Some more info on this, it's actually Mcafee detecting the cisco Any
connect VPN client as a virus:
McAfee DAT 5556 seems to be the issue. It is detecting
webagentsetup-win.exe as a Trojan. That is McAfee's latest DAT. Setting
up an exclusion for webagentsetup-win.exe* in McAfee gets the user around
the issue.
Log:
3/18/2009 8:31:56 AM Deleted ICCOHIO\mRusoff C:\Program Files\Internet
Explorer\IEXPLORE.EXE C:\Documents and Settings\mrusoff\Local
Settings\Temporary Internet
Files\Content.IE5\S3J7IZK0\webagentsetup-win[1].exe W32/Autorun.dam
(Trojan)
-------------------------------------------------
William Blake
Abercrombie & Fitch
Network Architecture
614.283.7053
614.946.4131
Jeremy Wood
<thejma...@gmail.
COM> To
Sent by: Cisco [email protected]
Clean Access cc
Users and
Administrators Subject
<cleanacc...@list Re: mcafee detects clean access as
SERV.MUOHIO.EDU> a virus
03/18/2009 08:35
PM
Please respond to
Cisco Clean
Access Users and
Administrators
<cleanacc...@list
SERV.MUOHIO.EDU>
Same here, we are running 8.5i and 8.7i Enterprise and haven't gotten
any reports like this.
--Jeremy
On Wed, Mar 18, 2009 at 09:59, Stanclift, Michael
<[email protected]> wrote:
> Depending on the day, sometimes CCA can act like a virus :P
>
> Seriously though, we run McAfee Enterprise and have not seen this
behavior yet.
>
>
> Michael Stanclift
> Network Analyst
> Rockhurst University
>
> http://help.rockhurst.edu
> (816) 501-4231
>
>
> -----Original Message-----
> From: Cisco Clean Access Users and Administrators
[mailto:[email protected]] On Behalf Of William Blake
> Sent: Wednesday, March 18, 2009 8:21 AM
> To: [email protected]
> Subject: mcafee detects clean access as a virus
>
> We are getting some reports of Mcafee detecting clean access as a virus
and
> blocking it, anyone else seen this?
>
>
> -------------------------------------------------
> William Blake
> Abercrombie & Fitch
> Network Architecture
> 614.283.7053
> 614.946.4131
>
