ClamTk will not quarantine nor delete 2 similar files in Ubuntu 12.04 LTS

[michael doran]

these are the 2 files listred as "possible threats" :
/usr/lib/mono/2.0/mscorlib.dll PUA.Win32.Packer.PrivateExeProte-7
/usr/lib/mono/4.0/mscorlib.dll PUA.Win32.Packer.PrivateExeProte-7

Having read that they ought not to be deleted and thererfore cannot be deleted because they are part of mono - are they actually a threat? Or is Clam just uncertain due to Clam's programming and current list of virus signatures?

[Dave M (dave-nerd)]

Hi Michael,

They are probably not threats. If you'll notice, you have opted for "possibly unwanted applications" (PUA) detection - so it's probably just triggering on the packaging.

I recommend disabling the PUA detection.

Also, for a second opinion, you can submit files to https://virustotal.com .

Thanks,
Dave M

[michael doran (mkdoran9)]

Thanks Dave!

On Fri, Sep 19, 2014 at 7:32 PM, Dave M <email address hidden> wrote:

> Hi Michael,
>
> They are probably not threats. If you'll notice, you have opted for
> "possibly unwanted applications" (PUA) detection - so it's probably just
> triggering on the packaging.
>
> I recommend disabling the PUA detection.
>
> Also, for a second opinion, you can submit files to
> https://virustotal.com .
>
> Thanks,
> Dave M
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1369382
>
> Title:
> ClamTk will not quarantine nor delete 2 similar files in Ubuntu 12.04
> LTS
>
> Status in ClamTk front-end for Clam Antivirus:
> New
>
> Bug description:
> these are the 2 files listred as "possible threats" :
> /usr/lib/mono/2.0/mscorlib.dll PUA.Win32.Packer.PrivateExeProte-7
> /usr/lib/mono/4.0/mscorlib.dll PUA.Win32.Packer.PrivateExeProte-7
>
> Having read that they ought not to be deleted and thererfore cannot be
> deleted because they are part of mono - are they actually a threat?
> Or is Clam just uncertain due to Clam's programming and current list
> of virus signatures?
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/clamtk/+bug/1369382/+subscriptions
>