LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-01-2022, 03:11 PM   #1
Michael Piziak
Member
 
Registered: Feb 2015
Distribution: Ubuntu 20.04 lts
Posts: 598

Rep: Reputation: 43
I ran ClamTK and got these results - curious


I was mostly playing around & downloaded & ran ClamTK and got these results.

I am curious as to what users here think of the results - mostly seems to be files in the Firefox cache? (from surfing the web?)

Addendum: Looks like most results are from one particular folder name: "hln7vqn6" and inside that a folder ".cache2"
Various files in that folder are targeted by ClamTK

Addendum 2: I have another question a about ClamTK. When I enter a value into "Scheduler," the value just disappears the next time I look at "Scheduler."
Attached Thumbnails
Click image for larger version

Name:	Screenshot from 2022-06-01 16-08-23.png
Views:	41
Size:	176.2 KB
ID:	39001  

Last edited by Michael Piziak; 06-01-2022 at 05:28 PM.
 
Old 06-01-2022, 03:29 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,634

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by Michael Piziak View Post
I downloaded & ran ClamTK and got these results.
I am curious as to what users here think of the results - mostly seems to be files in the Firefox cache? (from surfing the web?) Addendum: Looks like most results are from one particular file name: "hln7vqn6"
  • PUA means "Potential Unwanted Application". Not a virus; that's what clamav says when there is an application they consider of note, because that file or extension have been proven to be dangerous in Windows.
  • Win as 2nd part means it is a Windows related notice.
  • XBA (macro) files are considered to be 'dangerous', because (again) of Windows
  • Clamav has an option to not scan for PUA's.
Posting a random file name from what looks like your Firefox cache is pointless; you don't specify the path, or where you got that data. Since you're using Linux and you're getting warnings about Windows dangers, you can apply a bit of thought as to whether or not you should be concerned.

Since you're curious (but not curious enough to do any research of your own), you can upload anything you're concerned about to virustotal for a scan. Or use another scanning tool.
 
1 members found this post helpful.
Old 06-01-2022, 10:32 PM   #3
Michael Piziak
Member
 
Registered: Feb 2015
Distribution: Ubuntu 20.04 lts
Posts: 598

Original Poster
Rep: Reputation: 43
I don't know why you keep replying to my threads, knowing you're one of the 2 on my ignore list... I don't see what you've replied, only that you have...
 
Old 06-02-2022, 07:41 AM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,634

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by Michael Piziak View Post
I don't know why you keep replying to my threads, knowing you're one of the 2 on my ignore list... I don't see what you've replied, only that you have...
Because, as you've been told before, answers here are for the COMMUNITY, not just your personal use. If you want to know why, then read them, which you apparently can't do because you're afraid of text on a screen. And you're obviously a liar too, since (based on what you posted), you ignored THREE people, not two, for being 'mean'. Which is, we call you out on your laziness, lack of research, etc.

Don't like it? Show some effort or quit your whining.
 
1 members found this post helpful.
Old 06-02-2022, 08:59 AM   #5
uteck
Senior Member
 
Registered: Oct 2003
Location: Elgin,IL,USA
Distribution: Ubuntu based stuff for the most part
Posts: 1,173

Rep: Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501
I will quote TBOne's reply so you can read it, which far more accurate then what I would have posted.

Quote:
Originally Posted by TB0ne View Post
  • PUA means "Potential Unwanted Application". Not a virus; that's what clamav says when there is an application they consider of note, because that file or extension have been proven to be dangerous in Windows.
  • Win as 2nd part means it is a Windows related notice.
  • XBA (macro) files are considered to be 'dangerous', because (again) of Windows
  • Clamav has an option to not scan for PUA's.
Posting a random file name from what looks like your Firefox cache is pointless; you don't specify the path, or where you got that data. Since you're using Linux and you're getting warnings about Windows dangers, you can apply a bit of thought as to whether or not you should be concerned.

Since you're curious (but not curious enough to do any research of your own), you can upload anything you're concerned about to virustotal for a scan. Or use another scanning tool.
 
1 members found this post helpful.
Old 06-02-2022, 03:53 PM   #6
Michael Piziak
Member
 
Registered: Feb 2015
Distribution: Ubuntu 20.04 lts
Posts: 598

Original Poster
Rep: Reputation: 43
Quote:
Originally Posted by uteck View Post
I will quote TBOne's reply so you can read it, which far more accurate then what I would have posted.
I can do one click and read them if I so choose. Quite frankly, I can live without reading any of his replies. Although this reply wasn't anywhere near the rudeness in the past, even in this reply, he gets his dig by saying "since you're curious (but not curious enough to do any research of your own)"

I try to be nice to everyone on here. Personally, I can live without his smart mouth...

Last edited by Michael Piziak; 06-02-2022 at 03:57 PM.
 
Old 06-02-2022, 04:01 PM   #7
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,634

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by Michael Piziak View Post
Quite frankly, I can live without reading any of his replies. Although this reply wasn't anywhere near the rudeness in the past, even in this reply, he gets his dig by saying "since you're curious (but not curious enough to do any research of your own)"
Yep...and that has been told to you MANY times by myself an several others. To wit:
https://www.linuxquestions.org/quest...5/#post6336624
https://www.linuxquestions.org/quest...9/#post6350586
https://www.linuxquestions.org/quest...tu-4175712160/

You've actually asked people to tell you which things to click on to change fonts in Libreoffice, asked people to look up how to find specs on YOUR COMPUTER, and wanted people to tell you how to use Facebook:
https://www.linuxquestions.org/quest...ok-4175709000/
https://www.linuxquestions.org/quest...am-4175708869/
https://www.linuxquestions.org/quest...pn-4175708716/
https://www.linuxquestions.org/quest...ne-4175708447/
https://www.linuxquestions.org/quest...is-4175708172/
https://www.linuxquestions.org/quest...on-4175706497/

Come on...at some point you have to start doing SOMETHING for yourself:
Quote:
Personally, I can live without his smart mouth...
And we could all live without your laziness. You've been here SEVEN YEARS; most of your questions show next to no effort on your part to do any research at all. Not sure how many times myself an others have told you to show effort, do basic research, and ask a clear question, but you don't. Then you have a temper-tantrum and ignore people who are 'rude' and 'mean' to you, which apparently means having the audacity to ask YOU to do something on your own.

Last edited by TB0ne; 06-02-2022 at 04:10 PM.
 
Old 06-02-2022, 07:02 PM   #8
suramya
Member
 
Registered: Jan 2022
Location: Earth
Distribution: Debian
Posts: 249

Rep: Reputation: 102Reputation: 102
Quote:
Then you have a temper-tantrum and ignore people who are 'rude' and 'mean' to you, which apparently means having the audacity to ask YOU to do something on your own.
How DARE you ask him to put in some effort, when he has all of us to do the work for him? /s
I mean that's why the forum is here right... No?

*shakes head*
 
1 members found this post helpful.
Old 06-02-2022, 07:42 PM   #9
SlowCoder
Senior Member
 
Registered: Oct 2004
Location: Southeast, U.S.A.
Distribution: Debian based
Posts: 1,250

Rep: Reputation: 164Reputation: 164
My take on this discussion:
I don't know you from Job, and have no opinion about you.

TBOne is one of many members who seem to live on this forum. They dedicate a lot of time to help people. Sometimes answers can be terse, which at times can have a rude-ish tone. But having been here a while myself, I think I understand their temperament when I interact on this board.

As far as the board itself, there is certainly an expectation that you've at least attempted some sort of work, and are actually at a crossroads. Helpers on the board want you to learn something. With Linux, you learn by doing and making mistakes. To ask to be spoon fed isn't appropriate, is a waste of time, and could be considered disrespectful ... especially you've been asked to "show your work" when asking questions.

Short: LQ is a good, educational community. Like any other, you need to participate within it's rules, written and unwritten.
 
1 members found this post helpful.
Old 06-02-2022, 08:11 PM   #10
Michael Piziak
Member
 
Registered: Feb 2015
Distribution: Ubuntu 20.04 lts
Posts: 598

Original Poster
Rep: Reputation: 43
Quote:
Originally Posted by suramya View Post
How DARE you ask him to put in some effort, when he has all of us to do the work for him? /s
I mean that's why the forum is here right... No?

*shakes head*
Welcome to my ignore list - #3.
Don't bother replying to my threads as I won't see what you type....

Good day
 
Old 06-02-2022, 08:33 PM   #11
Michael Piziak
Member
 
Registered: Feb 2015
Distribution: Ubuntu 20.04 lts
Posts: 598

Original Poster
Rep: Reputation: 43
Quote:
Originally Posted by SlowCoder View Post
My take on this discussion:

As far as the board itself, there is certainly an expectation that you've at least attempted some sort of work, and are actually at a crossroads. Helpers on the board want you to learn something. With Linux, you learn by doing and making mistakes. To ask to be spoon fed isn't appropriate, is a waste of time, and could be considered disrespectful ... especially you've been asked to "show your work" when asking questions.

Short: LQ is a good, educational community. Like any other, you need to participate within it's rules, written and unwritten.
Actually, I've been in communication with one of the developers of ClamTK, concerning the "Scheduler" (which is Addendum 2 in one of my posts), again-> concering the scheduler not working properly. (by the way, he can't figure out what the issue with the "Scheduler" currently is either.

