home *** CD-ROM | disk | FTP | other *** search
Text File | 1997-06-05 | 30.3 KB | 1,198 lines |
- What's New in VirusScan for Windows 3.1x v3.1.0 (3006)
- Copyright 1994-1997 by McAfee, Inc.
- All Rights Reserved.
-
-
- Thank you for using McAfee's VirusScan for Windows 3.1x.
- This What's New file contains important information
- regarding the current version of this product. It is
- highly recommended that you read the entire document.
-
- McAfee welcomes your comments and suggestions. Please
- use the information provided in this file to contact us.
-
- ___________________
- WHAT'S IN THIS FILE
-
- - New Features
- - Known Issues
- - Installation
- - Documentation
- - Frequently Asked Questions
- - Contact McAfee
-
- ____________
- NEW FEATURES
-
- 1. VirusScan's powerful new user interface provides
- advanced scan configuration settings and a complete
- Tools menu. From the Tools menu, users can: Password
- protect scan tasks, gain access to the McAfee Virus
- List, and start the VirusScan Console. The Tools menu
- is conveniently located in VirusScan's main window.
-
- 2. The VirusScan Console is an intuitive addition to
- VirusScan for Windows 3.1x. The VirusScan Console
- facilitates easy and efficient scheduling and
- configuring of scan tasks.
-
- 3. VirusScan v3.1.0 offers configuration lockdown for
- both the on-demand scanner and VShield, the on-access
- scanner, through password protection.
-
- Users or administrators can now password protect scan
- settings to prevent unintentional changes being made.
-
- 4. VirusScan's new conversion utility identifies existing
- custom profiles during installation and converts them
- to scan tasks. The tasks can then be easily accessed
- with the VirusScan Console.
-
- 5. VirusScan for Windows 3.1x now supports ISeamless
- Install Scripts. ISeamless Install Scripts allow
- administrators and OEMs to customize the installation
- procedure for VirusScan. The custom installs can, among
- other things, configure VirusScan, launch another
- program before or after the install, and change the
- amount of end-user interaction necessary to install the
- product.
-
- Note: ISeamless Install Scripts must be compiled on a
- 32-bit operating system. ISeamless cannot be compiled on
- a Windows 3.1x system.
-
-
- * ENHANCEMENTS *
-
- 1. When unloading VShield using the VShield Configuration
- Manager, it is no longer necessary to exit windows for
- the changes to take effect. To unload VShield, simply
- clear the Load VShield at Startup checkbox, click
- Apply, and select Yes when prompted to unload VShield
- now.
-
- 2. Enhanced VirusScan installation. User's can now
- uninstall previous versions of VirusScan during instal-
- lation of v3.1.0. When installing VirusScan v3.1.0 over
- a previous version, the user is automatically prompted
- to run the uninstaller.
-
- 3. Detection of the AOL4FREE Trojan. This DAT file ,3006,
- contains an added detection method that allows users
- to scan for the presence of AOL4FREE Trojan on their
- hard drives. If found, the file should be deleted
- immediately.
-
-
- * NEW VIRUSES DETECTED *
-
- This DAT file (3006) detects the following 233 new viruses.
-
- _2793 (Philippines)
- AL-DITH.1502
- ANDR.2374
- ANDRY.A
- AOL4FREE TROJAN
- AVCS.270
- BANBANBROS
- BANDUNG.U
- BANDUNG.V
- BANDUNG.W
- BANDUNG.X
- BANDUNG.Y
- BANDUNG.Z
- BANDUNG.AA
- BANDUNG.AB
- BANDUNG.AC
- BANDUNG.AD
- BANDUNG.AE
- BOX.B:TW
- CAP.C
- CAP.D
- CAP.E
- CAP.F
- CAP.G
- CAP.H
- CAP.I
- CAP.J
- CAP.K
- CEBU.A
- COLORS.AK
- COLORS.AL
- COLORS.AM
- COLORS.AN
- COLORS.AO
- COLORS.AP
- COLORS.AQ
- COLORS.AS
- COLORS.AT
- CONCEPT.AI:JP
- CONCEPT.AJ
- CONCEPT.AK
- CONCEPT.AL
- CONCEPT.AM
- CONCEPT.AN
- CVCK1.A
- DARK.B
- DARK.C
- DARK.D
- DIVINA.F
- DMV.D
- DMV.E
- DRUGS.A:DE
- DUB.A
- ERASER.G:TW
- ERASER.H:TW
- ERASER.I:TW
- ERASER.J:TW
- ERASER.K:TW
- ERASER.L:TW
- FONX.1958 (US)
- FRENZY.A
- FRIENDLY.B:DE
- GOGGLES.A
- GOODNIGHT.A
- GRANADA.2765
- HIAC.A (US)
- HILIGHT.A
- HLLO.4317
- HLLO.7424
- HLLO.8214
- HLLO.15788
- HLLT.5850 (Internet)
- HLLT.5850.B (Internet)
- HOOZE-513
- HUNTER.A:DE
- HUNTER.B:DE
- HUNTER.C:DE
- INSIDEOUT.A
- INT12
- IRISH.H
- IRISH.I
- IRISH.J
- IRISH.K
- IRISH.L
- JOHNNY.J
- JOHNNY.J1
- JOHNNY.K
- JOHNNY.L
- JOHNNY.L1
- JUNKFACE.A
- JUNKFACE.B
- KILLPROT.B
- KOMPU.C
- KUSUMAH.3968 (COM) (Indonesia)
- KUSUMAH.4269 (EXE) (Indonesia)
- LAZY.A
- LUNCH.B (US)
- MACARONI.A:DE
- MDMA.H
- MDMA.I
- MDMA.J
- MDMA.K
- MDMA.L
- MDMA.M
- MDMA.N
- MDMA.O
- MERCY.A
- MERCY.B
- MESSENGER.A:DE
- MINIMAL.E
- MINIMAL.F
- MINIMAL.G
- MINIMAL.H
- MINIMAL.I
- MINIMAL.J
- MINIMAL.K
- MINIMAL.L
- MINIMAL.M
- MOTA.A
- MOTHER.655
- NJ-WMDLK1.F
- NO-F.B
- NOMENKLATURA.1024
- NOP.F:DE (Germany)
- NOP.G
- NPAD.AP
- NPAD.AQ
- NPAD.AR
- NPAD.AS
- NPAD.AT
- NPAD.AU
- NPAD.AV
- NPAD.AW
- NPAD.AX
- NPAD.AY
- NPAD.AZ
- NPAD.BA
- NPAD.BB
- NUCLEAR.H
- NUCLEAR.I
- NUCLEAR.J
- NUCLEAR.K
- NUCLEAR.L
- NUCLEAR.M
- OVAL.A (US, Texas)
- OVERDOZE.580
- OVERDOZE.593
- PANDAMON.1520
- PAYCHECK.A
- PHALCON.894
- PHALCON.899
- PIXEL.298
- PS-MPC.535.B
- PS-MPC.536.C
- RAPI.X
- RAPI.Y
- RAPI.Y1
- RAPI.Z2
- RAPI.AA2
- RAPI.AB2
- RAPI.AC
- RAPI.AC1
- RAPI.AC2
- RAPI.AD2
- RAPI.AE
- RAPI.AE1
- RAPI.AE2
- RAPI.AF1
- RAPI.AF2
- RAPI.AG
- RAPI.AG1
- RAPI.AG2
- RAPI.AH
- RAPI.AH1
- RAPI.AH2
- ROET.1363 (Internet)
- SAM.A:TW
- SAM.A1:TW
- SHAREFUN.B
- SHOWOFF.R
- SHOWOFF.AC
- SHOWOFF.AD
- SHOWOFF.AE
- SHOWOFF.AF
- SHOWOFF.AG
- SHOWOFF.AH
- SHOWOFF.AI
- SHOWOFF.AJ
- SHOWOFF.AK
- SHOWOFF.AL
- SHOWOFF.AM
- SHOWOFF.AN
- SHOWOFF.AO
- SHOWOFF.AP
- SHOWOFF.AQ
- SHOWOFF.AR
- SHOWOFF.AS
- SHOWOFF.AT
- SHOWOFF.AU
- SHUFFLE.A
- SILCE.303
- SILCE.304
- SLOW.A
- SPANSKA.1000 (Internet)
- SPIRAL.B
- SURABAYA.A (US)
- SWLABS.B
- TALON.B
- TALON.C
- TALON.D
- TALON.E
- TALON.F
- TALON.G
- TERROR.A (INTENDED)
- TESTAREA.A
- TIFFANY.440 (US, Mississippi)
- TORNADO.B
- TRIVIAL-32
- TRIVIAL-83
- TWNO.J:TW
- WALLPAPER.A
- WAZZU.AT
- WAZZU.BR
- WAZZU.BS (Canada)
- WAZZU.BT
- WAZZU.BU
- WAZZU.BW
- WAZZU.BX
- WAZZU.BY
- WAZZU.BZ
- WAZZU.CA
- WPCBATS.3161
- XM/TJORO.A
-
-
- * NEW VIRUSES REMOVED *
-
- This DAT file (3006) removes the following 222 new viruses.
