Virus scanner

[R. Wood]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Sep 27, 2009 at 04:00:31PM -0400, raymond house stated:
> On Sun, Sep 27, 2009 at 3:41 PM, R. Wood wrote:
> > On Sun, Sep 27, 2009 at 02:57:46PM -0400, raymond house stated:
> > > On Sun, Sep 27, 2009 at 02:14:05PM -0400, raymond house stated:
> > > > On Sun, Sep 27, 2009 at 1:58 PM, R. Wood wrote:
> > > > > On Sun, Sep 27, 2009 at 01:10:29PM -0400, raymond house stated:
> > > > > > On Sun, Sep 27, 2009 at 01:04:32PM -0400, raymond house stated:
> > > > > > > On Sun, Sep 27, 2009 at 12:54 PM, R. Wood wrote:
> > > > > > > > On Sun, Sep 27, 2009 at 12:40:13PM -0400, raymond house stated:
> > > > > > > > > Hi,  under applications, system tools, there is a
> > > > > > > > > virus scanner that came with Ubuntu (Ithink) and when
> > > > > > > > > I do a full scan that takes about 20 minutes it says I
> > > > > > > > > have 3 virus ? is this valid?
> > > > > > > > > Thanks,  Ray
> > > > > > > >
> > > > > > > > What is the name of the 'virus scanner' application?
> > > > > > > >
> > > > > > > > R.
> > > > > > >
> > > > > > > Hi, R. Wood, I knew someone would ask that, but there is
> > > > > > > no name just a kind of icon ?? thats all I have.  Ray
> > > > > >
> > > > > > Hello again R.Wood, I found what this scanner is,  it's CLAMTK
> > > > > > 4.08.  Ray
> > > > >
> > > > > This is a front-end for 'clamav'.  On linux systems it can be
> > > > > used to scan for (windows) virii in email attachments for
> > > > > example.
> > > > >
> > > > > Can you give details about what 'clamtk' is reporting about
> > > > > the 3 viruses found? (locations? options to clean-up the
> > > > > virii? etc.)
> > > > >
> > > > > R.
> > > >
> > > > ok R. im doing another scan to get the info you want and this
> > > > time i will keep a log, thanks, Ray
> > >
> > > Hi Dave and R. The scan now shows 5 virus. here is what is reported:
> > > home/rayhouse/.mozilla/firefox/8eZawy75.default/cache/6A6EE81Ad01
> > > Status-PUA.Script.Packed-1
> > >
> > > home/rayhouse/.clamtk/viruses/D6C436D0d01.virus   Status-
> > > PUA.Script.Packed-2
> > >   also, same as the first one but /4F1F1AC1D01   Pua.Script.Packed-2
> > >              "        "    "      "       "      /470817ACd01        "
> > > "               - 1
> > >              "         "      "        "         /8D5490ABd01
> > > "       "              - 1
> > > I dont know what all this means but the Virus Scanner window says
> > > I can either Delete these, quarantine them, etc..   Thanks,  Ray
> >
> > This thread may be useful to read:
> > http://www.mail-archive.com/efw-user@lists.sourceforge.net/msg03743.html
> >
> > HTH,
> > R.
>
> Hi R. I read the thread and can I assume that I should not worry about
> the scan results ? and assume they are false positives,  Thanks for
> the trouble R. I appreciate your info as this is way out of my league.
> Ray

Hi,

I can't state for sure that what you are getting are false positives,
but that thread we read would seem to suggest so.  For example:
  "NOTE: A detection as PUA does NOT tell if a application is good or
  bad.  All it says is, that a file MAYBE unwanted or MAYBE could
  compromise your system security and it MAYBE a good idea to check it
  twice."
Also, PUA = Potentially Unwanted Applications

The thread also gives some instructions for turning off PUA detection if
you decide that is what you want to do.

Perhaps others on this mailing list have ideas also?

HTH,
R.
- -- 
"Be Nice, or Leave - By Order of the Management"
(Sign above door, Black Sheep Inn, Wakefield)
GPG Fingerprint: 2E4D 8605 DD48 E80F F893  1C02 B65D 86D9 3B3C 0E03
Encrypted E-mail Preferred
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKv9Uitl2G2Ts8DgMRAmtDAKCI9/PRQB//0pTaOhoAOD9XHr+XFwCePV/3
oqTD6tKjz/5MtMf9TVn2Ycw=
=tpHt
-----END PGP SIGNATURE-----