Bug 119322 - PUA file Libre Office file
Summary: PUA file Libre Office file
Status: RESOLVED NOTABUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Base (show other bugs)
Version:
(earliest affected)
3.3.0 release
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-08-16 20:12 UTC by LC
Modified: 2018-08-17 13:44 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description LC 2018-08-16 20:12:26 UTC
Description:
This file ClamTK found.  I believe it came from the OSDISC.COM pre installed with Ubuntu 17.10  because I did not have enought DSL speed to update or upgrade properly.  And ClamTK found it.  I could not get to the location to delete the file so I uninstalled Libre Office.

/home/lynn/.config/libreoffice/4/user/basic/Standard/Module1.xba: PUA.Doc.Tool.LibreOfficeMacro-2 FOUND




Actual Results:
I could not delete file so I uninstalled Libre Office  I still have that file in the directory indicated.  


Expected Results:
Libre Office was uninstalled from the Ubunto Software Center


Reproducible: Always


User Profile Reset: No



Additional Info:
The bug never became active. Sorry I uninstalled Libre Office suite without noting the version.  I installed Ubuntu 17.10 in May 2018.  So that should help.
Comment 1 Drew Jensen 2018-08-16 21:02:39 UTC
So what that is about is covered here:
https://askubuntu.com/questions/988729/clamtk-reports-these-libreoffice-files-as-possible-threats-are-they-safe

Removing LibreOffice doesn't if I recall remove the actual user directory, but I could be wrong on that, either way you want all the tidbits of LibreOffice removed you would, I suppose, delete the entire /home/lynn/.config/libreoffice directory tree. On the other hand if you only removed LibreOffice because of a ClamTK warning, the above reference should help alleviate concerns. 

I hope that helps and I would suggest that this is not a LibreOffice issue per se.
Comment 2 Julien Nabet 2018-08-17 07:07:11 UTC
Just Googling a bit with "UA.Doc.Tool.LibreOfficeMacro-2", it seems Clamav is famous for its false positives.

Xisco: IMHO, I'd put INVALID, what do you think?
Comment 3 Robert Großkopf 2018-08-17 10:49:58 UTC
(In reply to LC from comment #0)
> I could not get to the location to
> delete the file so I uninstalled Libre Office.
> 
> /home/lynn/.config/libreoffice/4/user/basic/Standard/Module1.xba:
> PUA.Doc.Tool.LibreOfficeMacro-2 FOUND

It is a hidden directory. You have to activate your filemanager to show the hidden directories in your home-folder (/home/lynn)

Content of Module1.xba should be the default-entry, which is made when you are creating a macro 
(REM  *****  BASIC  *****

Sub Main

End Sub)
You could delete the directory libreoffice/4 . It will be created new if you start LO next time.
Comment 4 Drew Jensen 2018-08-17 13:09:08 UTC
Changed the status to RESOLVED NOTABUG
Comment 5 LC 2018-08-17 13:44:33 UTC
Thank you, simple and easy.