-
- ANDRY.A
- BANBANBROS
- BANDUNG.U
- BANDUNG.V
- BANDUNG.W
- BANDUNG.X
- BANDUNG.Y
- BANDUNG.Z
- BANDUNG.AA
- BANDUNG.AB
- BANDUNG.AC
- BANDUNG.AD
- BANDUNG.AE
- BOX.B:TW
- CAP.C
- CAP.D
- CAP.E
- CAP.F
- CAP.G
- CAP.H
- CAP.I
- CAP.J
- CAP.K
- CAZ.1159
- COLORS.AK
- COLORS.AL
- COLORS.AM
- COLORS.AN
- COLORS.AO
- COLORS.AP
- COLORS.AQ
- COLORS.AS
- COLORS.AT
- CONCEPT.AI:JP
- CONCEPT.AJ
- CONCEPT.AK
- CONCEPT.AL
- CONCEPT.AM
- CONCEPT.AN
- CVCK1.A
- DARK.B
- DARK.C
- DARK.D
- DELTREE TROJAN
- DIVINA.F
- DMV.D
- DMV.E
- DRUGS.A:DE
- DUB.A
- ERASER.G:TW
- ERASER.H:TW
- ERASER.I:TW
- ERASER.J:TW
- ERASER.K:TW
- ERASER.L:TW
- FONX.1958 (US)
- FRENZY.A
- FRIENDLY.B:DE
- GOGGLES.A
- GOODNIGHT.A
- GRANADA.2765
- HIAC.A (US)
- HILIGHT.A
- HLLC.5129
- HOOZE-513
- HUNTER.A:DE
- HUNTER.B:DE
- HUNTER.C:DE
- INFERNO.1800
- INSIDEOUT.A
- INT12
- IRISH.H
- IRISH.I
- IRISH.J
- IRISH.K
- IRISH.L
- JOHNNY.J
- JOHNNY.J1
- JOHNNY.K
- JOHNNY.L
- JOHNNY.L1
- JUNKFACE.A
- JUNKFACE.B
- KILLPROT.B
- KOMPU.C
- KUSUMAH.3968 (COM) (Indonesia)
- KUSUMAH.4269 (EXE) (Indonesia)
- LAZY.A
- LUNCH.B (US)
- MACARONI.A:DE
- MDMA.H
- MDMA.I
- MDMA.J
- MDMA.K
- MDMA.L
- MDMA.M
- MDMA.N
- MDMA.O
- MERCY.A
- MERCY.B
- MESSENGER.A:DE
- MINIMAL.E
- MINIMAL.F
- MINIMAL.G
- MINIMAL.H
- MINIMAL.I
- MINIMAL.J
- MINIMAL.K
- MINIMAL.L
- MINIMAL.M
- MOTA.A
- MOTHER.655
- NJ-WMDLK1.F
- NO-F.B
- NOMENKLATURA.1024
- NOP.F:DE (Germany)
- NOP.G
- NPAD.AP
- NPAD.AQ
- NPAD.AR
- NPAD.AS
- NPAD.AT
- NPAD.AU
- NPAD.AV
- NPAD.AW
- NPAD.AX
- NPAD.AY
- NPAD.AZ
- NPAD.BA
- NPAD.BB
- NUCLEAR.H
- NUCLEAR.I
- NUCLEAR.J
- NUCLEAR.K
- NUCLEAR.L
- NUCLEAR.M
- OVAL.A (US, Texas)
- OVERDOZE.580
- OVERDOZE.593
- PANDAMON.1520
- PAYCHECK.A
- PCT.625
- PHALCON.894
- PIXEL.298
- ROET.1363
- RAPI.X
- RAPI.Y
- RAPI.Y1
- RAPI.Z2
- RAPI.AA2
- RAPI.AB2
- RAPI.AC
- RAPI.AC1
- RAPI.AC2
- RAPI.AD2
- RAPI.AE
- RAPI.AE1
- RAPI.AE2
- RAPI.AF1
- RAPI.AF2
- RAPI.AG
- RAPI.AG1
- RAPI.AG2
- RAPI.AH
- RAPI.AH1
- RAPI.AH2
- ROTCEH
- SAM.A:TW (Internet)
- SAM.A1:TW
- SHAREFUN.B
- SHOWOFF.R
- SHOWOFF.AC
- SHOWOFF.AD
- SHOWOFF.AE
- SHOWOFF.AF
- SHOWOFF.AG
- SHOWOFF.AH
- SHOWOFF.AI
- SHOWOFF.AJ
- SHOWOFF.AK
- SHOWOFF.AL
- SHOWOFF.AM
- SHOWOFF.AN
- SHOWOFF.AO
- SHOWOFF.AP
- SHOWOFF.AQ
- SHOWOFF.AR
- SHOWOFF.AS
- SHOWOFF.AT
- SHOWOFF.AU
- SHUFFLE.A
- SLOW.A
- SPANSKA.1000 (Internet)
- SPIRAL.A
- SPIRAL.B
- SURABAYA.A (US)
- SWLABS.B
- TALON.B
- TALON.C
- TALON.D
- TALON.E
- TALON.F
- TALON.G
- TERROR.A (INTENDED)
- TESTAREA.A
- TIFFANY.440 (US, Mississippi)
- TORNADO.B
- TWNO.J:TW
- WALLPAPER.A
- WAZZU.AT
- WAZZU.BR
- WAZZU.BS (Canada)
- WAZZU.BT
- WAZZU.BU
- WAZZU.BW
- WAZZU.BX
- WAZZU.BY
- WAZZU.BZ
- WAZZU.CA
- XM/LAROUX (DAMAGED)
- XM/TJORO.A
- XUTE2.1062
-
- ____________
- KNOWN ISSUES
-
- 1. The new 3000 series DATs contained in VirusScan v3.1.0
- are not backward compatible with the VirusScan v2.x
- series. The 3000 series DATs should not be used with
- VirusScan v2.x products.
-
- 2. When creating an Emergency Disk, in some cases,
- additional drivers must be loaded in order to access a
- driver specific hard drive (i.e. a compressed drive).
- Before modifying the Emergency Disk, please refer to
- your hard disk documentation for additional information
- on creating a boot disk.
-
- 3. If password protection is set for VShield or any
- scan task, when an associated program is launched, you
- will be prompted to verify the password. You must use
- the mouse to click in the text field to enter the
- password or click on cancel to exit. Keyboard strokes
- are not functional. This is a Microsoft issue as stated
- in Microsoft's Knowledge Base Article ID #Q84133.
-
- 4. If Move Infected File is selected on the Actions page,
- infected files will be moved to the directory specified.
- If the Windows Copy command fails during this procedure,
- a zero byte file size stamp may be left in the destin-
- ation directory when carrying out the Copy command.
-
- 5. The CTRL+C and CTRL+BREAK option to break out of DOS
- applications in a DOS window is disabled when you
- install VirusScan. This is to prevent a host of issues
- that would be caused by CTRL+C and CTRL+BREAK interfer-
- ing with VShield activity. Consequently, if a DIR
- command is executed in a DOS window, and then a CTRL+C
- or a CTRL+BREAK is executed, the DIR display will not
- be canceled and an incorrect DIR display may result.
-
- 6. If VShield detects an infected file that is decompress-
- ing in a DOS session and the DOS session is terminated,
- VShield as well as Pkunzip and any other program being
- run from the DOS window will be discontinued. Although
- the VShield icon will still be displayed in the Taskbar,
- VShield will be disabled. VShield must be re-enabled by
- restarting Windows to maintain maximum virus protection.
-
- 7. If the product is uninstalled while VirusScan
- (Scan16.exe) or the VirusScan Console (AVConsol.exe)
- are open, some files may not be removed (i.e.
- Scan16.exe, Mcscan16.dll, Mcgui16.dll, AVConsol.exe).
- If you try to delete the McAfee\Viruscan directory
- before restarting Windows, error messages will appear
- stating that the files are being used by Windows. Close
- all VirusScan related programs, excluding VShield,
- before uninstalling VirusScan.
-
- 8. The Parameters field in the Task Properties page is
- provided to take advantage of command-line parameters
- for programs other than VirusScan. For example, a
- NotePad.exe task can be set to open a file by entering
- the filename (i.e. Whatsnew.txt) in the parameter field.
-
- 9. The conversion utility preserves the scan targets
- but does not preserve the command-line parameters.
- When custom profiles include command-line parameters,
- the resulting task (.VSC file) will have one or more
- invalid scan items that will need to be manually
- updated.
-
- Command-line parameters in scan tasks must be manually
- added. Pre-existing profiles (.PRF files) will be moved
- to the target installation directory for reference
- purposes.
-
- 10. When scheduling multiple scan tasks through the
- VirusScan console, ensure that task schedules do not
- overlap. If the schedules overlap, only the first task
- will be implemented and tasks scheduled thereafter will
- be ignored.
