It is a false positive caused by the additional threat pattern file tmaptn.221 Upgrading to 223 sorts this out. I found this out this morning and let Trend know but they seemed to alredady know. A notice on the website wouldn't have gone a miss and saved me quite a lot of fault finding! "Yes, you are indeed correct. Any detections of ADW_APROPOS.51 by the older pattern were false positives and due to trends pattern file incorrectly flagging files as this adware. This was rectified today with Spyware OPR 223 and so the no such detections should occur again. Thank you for your concern in pointing this out. " -----Original Message----- From: Claus, Brian [mailto:BClaus@xxxxxxxxxxxxx] Sent: 07 February 2005 16:14 To: thin@xxxxxxxxxxxxx Subject: [THIN] OT: TREND Officescan false positive??? Anyone getting any false positive ID's on the following? Infected file: C:\WINDOWS\System32\ATL.DLL ******************************************************** This Weeks Sponsor: ThinPrint, GmbH Now available: .print Remote Desktop Printing Engine for Microsoft Terminal Services http://www.thinprint.com/dotprint/index.php?sh2&lc=1 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm This is an email from the CPP Group Plc, Holgate Park, York, YO26 4GA; telephone 01904 544500. This message may contain information that is confidential. If you are not the intended recipient, you may not peruse, use, disseminate, distribute or copy this message. If you have received this message in error, please notify the sender immediately by email, facsimile or telephone and either return or destroy the original message. The CPP Group Plc accepts no responsibility for any changes made to this message after it has been sent by the original author. This email has been scanned for all viruses by the MessageLabs Email Security System. ******************************************************** This Weeks Sponsor: ThinPrint, GmbH Now available: .print Remote Desktop Printing Engine for Microsoft Terminal Services http://www.thinprint.com/dotprint/index.php?sh2&lc=1 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm