Panda Active Scan and viruses???

[Danielsd]

Hello all!
Since the 1.06.2005 I have no limit for the downloaded pages and files from internet so I started to use some online antivirus scanners to see if my Antivir is doing well.
I was reading the thread: Trojan

And there I saw these 3 online virus scanners:

Panda Active Scan - http://www.pandasoftware.com/active...n_principal.htm
Norton Security Check - http://security.symantec.com/sscv6/...e&venid=sym
Trend Micro Housecall (do it again) - http://housecall.trendmicro.com/

I was terrified when my antvirGuard started and told me that there is a virus that is starting. I was installing the activeX from PAnda Active Scan. Good, I knew that this thing is comming from Panda and I said don't tuch it, let it run. It(antivirGuard) kept warning me several times for the same fvirus in another files, but I said also don't tuch them! After this it stopped. I made the scan with Panda Active Scan and it found nothing! Then I closed the browser...

And this night my PC was running because I'm downloading Gimp from internet.
So I woke up in the morning and saw that AntivirGuard is warning me again. It is telling me for the same virus, but this time it is in diffirent place(file). Here is the log of antivirGuard:

04.6.2005 г.,16:05:16 [INIT] The AVGuard Service is starting.
04.6.2005 г.,16:05:17 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!
04.6.2005 г.,16:05:23 [LOGON] Connection request by remote computer. Establishing secure communication channel.
04.6.2005 г.,16:05:23 [LOGON] Connection to computer 127.0.0.1 established successfully. Session ID = 0xaaaad004.
04.6.2005 г.,16:05:24 [INFO] Start Filter Device.
04.6.2005 г.,16:05:24 AntiVirService Version: 6.30.00.06 AVE Version 6.30.0.15 VDF Version: 6.30.0.213
04.6.2005 г.,16:05:24 AVGuard has been started successfully!
04.6.2005 г.,16:39:07 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\SET38.TMP
04.6.2005 г.,16:39:29 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\SET39.TMP
04.6.2005 г.,16:42:23 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
04.6.2005 г.,16:42:28 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
04.6.2005 г.,16:43:47 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
04.6.2005 г.,16:45:16 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
04.6.2005 г.,16:46:06 WARNING: Contains code of the Windows virus W95/Bumble!
D:\WINDOWS\SYSTEM32\ACTIVESCAN\IMSCAN.DLL
04.6.2005 г.,16:51:50 [INFO] Stop Filter Device.
04.6.2005 г.,16:51:50 AVGuard service has been stopped!
04.6.2005 г.,21:15:00 ---------------------------------------------------------
04.6.2005 г.,21:15:00 [INIT] The AVGuard Service is starting.
04.6.2005 г.,21:15:02 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!
04.6.2005 г.,21:15:07 [LOGON] Connection request by remote computer. Establishing secure communication channel.
04.6.2005 г.,21:15:07 [LOGON] Connection to computer 127.0.0.1 established successfully. Session ID = 0xaaaadf8a.
04.6.2005 г.,21:15:09 [INFO] Start Filter Device.
04.6.2005 г.,21:15:09 AntiVirService Version: 6.30.00.06 AVE Version 6.30.0.15 VDF Version: 6.30.0.213
04.6.2005 г.,21:15:09 AVGuard has been started successfully!
05.6.2005 г.,01:18:45 WARNING: Contains code of the Windows virus W95/Bumble!
D:\SYSTEM VOLUME INFORMATION\_RESTORE{2E7D5D70-28A4-427A-93EA-62F23AB18436}\RP57\A0010456.DLL
File has been deleted!
05.6.2005 г.,11:29:27 [INFO] Stop Filter Device.
05.6.2005 г.,11:29:28 AVGuard service has been stopped!
05.6.2005 г.,11:29:31 ---------------------------------------------------------
05.6.2005 г.,11:29:31 [INIT] The AVGuard Service is starting.
05.6.2005 г.,11:29:32 [INIT] Keyfile contains a valid license. The AVGuard service will run as a fully functional version!

So this time I said f**k you(excuse me for the rude words) and deleted it !
Can someone tell me: How it is possible that such big company as Panda is installing viruses???

[nihil]

Hi,

My call on that would be "false positive" I guess it is some ActiveX code that looks like code used in a malware.

The clue is in the name W95/Bumble.................that is a Win95 (probably 9x) virus from January 2003 !!!!

You might do the polite thing and send this info to Antivir..............false positives are embarassing, so I am sure that they will thank you for the warning

Cheers

[Danielsd]

Thank fo the advise! I will immediately contact them!

[Danielsd]

Yes that was false warning
http://www.free-av.de/cgi-bin/ubb/ul...c&f=3&t=001127