ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
false positives destroying my website - PUA.VBS.FSO
onetoomany


Joined: 24 Apr 2008
Posts: 0
Location: UK
Reply with quote
I have an ASP website that uses filesystemobject to access content elsewhere (good practice if you want to password protect your content)

However, the latest update has started PUA.VBS.FSO which has started to quarantine my website code! This is worse than an actual virus, as its deleted my backup as well!

PLEASE PLEASE CAN WE REMOVE THIS SIGNATURE?

R
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin uses the malware signatues maintained by Clam Antivirus. You can upload a copy of files with false positives to Clam AV at https://cgi.clamav.net/sendvirus.cgi on the Web and explain that it is a false positive. This is a PUA (potentially unwanted file), however, and I haven't had much luck with getting the PUAs removed from the Clam signature database. PUAs do not necessarily contain viruses/malware--they are potential hacker tools/processes that act as a heuristic in detecting suspicious files.

Best thing to do is to uncheck the PUA option in Clamwin's Advanced Preferences.

Regards,
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Reply with quote
it's not advised to set clamwin to remove viruses, please use quarantine instead
View user's profileSend private message
Re: false positives destroying my website - PUA.VBS.FSO
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
onetoomany wrote:
I have an ASP website that uses filesystemobject to access content elsewhere (good practice if you want to password protect your content)

However, the latest update has started PUA.VBS.FSO which has started to quarantine my website code! This is worse than an actual virus, as its deleted my backup as well!

PLEASE PLEASE CAN WE REMOVE THIS SIGNATURE?

R


I think in this case clamwin is doing exactly what you asked it to do - detecting Potentially Unwanted Applications (VBScript files with filesystemobject). You can either exclude your webiste folders in exclusion filters or better yet leave the setting "Detect Potentially Unwanted Applications" off (as it is by default after installation)
View user's profileSend private message
false positives destroying my website - PUA.VBS.FSO
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic