Application Event Log Error

[Vlk]

That is perfectly OK, but is very misleading...
All this means that the filter is loaded (and probably functioning) and yet, ISA thinks something's wrong.

One more thing to try: check if there are not duplicate registerings for the filter. MS ISA console -> Web filters.

Thanks
Vlk

[Burl]

There is only the one entry in the ISA server web filters.

Burl

[Burl]

In the past few days nothing has changed.  I am still getting the ISA Server errors and monitoring of the AntiVirus event log show no abnormal entries.

Burl

[Vlk]

What you could try is to disable the filter for a while - and see if the messages quit being generated.

The most misleading thing is that the filter seems to be working so the erro code 'Cannot load DLL' just doesn't make any sense.

I've tried searching the Internet for similar incidents but didn't find anything..

[Burl]

What is the primary funtion of the filter and what risks will I be creating by disabling the filter?

Thanks,
Burl

[Vlk]

Well it's the MS Proxy/ISA provider.
It filters HTTP/FTP stuff going through the ISA server.

Like this link (benign): http://www.eicar.org/download/eicar.com
(you shouldn't be able to access this location if the filter is active).

Thanks
Vlk