-
- 11. If a task is scheduled to run minimized, the scan will
- not begin until the window is maximized. This is because
- when the window is minimized, the memory scanning window
- is prevented from being displayed. The scan will
- commence as soon as the window is maximized.
-
- 12. If the AVCONSOLE.INI file is deleted and then recreated
- upon launching the AV Console, the default Scan16 task
- will change from "Scan Drive C" and "All Drives" to
- "VirusScan."
-
- 13. When the default.vsc or default.vsh files are renamed
- or deleted, VirusScan or VShield creates a new default
- file upon launch. The new default file is set to limit
- the size of the log file to 10kb and the Compressed
- option will be selected.
-
- ____________
- INSTALLATION
-
- * INSTALLING THE PRODUCT *
-
- 1. Take one of the following steps:
-
- - If you are installing from diskette or compact disc,
- insert the VirusScan for Windows 3.1x installation
- diskette or the CD-ROM.
- - If you are installing from files downloaded from a BBS
- or the McAfee Web Site, decompress the zipped files
- into a directory on your local drive or the network.
-
- 2. Select Run from the File menu.
-
- 3. If you are installing from diskette, type: x:\setup.exe
- (where x is the drive that contains the diskette).
- Click OK.
-
- If you are installing from compact disc, type:
- x:\win3x\setup.exe (where x is the drive that contains
- the CD-ROM). Click OK.
-
- If you are installing from downloaded files, type:
- x:\path\setup.exe (where x:\path is the location of the
- files). Click OK.
-
- Response: The Welcome screen is displayed. Click Next
- to continue.
-
- 5. Follow the on-screen installation instructions to
- complete VirusScan installation.
-
-
- * PERFORMING A SILENT INSTALLATION *
-
- If you would like to perform a "silent" installation of
- VirusScan, requiring minimal user interaction and using all
- default or "Typical" installation settings, add -s (i.e.
- SETUP.EXE -s) to the setup command when you install the
- product.
-
- Network Administrators can customize the silent installation
- feature by following the steps outlined below.
-
- 1. Check in the Windows directory to ensure that a file
- named SETUP.ISS does not already exist. If it does,
- rename it, back it up, or delete it.
-
- 2. Run SETUP.EXE with the -r switch, (i.e. SETUP.EXE -r).
-
- 3. Select the components you would like to be installed
- during the silent installation. All responses will
- be recorded.
-
- 4. Finish the installation, and locate the file SETUP.ISS
- in the Windows directory.
-
- 5. Locate the section [SdSetupType-0] in the SETUP.ISS
- file and go to the line:
-
- Result=x
-
- where x is equal to
- 301 (Typical installation)
- 302 (Compact installation)
- 303 (Custom installation)
-
- 6. Add 100 to the above value, so that the Result variable
- is equal to 401, 402, or 403. Modifying this file will
- allow the installation to copy the VirusScan files to
- the drive where the operating system resides instead of
- defaulting to the C: drive.
-
- 7. Copy the installation files onto a local or mapped drive,
- then rename, back up, or delete the SETUP.ISS file from
- the product.
-
- NOTE: A silent install cannot be performed from multiple
- media, the silent operation will be compromised when
- the install prompts the user for more media.
-
- 8. Copy the new SETUP.ISS from the Windows directory
- to the location of the installation files.
-
- 9. Run SETUP.EXE with the -s switch (i.e. SETUP.EXE -s).
-
- NOTE: If you do not specify a "recorded" answer for
- all dialog boxes during the initial installation, the
- silent installation will fail. Also, the file used
- for the silent installation, SETUP.ISS, may not work
- properly across different operating systems.
-
- 10. When the silent installation is complete, you should
- reboot the machine manually.
-
- Please refer to the IIS documentation on the VirusScan CD
- for further information on silent installations.
