What's New in McAfee WebScanX v3.1.1 (3007) Copyright 1994-1997 by McAfee Associates, Inc. All Rights Reserved. Thank you for using McAfee's WebScanX for Windows 95, Windows 3.1x and Windows NT. This What's New file contains important information regarding the current version of this product. McAfee strongly recommends that you read the entire document. We welcome your comments and suggestions. Please use the information provided in this file to contact us. ___________________ WHAT'S IN THIS FILE - What Is WebScanX? - New Features - Known Issues - Localized (Translated) Versions - Installation - Documentation - Frequently Asked Questions - Contact McAfee _________________ WHAT IS WEBSCANX? Any time you surf the Internet, you are at risk. Malicious Java applets and ActiveX controls can be downloaded to your system without your knowledge and wreak havoc. WebScanX is designed to provide a safe computing environment for Internet users. It functions as a sentry for your Internet connections. ____________ NEW FEATURES 1. E-mail scanning allows you to scan attachments to internet e-mail messages for viruses. WebScanX supports both cc:Mail and MAPI-compliant mailers. 2. Download scanning allows you to scan for viruses in files you download from the Internet. Both e-mail scanning and download scanning offer the full power of McAfee's Hunter scanning technology and have the highest detection rates in the industry. 3. ActiveX filtering allows you to block those ActiveX controls known to cause harm as you surf the Internet. 4. Java class filtering allows you to block Java classes known to cause harm, which protects your system from hostile applets. 5. Internet site blocking allows you to prevent your browser software from connecting to dangerous sites. 6. You can configure WebScanX either to deny access to potential dangers automatically, or to prompt you for a response when danger threatens. 7. Password protection capabilities allow complete lockdown of configuration options, preventing accidental changes that could compromise security. * NEW BANNED ITEMS * This version of WebScanX (v. 3.1.1) detects the following items: --JAVA ITEMS-- SlowerKiller.class Noisybear.Class Wasteful.Class Cofnsume.Class HostileThreads.Class TripleThreat.Class Ungrateful.Class DoMyWork.Class AppletKiller.Class ScapeGoat.Class TickerTape.class Jlpr.class Chart.class ArcTest.class Graph.class client.class XYZApp WordMeister.class MyTimer.class FixJava.class ImageBank.class LetterBoard.class LetterButton.class ValueBox.class Widget.class WordManager.class ei.class ChatTourExpress.Class AnimationSourceApplet.class BenchmarkApplet.class MouseChase.class AllTargets.class AppStatus.class Target.class MouseChaseException.class SolarVengeanceRT.class MandelTest.class LifeGame.class PlayerApplet.class Dimensions.class hugobane1.class hugobane3.class hugobane5.class TelnetGUI.class FtpUsersApplet.class Telnet.Class SeeTheWeb.class intro.class sparks.class GFSApplet coolboard_applet TourGuide.class Telescrivente.class simpletext.class irritant.class Cosmo.class javamail.class WebMailer.class SendMailApplet.class TicketHolder.class Ticket.class TicketReader.class JMushApplet OwnNet.class newLoader.class loadLibrary.class execTest.class exitTest.class sendTest.class port25.class replacePropertiesFile.class rm.class deleteFile.class writeFile.class fileInfo.class readFile.class --ACTIVEX ITEMS-- Slingshot NetList Exploder * NEW VIRUSES DETECTED * This DAT file detects the following 174 new viruses. Locations that have experienced particular problems with specific viruses are also identified. ALIEN.F ALLIANCE.B ANT.B:TW APPDER.F (Singapore) ASBV BALROG.A BANDUNG.AP BANDUNG.AQ BANDUNG.AR BEEPER.A BEEPER.B BISMARK.E BOX.D:TW CALENDAR.A CAP.B CAP.C CAP.G CAP.H CAP.N CAP.O CAP.Q CAP.R CAP.S CAP.T CAP.V CAP.W CEBU.A CLOCK.I:DE CMD.A COLORS.BC COLORS.BD COLORS.BE COLORS.BF COLORS.BG COLORS.BH COLORS.BI COLORS.BJ COLORS.BK CONCEPT.AT CONCEPT.AU CONCEPT.AV CRASH.A CVCK1:KIT DANCE.A DIR-II.1536.G DOGGIE.E DRACULA.A DZT.E (US) DZT.F ERASER.M:TW (INTENDED) ERASER.N:TW (INTENDED) ERASER.O:TW ERASER.P:TW (TROJAN) ETERNITY.599 FUZZY.A GOLDFISH.C HELPER.D HELPER.E HLLO.6736 HLLP.7072 HLLP.8832 HOOTERS.5000 HYBRID.E HYBRID.F IMMORTAL.2174 IMPOSTER.C IRISH.Q JERUSALEM-1813-DROPPPER (FRI 13TH) JM.710 JOHNNY.N JOHNNY.N1 KILLOK.A KILLOK.B KILLOK.C KOMPU.D LAHYANI.1356 LEMON.B LITHI.4113 LUNCH.D MARK:TW MDMA.H MDMA.S MDMA.U MERCY1B.575 MINIMAL.P NICEDAY.K NICEDAY.L NICEDAY.M NICEDAY.N NJ-DLK1.I (INTENDED) NJ-WMDLK1.H NOPRINT.A NPAD.BK NPAD.BQ NPAD.BR NPAD.BS NPAD.BT NPAD.BU NPAD.BV NPAD.BW NPAD.BX NPAD.BY NPAD.BZ NPAD.CA NPAD.CB NPAD.CC NPAD.CD NUCLEAR.N PAYCHECK.D PG PIG.C:TW PS-MPC.702 QUICK.A RAPI.AJ2 RED.A:DE REHENES.A SAFWAN.A SCHUMANN.A SHOWOFF.BD SHOWOFF.BE SHOWOFF.BF SHOWOFF.BG SHOWOFF.BH SHOWOFF.BI SHOWOFF.BJ SHOWOFF.BK SHOWOFF.BL SHOWOFF.BM SHOWOFF.BN SHOWOFF.BO SHOWOFF.BP SHOWOFF.BQ SHOWOFF.BR SHOWOFF.BS SMILEY.C:DE SPANSKA.1120.B (Internet) SPARKLE.A SWLABS.C TALON.K TEMPLE.B TRAP.A:TW TRAP.B:TW TRAP.C:TW TRAP.D:TW TRIVIAL.170 TWNO.Z:TW TWOLINES.J TWOLINES.J1 TWOLINES.K TWOLINES.K1 TWOLINES.L TWOLINES.L1 TWOLINES.M TWOLINES.M1 TWOLINES.N1 TWOLINES.O TWOLINES.O1 TWOLINES.P TWOLINES.P1 UNCOMPLETED.613 UNDERGRO.A VAMPIRE.A:TW VAMPIRE.B:TW VARMINT.A:TW VICINITY.A:DE (Austria) WAZZU.CE WAZZU.CF WAZZU.CG WAZZU.CH WAZZU.CI WMVH1.KIT:TW (TROJAN) XM/LAROUX.D (Europe) XM/LAROUX.E (Hong Kong) ZASHIB.A ____________ KNOWN ISSUES 1. This version of WebScanX does not support Win32s. If you are using Win32s, you should not attempt to install this version of WebScanX. 2. If you connect to the Internet through a proxy server, WebScanX's IP address filtering feature will not function because of the way proxy servers handle IP communications. Connecting through a "closed" Internet service provider--that is, one that uses a proxy service--also disables this feature. Examples of closed providers include America Online, CompuServe, Prodigy, and the Microsoft Network. 3. If you have WebScan v2.0 installed on your system, you must uninstall WebScan v2.0 before installing WebScanX v3.1.1. 4. When configuring WebScanX to scan MAPI e-mail, you will not have the option to scan subfolders. 5. When using WebScanX to scan e-mail sent through Microsoft Exchange, the client and server Exchange components must be the same version number. If the versions are not synchronized, WebScanX will not be properly notified of new messages, and will therefore be unable to scan those messages. 6. WebScanX enables its Download Scan component by default, not its E-mail Scan component as stated in the WebScanX User's Guide. When you start WebScanX, you should see the Download Scan icon appear in the system tray or, if you use Windows NT 3.51, on the desktop. Use the shortcut menu for this icon to enable other WebScanX program components. 7. If you use Windows NT 3.51, clicking the Load at Startup switch in the WebScanX Properties dialog box to disable it will not prevent WebScanX from loading at startup. To prevent WebScanX from loading at startup, you must remove it from the Startup program group. 8. If you use an ISeamless script to install WebScanX on machines running Windows 3.1x, Windows NT 3.51, or Windows NT 4.0, you may not include an operation that extracts files from a .zip archive in that script. 9. If using VALIDATE.EXE to validate the WebScanX files, the file IMAGEHLP.DLL may not validate correctly. This is because the WebScanX installer adds this file to your system only if the file does not already exist. If the file already exists on your system, the WebScanX installer does not replace it. Thus, after installing WebScanX, your IMAGEHLP.DLL file may not be the same as the one shown in the file PACKING.LST. For more information on validating your files, see the README.1ST file included with this product. 10. This version of WebScanX does not support automatic updating or electronic commerce through asynchronous modem. 11. If you use Windows NT 3.51, selecting the WebScanX Status dialog box may cause system instability. _______________________________ LOCALIZED (TRANSLATED) VERSIONS McAfee will make localized versions of WebScanX available in Dutch, French, German, Italian, Japanese, and Spanish shortly after its release in English. You may download localized copies of WebScanX, when available, from any of these FTP sites: ftp.mcafee.com ftpweb.mcafee.com ftphost20.mcafee.com ftphost25.mcafee.com ftphost35.mcafee.com To download evaluation copies of WebScanX, connect to any of the FTP sites listed above, then go to one of these directories: pub/_dutch/antivirus/webscanx pub/_french/antivirus/webscanx pub/_german/antivirus/webscanx pub/_italian/antivirus/webscanx pub/_japanese/antivirus/webscanx pub/_spanish/antivirus/webscanx To download licensed copies of WebScanX, connect to any of the FTP sites listed above, then go to one of these directories: licensed/_dutch/antivirus/webscanx licensed/_french/antivirus/webscanx licensed/_german/antivirus/webscanx licensed/_italian/antivirus/webscanx licensed/_japanese/antivirus/webscanx licensed/_spanish/antivirus/webscanx ____________ INSTALLATION * BASIC SYSTEM REQUIREMENTS * For Windows 95 and Windows NT: - 486 with at least 8MB of memory - 7MB of free hard disk space For Windows 3.1x: - CPU capable of running Windows 3.1x - At least 6MB of memory - 4MB of free hard disk space * INSTALLING WEBSCANX * 1. Take one of the following Steps: - If you are installing from compact disc, insert the CD-ROM. Click Install WebScanX. - If you are installing from downloaded files, type: x:\path\setup.exe (where x:\path is the location of the decompressed files). Click OK. Response: The Welcome screen appears. Click Next to continue. 