|
ettienne
| Joined: 03 Jul 2008 |
| Posts: 0 |
|
|
|
 Posted: Thu Jul 03, 2008 5:56 pm |
|
 |
 |
|
|
I am running RealVNC www.realvnc.com and Clamwin reports the following:
C:\Program Files\RealVNC\VNC4\wm_hooks.dll: PUA.RAT.VNC-12 FOUND
C:\Program Files\RealVNC\VNC4\WinVNC4.exe: PUA.RAT.VNC-5 FOUND
CA AV does not report anything when these files are scanned.
Clamwin also stops the VNC service running.
How do I set Clamwin so that it does not stop the VNC service?
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Thu Jul 03, 2008 7:00 pm |
|
|
|
|
|
PUA signatures are designed to spot files/programs that are Potentially Unwanted Applications. These are files that contain hacker tools or are the product of hacker tools--such as packers frequently used by malware. All the PUA does is let you know about the file so you can remove it if you were not aware of it.
The PUA signatures are disabled in ClamWin by default, so you might have turned them on. Go to ClamWin's Advanced Preferences and uncheck the Detect Potentially Unwanted Applications button.
Clam is trying to identify individual malware files separately, so over time, real malware files will be identified and moved out of PUA and into a normal signature file. That will take time, however, so it's probably better to not use the PUA button until PUA becomes stable.
Regards,
Regards,
|
|
|