-
-
- * PRIMARY PROGRAM FILES FOR VIRUSSCAN FOR WINDOWS 3.1x *
-
- Files located in the Install directory:
- =======================================
-
- 1. Installed for VShield/DOS/VirusScan:
-
- README.1ST = License and registration information
- CLEAN.DAT = Virus clean definition data
- NAMES.DAT = Virus names definition data
- SCAN.DAT = Virus scan definition data
- VALIDATE.EXE = McAfee file validation program
- WCMDR.EXE = Windows Commander program
- MCFDU.EXE = McAfee floppy disk utility
- (for Zenith machines only)
- PRF2VSC.EXE = Conversion utility program
- SCNCFG16.EXE = VirusScan configuration
- program
- SETBROWS.EXE = Set browser program
- INETWH16.DLL = Library files
- INETWH32.DLL = Library files
- MCGUI16.DLL = VirusScan Console library file
- WCMDR.INI = Windows Commander configuration
- settings
- WCMDRSIL.INI = unInstallShield helper
- configuration
- DEISL1.ISU = Uninstall file
- PACKING.LST = Packing list
- WHATSNEW.TXT = What's New document
- RESELLER.TXT = McAfee authorized agents
-
-
- 2. Installed for VShield:
-
- MCKRNL16.DLL = Tools library
- MCUTIL16.DLL = Run-time support library
- TABDLL11.DLL = Properties dialog library
- VSHCFG16.EXE = VShield Configuration Manager
- VSHWIN.EXE = VShield on-access engine
- CHKVXD.EXE = VShield virtual device driver
- checking utility
- UNVSHVXD.EXE = Virtual device driver
- UNVSHVXD.INI = Initialization file
- VSHCFG16.HLP = Online help
- DEFAULT.VSH = Default VSH settings
-
-
- 3. Installed for DOS:
-
- EDISK16.EXE = Emergency Disk creation utility
- EDISK.SCR = Emergency Disk file
- EDAT.1 = Emergency Disk data file
- EDAT.2 = Emergency Disk data file
- EDAT.3 = Emergency Disk data file
- GETREPLY.EXE = Emergency diskette program component
- SCAN.EXE = MS-DOS scan program
- SCANPM.EXE = Protected mode scanner
-
- 4. Installed for VirusScan:
-
- AVCONSOL.EXE = VirusScan console program
- SCAN16.EXE = VirusScan for Windows 3.1x
- on-demand scanner
- VIRLIST16.EXE = Virus List program
- MCSCAN16.DLL = Library files
- SCAN16.HLP = VirusScan for Windows 3.1x
- online help
- AVCONSOL HLP = VirusScan Console online help
- AVCONSOL.INI = VirusScan console
- configuration file
- DEFAULT.VSC = Default VSC settings
- INETWH16.DLL = Internet library help file
- INETWH32.DLL = Internet library help file
-
- Files located in WINDOWS\SYSTEM directory:
- ==========================================
-
- 1. Installed for VShield/VirusScan:
-
- CTL3D.DLL = 16-bit 3D Windows controls
- library (*)
- CTL3DV2.DLL = 32-bit 3D Windows controls
- library (*)
-
- (*) File will be installed upon installation of VirusScan
- if it does not already exist, or if an older version
- is found.
-
-
- 2. Installed for VShield:
-
- MCFSHOOK.386 = File system hook
- MCKRNL.386 = Scan engine device driver
- MCSCAN32.386 = Scan engine device driver
- MCUTIL.386 = Utility device driver
- VSHIELD.386 = VShield device driver
-
-
- * TESTING YOUR INSTALLATION *
-
- The Eicar Standard AntiVirus Test File is a combined effort
- by anti-virus vendors throughout the world to come up with
- one standard by which customers can verify their anti-virus
- installations. To test your installation, copy the following
- line into its own file and name it EICAR.COM.
-
- X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
-
- When done, you will have a 69 or 70 byte file.
-
- When VirusScan is applied to this file, it will report
- finding the EICAR-STANDARD-AV-TEST-FILE virus.
-
- It is important to know that THIS IS NOT A VIRUS. However,
- users often have the need to test that their installations
- function correctly. The anti-virus industry, through the
- European Institute for Computer Antivirus Research, has
- adopted this standard to facilitate this need.
-
- Please delete the file when installation testing is
- completed so unsuspecting users are not unnecessarily
- alarmed.
-
-
- * MANUALLY UNINSTALLING VIRUSSCAN *
-
- McAfee recommends using VirusScan's uninstall program
- provided. You can access the McAfee Uninstall icon from
- the McAfee VirusScan program group. If, however, the
- uninstall program (WCMDR.EXE) is not present on
- your system, follow the instructions outlined below to
- manually uninstall VirusScan.
-
- 1. Edit the AUTOEXEC.BAT file:
-
- 1. From the File menu, select Run and type SYSEDIT
- in the space provided. Click Okay.
- 2. Remove VirusScan from the path statement. The
- default path is C:\MCAFEE\VIRUSCAN.
-
- 2. In the SYSTEM.INI file remove the following lines:
-
- device=MCSCAN32.386
- device=MCUTIL.386
- device=MCKRNL.386
- device=MCFSHOOK.386
- device=VSHIELD.386
-
- 3. Remove the following lines from the WIN.INI file:
-
- 1. After LOAD =, remove all references to VirusScan.