2. Follow the on-screen installation instructions to complete WebScanX installation. * SILENT INSTALLATION * Network Administrators can perform a "silent" installation of WebScanX that requires minimal user interaction and uses settings they specify. Follow these steps: 1. Check in the Windows directory to ensure that a file named SETUP.ISS does not already exist. If it does, rename it, back it up, or delete it. 2. Run SETUP.EXE with the -r switch, (i.e., SETUP.EXE -r). 3. Select the components that you want to install during the silent installation. The installer records all responses. 4. Finish the installation, then locate the file SETUP.ISS in the Windows directory. 5. Open the file using any ASCII editor (e.g., NOTEPAD.EXE) and delete the section titled [APPLICATION]. 6. Locate the section [SdSetupType-0] in the SETUP.ISS file and go to the line: Result=x where x is equal to 301 (Typical installation) 302 (Compact installation) 303 (Custom installation) 7. Add 100 to the above value, so that the Result variable equals 401. Modifying this file allows the installation to copy WebScanX files to the drive where the operating system resides, instead of defaulting to the C: drive. 8. Copy SETUP.ISS from the Windows directory to the directory that contains the files you installed on your own computer. 9. At this point you should use your own distribution method to install WebScanX on end-user machines. 10. When you have access to the machine on which you want to install WebScanX, run SETUP.EXE with the -s switch (i.e., SETUP.EXE -s). NOTE: If you do not specify a "recorded" answer for all dialog boxes during the initial installation, the silent installation will fail. Also, the file used for the silent installation, SETUP.ISS, may not work properly across different operating systems. For example, if you edit the SETUP.ISS file to perform a silent install on machines running Windows 95, that file may not work properly on machines running Windows NT. * PRIMARY PROGRAM FILES FOR WEBSCANX * Files located in the Install directory: ======================================= For WebScanX for Windows 3.1x: Ccs_cfg.exe = cc:Mail configuration tool Ccscan.exe = cc:Mail scanner webhook.exe = Internet download scanner webscn16.exe = Internet support file uzdll16.dll = Zip support file mcalyze.dll = McAfee library file mcscan16.dll = McAfee library file names.dat = Virus definition file scan.dat = Virus definition file For WebScanX for Windows 95 or Windows NT: ccregmod.exe = cc:Mail support file vim32.dll = cc:Mail interface file vmefnw32.dll = cc:Mail interface file medb632.dll = cc:Mail interface file mew800.dll = cc:Mail interface file cdfw800.dll = cc:Mail interface file cfw800.dll = cc:Mail interface file ciw800.dll = cc:Mail interface file cdmw800.dll = cc:Mail interface file cmw800.dll = cc:Mail interface file chrset32.dll = cc:Mail interface file mcalyze.dll = McAfee library file mccod32.dll = McAfee library file mcgui32.dll = McAfee library file mckrnl32.dll = McAfee library file mcscan32.dll = McAfee library file mcutil32.dll = McAfee library file mfldr32.dll = McAfee library file psapi.dll = Windows NT support library imagehlp.dll = Windows NT support library wininet.dll = Internet support library wbhook32.dll = Internet support library csh.dll = Help support library wbupdate.exe = Update program file webcfg32.exe = Configuration program file webscanx.exe = WebScanX program file webscanx.dat = WebScanX data file domainx.dat = WebScanX data file ipscanx.dat = WebScanX data file names.dat = Virus definition file scan.dat = Virus definition file mcalyze.dat = Virus definition file webscanx.hlp = WebScanX help file webscanx.cnt = WebScanX help file inetwh16.dll = WebScanX help file inetwh32.dll = WebScanX help file setbrows.exe = WebScanX help file * UNINSTALLING WEBSCANX * Before uninstalling WebScanX, close all other applications. Failure to close applications before uninstalling could cause a General Protection Fault. _______________________________________ AUTOMATICALLY UNINSTALLING WEBSCANX: Follow these steps: 1. Click Start Menu 2. Select Programs 3. Select McAfee WebScanX 4. Select Uninstall Several windows appear in which the uninstall utility asks you if you are sure you want to uninstall WebScanX. Continue to click Yes for each window until the Uninstall WebScanX screen appears. A final summary screen will appear indicating which program files are being removed. After all the program files have been removed, click OK and restart your computer. You have successfully uninstalled WebScanX. WARNING: Do not stop the uninstall procedure once it begins. If the uninstall procedure is interrupted, you must remove all WebScanX files yourself. __________________________________ MANUALLY UNINSTALLING THE PRODUCT: Make sure WebScanX is not running, then delete the McAfee WebScanX directory. 1. Click Start and select Run. 2. Type REGEDIT, then click OK. 3. Delete the HKEY_LOCAL_MACHINE\Software\ McAfee\WebScanX folder. 4. Delete WebScanX from the Microsoft\Windows\ Current Version\RunServices folder. 5. Close the Registry Editor Window. 6. Remove the WebScanX program group from the Start menu. NOTE: Do not remove the IMAGEHLP.DLL file from your system. It may be used by other programs. 7. Restart your computer. _____________ DOCUMENTATION For more information, refer to the WebScanX User's Guide, included on the CD-ROM versions of this program or available from the McAfee BBS or the McAfee Web Site. The User's Guide is saved in Adobe Acrobat Portable Document Format (.PDF). You can view and print this document with Adobe's Acrobat Reader. PDF files can include hypertext links and other navigation features to assist you in finding answers to questions about your McAfee product. To download Adobe Acrobat Reader from the World Wide Web, visit Adobe's website at: http://www.adobe.com/Acrobat/readstep.html To download WebScanX documentation, visit the McAfee BBS or the McAfee Web Site at: http://www.mcafee.com Additional contact information appears at the end of this file. Documentation feedback is welcome. Send e-mail to documentation@cc.mcafee.com. __________________________ FREQUENTLY ASKED QUESTIONS Regularly updated lists of frequently asked questions about McAfee products also are available on the McAfee BBS, the McAfee Web Site, and on McAfee's CompuServe and AOL forums. Q: Should I uninstall previous versions of WebScan or WebScanX before installing WebScanX 3.1.1? A: It is always a good idea to use the automatic uninstaller to remove old versions of software before installing newer versions. Before installing WebScanX 3.1.1, you should uninstall any previous versions of WebScan you have installed on your hard disk, then reboot your computer. If you do not uninstall previous versions of WebScan, the WebScanX installer will prompt you to uninstall them and to reboot before it installs the current version of WebScanX. Q: What Internet browsers does WebScanX work with? A: WebScanX 3.1.1 automatically works with and installs links to the following browsers: - Microsoft Internet Explorer - Netscape Navigator - America Online browser Q: What releases of cc:Mail does WebScanX 3.1.1 support? A: WebScanX can work with cc:Mail post offices running cc:Mail releases 5x, 6 and 8. WebScanX also supports cc:Mail release 7 in its MAPI-compliant version. Q: If I have set WebScanX to delete any infected files it finds automatically, what does it do with the message that carried the infected attachment? A: That depends on how your e-mail software is set up. If you have set your e-mail software to delete files you no longer want, WebScanX deletes the infected file and the message that carried it. If you have set your e-mail software to hold discarded messages in a trash folder, WebScanX moves both the infected file and the message to the trash folder. Of course, if you have set WebScanX to move infected files to a quarantine folder, WebScanX moves both the message and the infected file to the folder you designate as your quarantine folder, no matter how you have your e-mail software set. Q: How can I make sure that the filtering configurations for WebScanX will remain fixed? A: Use WebScanX's password protection to lock down the filtering settings for Java classes, ActiveX controls, and IP addresses. See "Configuring WebScanX Security," Chapter 7 of the WebScanX User's Guide. Q: How can I find out which banned items WebScanX has detected? A: Click one of the WebScanX icons and choose Status. The WebScanX Status Window appears and tells you the number, if any, of banned objects and IP addresses it has detected. Q: How can I tell if WebScanX is doing its job? A: By one of the methods described below: 1. Open the Status window from a WebScanX icon shortcut menu. 2. Open the log file where you have directed WebScanX to log its activity. 3. Watch the WebScanX icons in the system tray-- they are animated and move whenever WebScanX scans files. Q: Why does WebScanX keep asking for my cc:Mail password over and over? A: If you set WebScanX to log in to your cc:Mail system with one user name and password, then log on to your cc:Mail system with a different user name and password, WebScanX prompts you to enter the new user name and password so that it can scan the new inbox for viruses. Q: Why does my system slow down when my cc:Mail gets scanned? A: A limitation in the Lotus cc:Mail server software might cause your computer to run slowly during a scan, especially if you have a large number of e-mail messages pending in your Inbox. To increase scan efficiency, delete messages you do not need from your cc:Mail Inbox and trash folder. Q: How does WebScanX handle multiple infections in a compressed file? A: Because WebScanX sees a compressed file as one file, it can only act on the compressed file as a whole. Thus, when it finds an infection in a compressed file, WebScanX stops scanning the file and immediately takes whatever action has been specified by the user on the entire compressed file. _________________ CONTACTING McAFEE * FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS * Contact McAfee's Customer Care department: 1. Corporate-licensed customers, call (408) 988-3832 Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time Retail-licensed customers, call (972) 278-6100 Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time 2. Fax (408) 970-9727 24-hour, Group III fax 3. Fax-back automated response system (408) 988-3034 24-hour fax Send correspondence to any of the following McAfee locations. McAfee Corporate Headquarters 2805 Bowers Avenue Santa Clara, CA 95051-0963 McAfee East Coast Office Jerral Center West 766 Shrewsbury Avenue Tinton Falls, NJ 07724-3298 McAfee Central Office 4099 McEwen, Suites 500 and 700 Dallas, TX 75244 McAfee Canada 139 Main Street, Suite 201 Unionville, Ontario Canada L3R 2G6 McAfee Europe B.V. Gatwickstraat 25 1043 GL Amsterdam The Netherlands McAfee (UK) Ltd. Hayley House, London Road Bracknell, Berkshire RG12 2TH United Kingdom McAfee France S.A. 50 rue de Londres 75008 Paris France McAfee Deutschland GmbH Industriestrasse 1 D-82110 Germering Germany McAfee Japan KK 4F Toranomon Mori Bldg. 33 3-8-12 Toranomon Minato-Ku, Tokyo, 105 Japan Or, you can receive online assistance through any of the following resources: 1. Bulletin Board System: (408) 988-4004 24-hour US Robotics HST DS 2. Internet e-mail: support@mcafee.com 3. Internet FTP: ftp.mcafee.com 4. World Wide Web: http://www.mcafee.com 5. America Online: keyword MCAFEE 6. CompuServe: GO MCAFEE 7. The Microsoft Network: MCAFEE To provide the answers you need quickly and efficiently, the McAfee technical support staff needs some information about your computer and your software. Please have this information ready when you call: - Program name and version number - Computer brand and model - Any additional hardware or peripherals connected to your computer - Operating system type and version numbers - Network name, operating system, and version - Network card installed, where applicable - Modem manufacturer, model, and baud, where applicable - Relevant browsers or applications and their version numbers, where applicable - How to reproduce your problem: when it occurs, whether you can reproduce it regularly, and under what conditions - Information needed to contact you by voice, fax, or e-mail We also seek and appreciate general feedback. * FOR ON-SITE TRAINING INFORMATION * Contact McAfee Customer Service at (800) 338-8754. * FOR PRODUCT UPGRADES * To make it easier for you to receive and use McAfee's products, we have established an Agents program to provide service, sales, and support for our products worldwide. For a listing of McAfee agents near you, click Contact McAfee under the Information section on the McAfee website. * MCAFEE BETA SITE * Get pre-release software, including DAT files, through http://beta.mcafee.com. You will have access to Public Beta and External Test Areas. Your feedback CAN make a difference.