Cisco must have used the the red phone
Mike Diggins wrote:
Looks like Sophos has fixed the issue with the latest update.
-Mike
On Thu, 26 Apr 2007, Prem Ananthakrishnan (prananth) wrote:
Folks,
We are looking into this. It appears to be an issue with Sophos
recognizing the .DLL wrongly.
It's a false positive. Will keep you guys posted
We have made Sophos aware from our side as well
Regards
Prem
-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Diggins
Sent: Thursday, April 26, 2007 1:02 PM
To: [email protected]
Subject: Re: What do these Clean Access agent files do?
Just checked and we're seeing the same thing with Agent 4.0.4! Sophos
6.5.5 is claiming C:\Program Files\Cisco Systems\Clean Access
Agent\AV41\AV\SpyBot.dll is infected with Mal/Behav-102. Virustotal
reports no infection so I assume it's a false positive too. I'll submit
a report to Sophos as well.
-Mike
On Thu, 26 Apr 2007, Josh Heller wrote:
You can get a thorough and practically real-time analysis at
virustotal.com
Probably a good idea to check it out there as well.
Best,
Josh
-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[EMAIL PROTECTED] On Behalf Of David Stempien
Sent: Thursday, April 26, 2007 3:18 PM
To: [email protected]
Subject: What do these Clean Access agent files do?
We are getting reports from our users that the file C:\Program
Files\Cisco Systems\Clean Access Agent\AV41\AV\SpyBot.dll is infected
with a virus.
We're using Sophos Anti-Virus with a definition file dated today, so a
change in the new definition file thinks the SpyBot.dll file is
infected.
Obviously, this is a false positive (I hope). I submitted the file to
Sophos for research.
My question is: does anyone know what all of the .dll files in the
path above actually contain/do in regards to Clean Access agent
operation? I assume something to identify installation of AV
software...
Thanks,
--
Dave Stempien, Network Security Engineer University of Rochester
Medical Center Information Systems Division
585-784-2427
_________________________________________
Mike Diggins Voice: 905.525.9140 Ext. 27471
Network Analyst, Enterprise Networks FAX: 905.528.3773
University Technology Services E-Mail: [EMAIL PROTECTED]
McMaster University, Hamilton, Ontario
_________________________________________
Mike Diggins Voice: 905.525.9140 Ext. 27471
Network Analyst, Enterprise Networks FAX: 905.528.3773
University Technology Services E-Mail: [EMAIL PROTECTED]
McMaster University, Hamilton, Ontario
