Panda Active Scan and viruses???
Results 1 to 4 of 4

Thread: Panda Active Scan and viruses???

  1. #1
    Senior Member
    Join Date
    Oct 2004
    Posts
    187

    Panda Active Scan and viruses???

    Hello all!
    Since the 1.06.2005 I have no limit for the downloaded pages and files from internet so I started to use some online antivirus scanners to see if my Antivir is doing well.
    I was reading the thread: Trojan

    And there I saw these 3 online virus scanners:
    I was terrified when my antvirGuard started and told me that there is a virus that is starting. I was installing the activeX from PAnda Active Scan. Good, I knew that this thing is comming from Panda and I said don't tuch it, let it run. It(antivirGuard) kept warning me several times for the same fvirus in another files, but I said also don't tuch them! After this it stopped. I made the scan with Panda Active Scan and it found nothing! Then I closed the browser...

    And this night my PC was running because I'm downloading Gimp from internet.
    So I woke up in the morning and saw that AntivirGuard is warning me again. It is telling me for the same virus, but this time it is in diffirent place(file). Here is the log of antivirGuard:
    04.6.2005 г.,16:05:16 [INIT] The AVGuard Service is starting.
    04.6.2005 г.,16:05:17 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!
    04.6.2005 г.,16:05:23 [LOGON] Connection request by remote computer. Establishing secure communication channel.
    04.6.2005 г.,16:05:23 [LOGON] Connection to computer 127.0.0.1 established successfully. Session ID = 0xaaaad004.
    04.6.2005 г.,16:05:24 [INFO] Start Filter Device.
    04.6.2005 г.,16:05:24 AntiVirService Version: 6.30.00.06 AVE Version 6.30.0.15 VDF Version: 6.30.0.213
    04.6.2005 г.,16:05:24 AVGuard has been started successfully!
    04.6.2005 г.,16:39:07 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\SET38.TMP
    04.6.2005 г.,16:39:29 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\SET39.TMP
    04.6.2005 г.,16:42:23 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
    04.6.2005 г.,16:42:28 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
    04.6.2005 г.,16:43:47 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
    04.6.2005 г.,16:45:16 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
    04.6.2005 г.,16:46:06 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
    04.6.2005 г.,16:51:50 [INFO] Stop Filter Device.
    04.6.2005 г.,16:51:50 AVGuard service has been stopped!
    04.6.2005 г.,21:15:00 ---------------------------------------------------------
    04.6.2005 г.,21:15:00 [INIT] The AVGuard Service is starting.
    04.6.2005 г.,21:15:02 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!
    04.6.2005 г.,21:15:07 [LOGON] Connection request by remote computer. Establishing secure communication channel.
    04.6.2005 г.,21:15:07 [LOGON] Connection to computer 127.0.0.1 established successfully. Session ID = 0xaaaadf8a.
    04.6.2005 г.,21:15:09 [INFO] Start Filter Device.
    04.6.2005 г.,21:15:09 AntiVirService Version: 6.30.00.06 AVE Version 6.30.0.15 VDF Version: 6.30.0.213
    04.6.2005 г.,21:15:09 AVGuard has been started successfully!
    05.6.2005 г.,01:18:45 WARNING: Contains code of the Windows virus W95/Bumble!
    D:\SYSTEM VOLUME INFORMATION\_RESTORE{2E7D5D70-28A4-427A-93EA-62F23AB18436}\RP57\A0010456.DLL
    File has been deleted!
    05.6.2005 г.,11:29:27 [INFO] Stop Filter Device.
    05.6.2005 г.,11:29:28 AVGuard service has been stopped!
    05.6.2005 г.,11:29:31 ---------------------------------------------------------
    05.6.2005 г.,11:29:31 [INIT] The AVGuard Service is starting.
    05.6.2005 г.,11:29:32 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!
    So this time I said f**k you(excuse me for the rude words) and deleted it !
    Can someone tell me: How it is possible that such big company as Panda is installing viruses???
    Remember, all I\'m offering is the truth, nothing more.

  2. #2
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    Hi,

    My call on that would be "false positive" I guess it is some ActiveX code that looks like code used in a malware.

    The clue is in the name W95/Bumble.................that is a Win95 (probably 9x) virus from January 2003 !!!!

    You might do the polite thing and send this info to Antivir..............false positives are embarassing, so I am sure that they will thank you for the warning

    Cheers
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  3. #3
    Senior Member
    Join Date
    Oct 2004
    Posts
    187
    Thank fo the advise! I will immediately contact them!
    Remember, all I\'m offering is the truth, nothing more.

  4. #4
    Senior Member
    Join Date
    Oct 2004
    Posts
    187
    Remember, all I\'m offering is the truth, nothing more.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides