicolascoolman.eu/download/telechargez-zhpcleaner-gratuit/

    Then you should know that for security software, 1 year without updates is unacceptable; for example, the last update from the publisher is dated September 5, 2020.
    Because to keep this kind of software up to date, it requires 2 or 3 updates per month, otherwise the virus signatures become outdated.
    0
    1. seb77150 Posted messages 6285 Registration date   Status Member Last intervention   500
       
      I downloaded it, then ran an antivirus scan, and afterwards I executed it, and I don't notice any anomalies.
      0
    2. madmyke Posted messages 52304 Registration date   Status Moderator Last intervention   12 485
       
      Same, scanned with 3 antivirus (Windows Defender, F-Secure, Eset) and no issues.
      I think the problem is not with the file.
      0
      1. Bastien > madmyke Posted messages 52304 Registration date   Status Moderator Last intervention  
         
        The signatures of viruses are never detected at the same time by all antivirus programs.
        On Virus Total, a scan performed today gives a rather poor result for this software, and more people who designed the Thor scanner have also left a negative rating in the Virus Total community in this regard:

        https://www.virustotal.com/gui/file/ced1be51dceb02bd3167685a35890e2c1455ed176e6b94cef8dd039f0772113a/detection
        0
  6. sacapus
     
    I downloaded it and Kaspersky did not detect any threats in this file.
    0
  7. Bastien
     
    The software is indeed recognized as dangerous by several antivirus programs, with a total of 6 detections so far. Here is the link to the Virus Total scan:

    https://www.virustotal.com/gui/file/355855067ba00d9e2f2d6845ed05e7c708364647d56e5d6af256ef92e78488b7/detection
    0
    1. Anonymous user
       
      6 alerts on about 80 antivirus, that's exactly where "false positive" makes all its sense.

      A virus database update in two days and your nightmares will be over.
      0
      1. MrProtect > Anonymous user
         
        Hello,
        It is no longer 6 but 7 Anti Virus that detect viruses in the ZHPcleaner software.
        Analysis done today with the Virus Total scan, here is the link:
        https://www.virustotal.com/gui/file/ced1be51dceb02bd3167685a35890e2c1455ed176e6b94cef8dd039f0772113a/detection
        0