Thx for your answer Compdoc but I am not qualified for that kind of operations via the console ;) What I find very annoying is that Endian uses this feature when ClamAV clearly states:
"At this point we DON'T recommend using it in production environments, because the detection may be too aggressive and lead to false positives. " Please Endian crew let us have a on/off switch for PUA in the GUI. Regards Woodrow compdoc wrote: > > I think this can be disabled by changing DetectPUA in: > > /etc/clamav/clamd.conf.tmpl > > And then expanding the template... > > > > I found this on google: > > What is PUA? I get a lot of false positives named PUA.* > > With the release of ClamAV 0.91.2 we introduce the option to > scan for Potentially Unwanted Applications. The PUA database > contains detection for applications that are not malicious > by itself but can be used in a malicious or unwanted > context. As an example: A tool to retrieve passwords from a > system can be useful as long as the person who uses it, is > authorized to do so. However, the same tool can be used to > steal passwords from a system. To make use of the PUA > database you can use the-detect-pua switch for clamscan or > enable it in the config file for clamd (add: DetectPUA yes). > At this point we DON'T recommend using it in production > environments, because the detection may be too agressive and > lead to false positives. In one of the next releases we will > provide additional features for fine-tuning allowing better > adjustments to different setups. NOTE: A detection as PUA > does NOT tell if a application is good or bad. All it says > is, that a file MAYBE unwanted or MAYBE could compromise > your system security and it MAYBE a good idea to check it > twice. > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the > world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Efw-user mailing list > Efw-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/efw-user > > -- View this message in context: http://www.nabble.com/Clamd%3A-PUA.Script.Packed-tp20340326p20376897.html Sent from the efw-user mailing list archive at Nabble.com. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user
