ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Joke Programs Detected... why?
ares139


Joined: 23 Jun 2006
Posts: 0
Reply with quote
Now first off, I understand why they are detected at all. They probably freak out the uninitiated (which is half the fun heh). But anyway, why does ClamWin detect and (log/quarantine/delete] joke programs when you have "Detect Potentially Unwanted Applications" unchecked? To me, those kind of programs would fit into that category. Like, that old classic "cokegift.exe" that merely ejects your CD-ROM tray offering a "free beverage holder" - corny, I know, but that's not the point lol. I'm just saying they are not malicious, just like (a clean) keygen/crack (debatable, obviously, but you get my point I hope).

Anyway it just seems to me that checking/unchecking "Detect Potentially Unwanted Applications" does not have the intended result. Perhaps it should be expanded to say "Detect . . . [ ] keygens and cracks, [ ] joke programs" or something to that effect? Or joke programs should be included into the mess. Although, someone who is morally against keygens/cracks may not necessarily be against joke programs, you know? I wasn't able to test whether or not it detected any keygens/cracks, as I don't have any - but if it's not detecting those with "Detect Potentially Unwanted Applications" unchecked, why on earth would it detect joke programs? I suppose it's a matter of opinion whether joke programs are worse than cracks and keygens, but anyway...

Just wondering, really. I can always shove them in a password-protected 7z file or make exclusions or something *shrug*. Anyway, thanks to the ClamWin team! Never had the chance to say that before. I use ClamWin on an almost daily basis. Really helps cleaning out client's computers. So thanks! Very Happy
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
ClamWin uses the Clam antivirus engine and signatures. Clam is a user-driven antivirus program, and their signatures are prepared from samples submitted by users, who come in various sizes/flavors.

The PUA detections cover a broad group of "tools"--packers, remote administration tools, password crackers, keyloggers, etc. that are not necesessarily evil, but they could be used for evil purposes and are frequently included in malware. The purpose of the PUA is to let users know the application is on their computer. That's why the PUA is an optional detection in ClamWin at the present time.

Regards,
View user's profileSend private message
ares139


Joined: 23 Jun 2006
Posts: 0
Reply with quote
Ah sorry, guess I rambled a bit too much. Let me clarify.

When I UNcheck / disable the "Detect Potentially Unwanted Applications" settings, ClamWin *STILL* detects joke programs. I am unsure of whether or not it still detects keygens/cracks, as I do not have any to test it with. But, regardless, UNchecking the setting does not affect whether or not it detects the joke programs.

Basically, I *don't* want it to detect my joke programs along with normal viruses/spyware. So I UNcheck the "Detect Potentially Unwanted Applications" but it STILL detects them. See what I mean?

I mean it's not a big deal or anything, and I'm not trying to complain about a free program in the least bit. I'm just saying perhaps this is a bug? Just wondering.

I also tried to make the suggestion that perhaps detection of keygens/cracks should be separate from detection of joke programs, as those who may be morally opposed to keygens/cracks may not mind joke programs. Just a suggestion, that's all.

Thanks again!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I see. The joke programs are included among the regular detections and don't have anything to do with the PUA detections. You can exclude a program from ClamWin's scans by putting it in the Exclude Matching filenames filter. Put the program name and extension on the left side of the Exclude filter page (example: joke.exe). This will exclude it from scheduled scans and directory scans but not from an individual scan of the file.

Regards
View user's profileSend private message
ares139


Joined: 23 Jun 2006
Posts: 0
Reply with quote
Ah okay, makes sense. Although, you'd think they would be more of a "potentially" unwanted app. *shrug*

If I were to make that suggestion, where should I make it? I'm not sure whether the devs read this or not - I haven't been around here long enough. Wink

Thanks
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Signature suggestions/changes should go to the Clam Antivirus team. Their homepage is at https://www.clamav.net/ on the web. Go to the Contacts page. You might contact Luca Gibelli with your suggestion--he's the one who keeps everything going, and he would know who to give it to.

Regards,
View user's profileSend private message
ares139


Joined: 23 Jun 2006
Posts: 0
Reply with quote
Alright, cool. Thanks again. =)
View user's profileSend private message
Joke Programs Detected... why?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic