You can get a thorough and practically real-time analysis at virustotal.com
Probably a good idea to check it out there as well. Best, Josh -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of David Stempien Sent: Thursday, April 26, 2007 3:18 PM To: [email protected] Subject: What do these Clean Access agent files do? We are getting reports from our users that the file C:\Program Files\Cisco Systems\Clean Access Agent\AV41\AV\SpyBot.dll is infected with a virus. We're using Sophos Anti-Virus with a definition file dated today, so a change in the new definition file thinks the SpyBot.dll file is infected. Obviously, this is a false positive (I hope). I submitted the file to Sophos for research. My question is: does anyone know what all of the .dll files in the path above actually contain/do in regards to Clean Access agent operation? I assume something to identify installation of AV software... Thanks, -- Dave Stempien, Network Security Engineer University of Rochester Medical Center Information Systems Division 585-784-2427