- The default line is C:\MCAFEE\VIRUSCAN\VSHWIN.EXE.
- 2. Remove [VIRUSCAN] SCAN16=C:\McAfee\VIRUSCAN\
- SCAN16.EXE.
-
- Note: In versions of VirusScan earlier than 3.0.1,
- SCAN16 is refered to as WSCAN.
-
- 4. Delete VirusScan icons and the McAfee VirusScan
- program group from Windows in the Program Manager.
-
- 5. Exit Windows and reboot your system.
-
- 6. When Windows comes back up, open the File Manager and
- delete the McAfee directory.
-
- _____________
- DOCUMENTATION
-
- For more information, refer to the User's Guide, included
- on the CD-ROM versions of this program or available
- from McAfee's BBS and FTP site. This file is in Adobe
- Acrobat Portable Document Format (.PDF) and can be viewed
- using Adobe Acrobat Reader. This form of electronic
- documentation includes hypertext links and easy navigation
- to assist you in finding answers to questions about your
- McAfee product.
-
- Adobe Acrobat Reader is available on CD-ROM in the ACROREAD
- subdirectory. Adobe Acrobat Reader also can be downloaded
- from the World Wide Web at:
-
- http://www.adobe.com/Acrobat/readstep.html
-
- VirusScan documentation can be downloaded from McAfee's BBS
- or the World Wide Web at:
-
- http://www.mcafee.com or 205.227.129.164
-
- For more information on viruses and virus prevention,
- see the McAfee Virus Information Library, included on
- the CD-ROM version of this product or available from
- McAfee's BBS and FTP site. A ViaGraphix Interactive
- Anti-virus Training program also is available on the
- CD-ROM version, or can be purchased from the McAfee
- Web Site.
-
- __________________________
- FREQUENTLY ASKED QUESTIONS
-
- Regularly updated lists of frequently asked questions
- about McAfee products also are available on McAfee's
- BBS, website, and CompuServe and AOL forums.
-
-
- Q: How do I enable McAfee's Centralized Alerting and
- Reporting feature?
-
- A: VirusScan now supports Centralized Alerting and
- Reporting to a remote NetWare or Windows NT server
- running NetShield v2.5.3 or later for Windows NT or
- NetShield v2.3.3 or later for NetWare.
-
- Centralized Alerting and Reporting can be enabled from
- the VirusScan Console on your client workstation. To set
- up this option on your VirusScan client, follow the
- instructions outlined below:
-
- 1. Click the Alert tab in VirusScan's main window.
-
- 2. Check the Send Network Alert checkbox.
-
- 3. Enter the directory where the CENTALRT.TXT file is
- located or click the Browse button to locate the
- file.
-
- NOTE: The client must have write access to this
- location and the directory must contain the
- NetShield-supplied CENTALRT.TXT file.
-
- 4. Select Save Settings from the File menu to save
- the new alert settings.
-
-
- Q: How can I create an Emergency Disk after VirusScan
- installation?
-
- A: You can create an Emergency Disk after installation by
- double-clicking the Emergency Disk Creation Utility icon
- in your McAfee VirusScan program group.
-
-
- Q: When I have an infected file, why does the infected
- counter increase by increments greater than one?
-
- A: The file system will typically access a file more than
- once. On each access, VirusScan scans the file and
- detects the infection.
-
-
- Q: Can I continue to use VirusScan for Windows 3.1x on my
- system after upgrading to Windows 95?
-
- A: VirusScan for Windows 3.1x can run on a Windows 95
- system. However, many key components, including VShield,
- will not be functional. If you are running VirusScan for
- Windows 3.1x on a Windows 95 system, VirusScan will not
- be effectively protecting your system from virus
- infection. You must use VirusScan for Windows 95 to
- protect a Windows 95 system.
-
-
- Q: Does VShield detect Word Macro infections?
-
- A: Yes. VShield detects and cleans Word Macro infections.
-
-
- Q: Does the VShield TSR Awareness feature unload the
- VShield TSR?
-
- A: No. With the current version of DOS VShield TSR, v3.0.1,
- this feature only detects and disables active instal-
- lations of the TSR upon starting a Windows session. Upon
- ending the Windows session, the VShield TSR is then
- re-enabled.
-
- Note: The VShield TSR should be installed to a
- directory other than the VirusScan directory. If the
- VShield TSR is installed to the VirusScan directory,
- you must manually uninstall it before running
- VirusScan's uninstall program or VShield will become
- inoperable.