So, I don't just hang out here and try to get people to spoon feed me answers. I do google things and contact developers, etc....
I personally don't know what gets people worked up in a tizzy over other people's posts. If you don't feel they deserve help, then don't help them. Don't waste your time. These ClamTK posts I made, are mostly low level conversational issues. Its' not like a printer or scanner isn't working. As I stated in my original post, "I was mostly playing around & downloaded & ran ClamTK, etc...." & simply asked for opinions of users (should they wish to leave a comment or opinion). My feelings aren't hurt if no one replies. In fact, I'd rather have a broken Linux box than deal with rude people. I strive to be nice to everyone. Those that I consider rude, I simply put on my ignore list - if they want to keep on posting in my threads (and about me), knowing they're on my ignore list, then it's their problem, not mine.... I've made 600 posts in these forums and only have 3 members on my ignore list - which is a fairly statistically insignificant number of users on my list. Why one particular individual continues to post in my threads, & about me, knowing this, is unexplainable.

Last edited by Michael Piziak; 06-02-2022 at 09:07 PM.
 
Old 06-03-2022, 07:53 AM   #12
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,634

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by Michael Piziak View Post
Actually, I've been in communication with one of the developers of ClamTK, concerning the "Scheduler" (which is Addendum 2 in one of my posts), again-> concering the scheduler not working properly. (by the way, he can't figure out what the issue with the "Scheduler" currently is either.
Amazing....you're in 'communication' with a developer of the program, yet couldn't ask THEM the answer to your question??? And you expect us to believe that one of the people who WROTE the program, doesn't know how it works???
Quote:
So, I don't just hang out here and try to get people to spoon feed me answers. I do google things and contact developers, etc....
I personally don't know what gets people worked up in a tizzy over other people's posts. If you don't feel they deserve help, then don't help them. Don't waste your time. These ClamTK posts I made, are mostly low level conversational issues. Its' not like a printer or scanner isn't working. As I stated in my original post, "I was mostly playing around & downloaded & ran ClamTK, etc...." & simply asked for opinions of users (should they wish to leave a comment or opinion). My feelings aren't hurt if no one replies. In fact, I'd rather have a broken Linux box than deal with rude people. I strive to be nice to everyone. Those that I consider rude, I simply put on my ignore list - if they want to keep on posting in my threads (and about me), knowing they're on my ignore list, then it's their problem, not mine.... I've made 600 posts in these forums and only have 3 members on my ignore list - which is a fairly statistically insignificant number of users on my list. Why one particular individual continues to post in my threads, & about me, knowing this, is unexplainable.
Unexplainable...because you are too afraid to read something that may be 'mean'. Been explained several times to you, and again in this very thread. Grow up; if you 'strive to be nice' to everyone, then why aren't you 'nice' enough to show your own efforts? You claim to have looked things up, yet over and over again, can't seem to find what everyone else can. And that leaves us with two options:
  1. You are lying, and don't show any effort (most likely)
  2. You just don't understand what you're looking at, and need someone to explain it to you.
Either way...why should we do #2, when you won't do #1??

::EDIT:: And since you ignore the LQ Rules/guidelines about not editing your original question:
Quote:
Originally Posted by Michael Piziak
Addendum 2: I have another question a about ClamTK. When I enter a value into "Scheduler," the value just disappears the next time I look at "Scheduler."
...try reading the docs. ClamTK uses cron to schedule things...want to see those events? Run "crontab -l".

Last edited by TB0ne; 06-03-2022 at 08:03 AM.
 
1 members found this post helpful.
Old 06-03-2022, 11:39 AM   #13
suramya
Member
 
Registered: Jan 2022
Location: Earth
Distribution: Debian
Posts: 249

Rep: Reputation: 102Reputation: 102
Quote:
Originally Posted by Michael Piziak View Post
Welcome to my ignore list - #3.
Don't bother replying to my threads as I won't see what you type....

Good day
Click image for larger version

Name:	lokimeme.png
Views:	15
Size:	224.7 KB
ID:	39004
No skin off my nose mate...

@TB0ne, you have more patience than I do that you are constantly try to help by asking them to put in some basic effort. In any case, even if he doesn't appreciate it I do. I have learnt a lot reading your replies to various threads.

Last edited by suramya; 06-03-2022 at 11:42 AM.
 
2 members found this post helpful.
Old 06-03-2022, 08:31 PM   #14
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940Reputation: 3940
Gentlebeings, let's just stay on topic here. "Participants" are never a "topic."
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Clamtk scan results actinide Linux - Security 3 02-26-2017 08:59 AM
Clamtk scan results actinide Linux - Security 3 02-26-2017 08:39 AM
I ran fsck.vfat to repair hard drive, and got a bunch of .REC files ! wearetheborg Linux - Hardware 12 04-14-2007 05:54 AM
Ran cheops-ng, need help understanding the results Tortanick Linux - Networking 0 01-06-2007 09:28 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration