virus reported clamav

Asked by bamber on 2012-07-11

Please can you tell me if the following :
PUA.HTML
PUA.JS.Xored
PUA.HTML.Crypt
PUA.Script.Packed-1
are real viruses or false positives?
I have about 12 files in total giving one of the above- one is even a Ubuntu help page on filers in 12-04, the other are
tutorials on autotools by Calcote. Tried virusscan and only clamav report these as viruses. I have been using Ubuntu since 7-10 and this is the first time I have ever had a virus reported. I like to be on the safe side.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu clamav Edit question
Assignee:
No assignee Edit question
Last query:
2012-08-26
Last reply:
2012-08-26

Where are these files located?
Do you have the latest defs and engine from the clamav ppa

bamber (bamberward) said : #2

They are all in my home folder. I have the latest versions etc for clamav (12-04)

--- On Thu, 12/7/12, actionparsnip <email address hidden> wrote:

From: actionparsnip <email address hidden>
Subject: Re: [Question #202858]: virus reported clamav
To: <email address hidden>
Date: Thursday, 12 July, 2012, 22:51

Your question #202858 on Ubuntu changed:
https://answers.launchpad.net/ubuntu/+question/202858

    Status: Open => Needs information

actionparsnip requested more information:
Where are these files located?
Do you have the latest defs and engine from the clamav ppa

--
To answer this request for more information, you can either reply to
this email or enter your reply at the following page:
https://answers.launchpad.net/ubuntu/+question/202858

You received this question notification because you asked the question.

Ok, what is the output of:

sudo add-apt-repository ppa:ubuntu-clamav/ppa

Thanks

bamber (bamberward) said : #4

~-> sudo add-apt-repository ppa:ubuntu-clamav/ppa
[sudo] password for david:
You are about to add the following PPA to your system:
 Test versions of clamav and its dependencies to support backporting these are not recommended for end-user use.  Please indicate test results here:

https://wiki.ubuntu.com/MOTU/Clamav

Note: Packages are removed from this PPA after they are available from backports/updates/security as those are preferred sources.

Apparently this PPA is mirrored by Ubuntu Tweak at http://ubuntu-tweak.com/source/clam-antivirus/ - If you are reading this from there, my recommendation is to visit the original at https://launchpad.net/~ubuntu-clamav/+archive/ppa .
 More info: https://launchpad.net/~ubuntu-clamav/+archive/ppa
Press [ENTER] to continue or ctrl-c to cancel adding it

Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /tmp/tmp.nj350Fd9GF --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --keyserver hkp://keyserver.ubuntu.com:80/ --recv F80220D0E695A455E651AC4D8AB767895ADC2037
gpg: requesting key 5ADC2037 from hkp server keyserver.ubuntu.com
gpg: key 5ADC2037: public key "Launchpad PPA for Clamav Update Team" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
~->
I don't know what all this means!

--- On Mon, 16/7/12, actionparsnip <email address hidden> wrote:

From: actionparsnip <email address hidden>
Subject: Re: [Question #202858]: virus reported clamav
To: <email address hidden>
Date: Monday, 16 July, 2012, 14:45

Your question #202858 on clamav in Ubuntu changed:
https://answers.launchpad.net/ubuntu/+source/clamav/+question/202858

    Status: Open => Answered

actionparsnip proposed the following answer:
Ok, what is the output of:

sudo add-apt-repository ppa:ubuntu-clamav/ppa

Thanks

--
If this answers your question, please go to the following page to let us
know that it is solved:
https://answers.launchpad.net/ubuntu/+source/clamav/+question/202858/+confirm?answer_id=2

If you still need help, you can reply to this email or go to the
following page to enter your feedback:
https://answers.launchpad.net/ubuntu/+source/clamav/+question/202858

You received this question notification because you asked the question.

It means you added the PPA, now you can update and upgrade clamav to the latest version

Can you help with this problem?

Provide an answer of your own, or ask bamber for more information if necessary.

To post a message you must log in.