ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Detects Panda ActiveScan as a virus
Brent W


Joined: 22 Jan 2006
Posts: 0
Reply with quote
A scan with the latest update shows the following:

C:\WINDOWS\system32\ActiveScan\pskavs.dll: Sirius.Annihilator.272 FOUND

If I am correct, this is a database file for Panda ActiveScan online scanner. Jotti's online scanner shows only Avast & ClamAV as stating this is an infected file. Alwil has admitted that this is a false positive, but have yet to correct it.
View user's profileSend private message
Re: Detects Panda ActiveScan as a virus
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
Brent W wrote:
A scan with the latest update shows the following:
Alwil has admitted that this is a false positive, but have yet to correct it.


please use the info form this FAQ:
https://www.clamwin.com/content/view/40/27/
to submit a false positive
View user's profileSend private message
Brent W


Joined: 22 Jan 2006
Posts: 0
Reply with quote
The file is too large, it isn't being accepted.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
please make it available online and email the link to it to a calmav db maintainer:
acab at clamav.net
View user's profileSend private message
jane M


Joined: 22 Feb 2006
Posts: 0
Reply with quote
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavdll.dll: Sirius.Annihilator.272 FOUND

I'm getting the above message and have spent the last 3 days trying to clean the virus off 5 pc's and now Panda say ClamWin is giving us false readings as a result of the other AV program components being installed on the system. They go on to say 'Only one other AV software program should ever be run on a computer at once, otherwise severe instability can result from this as the programs conflict.'

This has been very time consuming and annoying - can this be confirmed then that it is not a virus just a false reading?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
it is likely to be a false positive. Submit this file:
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavdll.dll

at https://clamav.net/sendvirus.html
View user's profileSend private message
James 4:7


Joined: 23 Jun 2007
Posts: 0
Reply with quote
Wow, here it is over a year after this post and Clam Win still detects essential files from Panda online AV program as spam. How can I except this file from further scans?

C:\WINDOWS\system32\ActiveScan\pskavs.dll: CyberTech.578 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 128897
Engine version: 0.90.2
Scanned directories: 5530
Scanned files: 41003
Skipped non-executable files: 2558
Infected files: 1
View user's profileSend private message
Erkan_Yilmaz


Joined: 16 May 2007
Posts: 0
Location: Germany
Reply with quote
Hello James,

you could:
1. add the exact filename in Preferences > Filters to be excluded
2. be so nice, to submit the file as a false positive (see link above), so other users do not have the same problem like you had now. Seems nobody so far wanted to do so. (Would cost less time now, since you already have installed the software and could submit the file then easily.)

Thank you in advance,
Erkan YILMAZ
blog: https://iaskquestions.com I ask questions
View user's profileSend private message
Erkan_Yilmaz


Joined: 16 May 2007
Posts: 0
Location: Germany
Reply with quote
Hello all,

I just tried installing the software from Panda myself, but:
my operating system (Server 2008) is not allowed (see picture below) Sad
Hehe, so one point already for Clamwin from me Smile

Thank God, you can extract the files from the Panda Antivirus 2007 setup:
but as I see I have neither of the two files:
pskavs.dll or pavdll.dll

A scan did not reveal any warnings by clamwin:
----------- SCAN SUMMARY -----------
Known viruses: 130282
Engine version: 0.90.2
Scanned directories: 40
Scanned files: 230
Skipped non-executable files: 0
Infected files: 0
Data scanned: 206.24 MB



So, who is so helpful to submit the dll, so that this problem is gone in the future ? (Or at least tell from where you have the setup?)
Remember Armstrong: "That's one small step for (a) man, one giant leap for mankind."

Erkan YILMAZ
blog: https://iaskquestions.com I ask questions


btw:
I can not tell you my setup version info from Panda.
Reason: does not exist -> second negative point about Panda.
So, the only info I have: DOS size is 38.2 MB and it includes 233 files and has the name L07promo.exe
And I didn't use the Panda at all until now Smile Who knows what bugs there will be, if you install it.

View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
To what has already been said, let me add that Panda doesn't do a good job of "cleaning up" the files it uses when its is run, and bits of viral signatures can still be left behind, although they are not really viruses. It would be a simple job for Panda do either delete them or "mangle" them so they aren't recognized.

To uninstall Panda and clean up properly, use Windows uninstall (Start, Control Panel, Add/Delete Programs). Then use Start, Search and do a search on the word Panda and delete anything you find. If there are other files with the word Panda in their name, don't delete them unless they were created about the time Panda was installed. Performing such a search is probably a good procedure to use after you uninstall any software. Too many programs now don't do a good job of cleanup.

Regards,
View user's profileSend private message
Erkan_Yilmaz


Joined: 16 May 2007
Posts: 0
Location: Germany
Reply with quote
Hello,

well I guess you could tell about any software non postive things - especially as tester you are aware to many (unimportant?) things Smile

BTW:
did someone notice that above is a difference of 3 (=233-230) files ?
Would have to find out these 3 files and then ... hm, but it is late already.
So, please someone upload the dlls - and even if it is just to stop me talking Smile

Erkan YILMAZ
blog: https://iaskquestions.com I ask questions
View user's profileSend private message
James 4:7


Joined: 23 Jun 2007
Posts: 0
Reply with quote
OK, did it although I have my doubts that they could still be unaware of problems after so long a time.
As to excluding the file from further searchs; I have added the file name to preferences>Filters as you suggest. I will scan again later tonight and see if I got the name right.

Sorry, this was just sitting on an open tab since early this morning.
View user's profileSend private message
Erkan_Yilmaz


Joined: 16 May 2007
Posts: 0
Location: Germany
Reply with quote
Hello James,

thank you very much for submitting the file.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I've never tried to exclude an individual file from a ClamWin scan--just file types. If it doesn't work, just delete the file. As for why Clam hasn't excluded it, you will probably be the first person to tell them about this. I didn't tell them six months ago when I found the Siris Annihilator after using and uninstalling Panda. I don't know how many users Panda has--it's somewhere around the fourth or fifth largest antivirus, but I imagine most people that use/have used it aren't interested in ClamWin, so the problem probably doesn't occur very often.

Regards,
View user's profileSend private message
James 4:7


Joined: 23 Jun 2007
Posts: 0
Reply with quote
Erkan_Yilmaz wrote:
Hello James,

thank you very much for submitting the file.

Just FYI Clam Win never fixed the problem or replied in any way.
View user's profileSend private message
Detects Panda ActiveScan as a virus
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 2  

  
  
 Reply to topic