I've been using Clamwin and Clam Sentinel on my ancient Win2K box for over a year now, as there is nothing even relatively up to date that still runs on it. I've had no problems until the lately when Clam win has decided that Dropbox is a PUA. I've tried whitelisting it in the Clamwin Options Filters and in Clam Sentinel Paths or Files not scanned. Then restored the file and restarted. Clamwin still quarantines Dropbox. How the heck do I stop this?

In my opinion, PUA is broken! You should not use PUA detection. Turn it off, and let ClamWin only detect real viruses and malware. Also, do not enable PUA detection in Clam Sentinel. The Sentinel system monitor "suspicious" detections are much better than PUA. Sentinel's average false positive rate was about 1 in 1,000 files the last time I tested it. Of course it depends upon the type of file, packer used, type of virus, etc. however, if Sentinel gets a "suspicious" detection, it is probably a real virus--nothing "potential" about it!

There are some recent Clam PUA detections, especially of W32.Packer. that are just too aggressive. In addition, many "clean" web sites now use scripts, especially Javascripts, that will trigger a PUA. Clam AV has a policy that they will not "fix" a PUA signature, since PUA detection is optionally selected by the user.

Finally, please upgrade to the latest versions of ClamWin and Clam Sentinel. Detection is improved with each version, and your detection will be much better than on the current version you are using.

Regards,

Thanks, I kind of figured that out. It's good to know that disabling PUA detection isn't a big issue.

I'm loath to upgrade anything that works on the Ancient Win2K box, at this point as every so often the latest version of something will simply not work even though it's supposed to. I'll look into updating though.

I understand, Webster. I know that Clam Sentinel works on Win 98 because the developer, Andrea Russo of Italy uses Win 98 for his computer. He developed Sentinel when Avast announced they were dropping support for it. The latest version of ClamWin should work also, but they do not have enough Win 98 Testers (or of any other OS in fact). A problem could crop up, but Alch does test basic operations in a virtual machine running Win 98. We need to get more ClamWin users involved in testing! Testing does not take very long--(just manual/scheduled scan/update, make sure the icons work, scan an EICAR fake virus file or two, and verify scan/update reports work).

Regards,