-
-
- Q: Can I update VirusScan's data files to detect new
- viruses?
-
- A: Yes. If you have Internet access, you can download
- updated VirusScan data files from the McAfee Web
- Site, BBS, or other online resources. To download
- from the McAfee Web Site, follow these steps:
-
- 1. Go to the McAfee Web Site (http://www.mcafee.com
- or 205.227.129.164).
-
- 2. Select Update DAT File in the left hand column
- or frame.
-
- 3. Scroll down, and click Update Your DAT Files to
- update your virus definition files.
-
- 4. Data file updates are stored in a compressed form
- to reduce transmission time. Unzip the files into
- a temporary directory, then copy the files to the
- appropriate directory, replacing your old files.
-
- 5. Before performing any scans, shut down your
- computer, wait a few seconds, and turn it on again.
-
- If you need additional assistance with downloading,
- contact McAfee Download Support at (408) 988-3832.
-
- ______________
- CONTACT McAFEE
-
- * FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS *
-
- Contact McAfee's Customer Care department:
-
- 1. Corporate-licensed customers, call (408) 988-3832
- Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time
-
- Retail-licensed customers, call (972) 278-6100
- Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time
-
- 2. Fax (408) 970-9727
- 24-hour, Group III fax
-
- 3. Fax-back automated response system (408) 988-3034
- 24-hour fax
-
- Send correspondence to any of the following McAfee
- locations.
-
- McAfee Corporate Headquarters
- 2805 Bowers
- Santa Clara, CA 95051-0963
-
- McAfee East Coast Office
- Jerral Center West
- 766 Shrewsbury Avenue
- Tinton Falls, NJ 07724-3298
-
- McAfee Central Office
- 4099 McEwen
- Suites 500 and 700
- Dallas, TX 75244
-
- McAfee Canada
- 139 Main Street
- Suite 201
- Unionville, Ontario
- Canada L3R2G6
-
- McAfee Europe B.V.
- Gatwickstraat 25
- 1043 GL Amsterdam
- The Netherlands
-
- McAfee (UK) Ltd.
- Hayley House, London Road
- Bracknell, Berkshire RG12 2TH
- United Kingdom
-
- McAfee France S.A.
- 50 rue de Londres
- 75008 Paris
- France
-
- McAfee Deutschland GmbH
- Industriestrasse 1
- D-82110 Germering
- Germany
-
- McAfee Japan KK
- 4F Toranomon Mori bldg. 33
- 3-8-21 Toranomon
- Minato-Ku
- Tokyo, 105
- Japan
-
- Or, you can receive online assistance through any of the
- following resources:
-
- 1. Bulletin Board System: (408) 988-4004
- 24-hour US Robotics HST DS
-
- 2. Internet e-mail: support@mcafee.com
-
- 3. Internet FTP: ftp.mcafee.com or 205.227.129.168
-
- 4. World Wide Web: http://www.mcafee.com
- or http://205.227.129.164
-
- 5. America Online: keyword MCAFEE
-
- 6. CompuServe: GO MCAFEE
-
- 7. The Microsoft Network: GO MCAFEE
-
- Before contacting McAfee, please make note of the
- following information. When sending correspondence,
- please include the same details.
-
- - Program name and version number
- - Type and brand of your computer, hard drive, and any
- peripherals
- - Operating system type and version
- - Network name, operating system, and version
- - Contents of your AUTOEXEC.BAT, CONFIG.SYS, and
- system LOGIN script
- - Microsoft service pack, where applicable
- - Network card installed, where applicable
- - Modem manufacturer, model, and baud, where
- applicable
- - Relevant browsers/applications and version number,
- where applicable
-
- - Problem
- - Specific scenario where problem occurs
- - Conditions required to reproduce problem
- - Statement of whether problem is reproducible on demand
-
- - Your contact information: voice, fax, and e-mail
-
- Other general feedback is also appreciated.
-
- Documentation feedback is welcome. Send e-mail to
- documentation@cc.mcafee.com.
-
-
- * FOR ON-SITE TRAINING INFORMATION *
-
- Contact McAfee Customer Service at (800) 338-8754.
-
-
- * FOR PRODUCT UPGRADES *
-
- To make it easier for you to receive and use McAfee's
- products, we have established a Reseller program to
- provide service, sales, and support for our products
- worldwide. For a listing of McAfee resellers near you,
- click Contact McAfee under the Information section on
- the McAfee website or see tge RESELLER.TXT file included
- with this product.
-
-
-