home *** CD-ROM | disk | FTP | other *** search
- Errata for VirusScan Version 2.2.7 (9510)
- Copyright 1994, 1995 by McAfee, Inc.
- All Rights Reserved.
-
-
-
- These release notes cover what is new in VirusScan 2.2.7 and the
- October DAT release (9510) of VirusScan for DOS, VirusScan for
- Windows, VirusScan for OS/2 and VShield.
-
-
-
- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
- ! NOTE: OS/2 users. IF YOUR OS/2 SYSTEM IS CONNECTED TO OS/2 !
- ! LANMANAGER, DO NOT RUN OS/2 SCAN FROM STARTUP.CMD. DOING SO !
- ! COULD RESULT IN LOST DESKTOP OR OTHER UNDESIRABLE RESULTS. !
- ! !
- ! McAfee is working with IBM and with several large !
- ! organizations, which rely heavily on OS/2, to alleviate the !
- ! corruption problem. !
- ! !
- ! The temporary solution is to put VirusScan in a start up !
- ! group. Not in the log in script or in the start up command !
- ! file. !
- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
-
- Note for NT users:
- You must add the following line in your DEFAULT.CFG and PROFILE1.PRF
- file (or any other profile you have chosen to use), residing in the
- same directory as WSCAN.EXE.
-
- /NODDA
-
- If you are not familiar with profiles, please refer to VSCAN22.PDF
- or your printed manual.
-
- ------------------------------------------------------------------------
-
- About VirusScan Documentation
-
-
- The VirusScan documentation is now available online. In addition to being
- environmentally friendly, the online documentation is easy to use and puts
- the information you need at your fingertips. It will be necessary to download
- the Acrobat Reader that you prefer for DOS (ACRODOS.ZIP) or for Windows
- (ACROWIN.ZIP) and the Manual itself (VS22DOC.ZIP). The following features
- help you access information quickly:
-
- - The hypertext links take you directly to the topic you want to see.
- When the cursor changes to a pointing hand, just click on the link
- to display the related topic.
-
- - The navigation features on the Acrobat Reader toolbar let you move around
- within the document.
-
- Use the following procedure to view your electronic documentation:
-
- 1. Unzip the downloaded files into a working drive on your PC.
-
- 2. Run the self-extracting Adobe Acrobat Reader program, ACROREAD.EXE
- for Windows. In DOS, type ACRODOS and hit [ENTER] while in the directory
- where you unzipped the files.
-
- 3. In DOS Run the Install program and follow the Acrobat installation
- instructions.
-
- 4. Launch the Adobe Acrobat Reader from the installation directory.
- The Open dialog box is displayed.
-
- 5. Locate the manual file, VSCAN22.PDF, in the directory where you unzipped
- the VirusScan files.
-
- 6. Choose OK.
-
- ------------------------------------------------------------------------
-
- About Macro viruses...
-
- Included in this ZIP file is a self-extracting archive, MVTOOL10.EXE,
- being distributed by Microsoft. It is a way to protect yourself against
- the Concept virus, as well as to warn you against document files that
- contain macros without your knowledge.
-
- To make use of it, execute the program:
-
- MVTOOL10.EXE 40732 bytes
-
- It will create these files:
-
- README.DOC 36864 10-02-95 1:08p
- SCANPROT.DOT 49152 10-02-95 3:44p
-
- Enter Word and read the README.DOC to see if the package is suitable
- for your environment.
-
- ------------------------------------------------------
- Detectors added or updated in the 9510 DAT file (227):
- _1917
- 3APA3A-B
- 3NOP
- ACHE.1007
- ACID.674
- ADIN.3026:TPE 1.4
- AMAZON.468
- AMAZON.479
- AMAZON.500
- ANTIPODE.1087
- AP.F
- AP.H
- AP.NIGHTCITY
- APOCALYPSE.1685
- APPARITION
- ARETHREE
- ASSASSIN.952
- AUSTRALIAN PARASITE.254
- AUSTRALIAN PARASITE.279.A
- AUSTRALIAN PARASITE.279.B
- AUSTRALIAN PARASITE.284
- AUSTRALIAN PARASITE.320
- AUSTRALIAN PARASITE.550
- AUSTRALIAN PARASITE.1014
- AVALANCHE.2831
- BANE.256
- BARROTES.1463
- BLAVA
- BUA.2263 - GENERATION 1
- BUG.1497
- BW.311
- BYWAY.B
- CASCADE.ENIGMA
- CAUSTIC
- CECE.1998
- CLM.1528
- COLORS
- CORPLIFE
- COWABUNGA
- CREPATE.1944
- DARKELF
- DRET.1710.B
- DRET.1710.C
- DRUID
- EM.1303
- EQUUS
- EXEHEADER.440
- FATHER_MAC.303
- FATHER_MAC.789
- FATHER_MAC.836
- FATHER_MAC.1360
- FAX FREE.1536
- FAX FREE.1536.NEW.A
- FAX FREE.1536.NEW.C
- FITW (MBR)
- FIVE_EIGHTS.609
- FOETUS
- FURTIVE.1901
- GELIYOR
- GINGER.445
- GODZILLA
- HAPPYBOX
- HNYSLOV
- HWF
- IMI.2304
- IMMIGRANT
- INFECT.736
- INTR.1336
- INTR.1353
- INT_AA
- IQ
- IVP.2
- IVP.365
- JAK.991
- JERUSALEM.2267
- JOHN
- JUDGE
- KA.863
- KELA.1171
- KHIZHNJAK.306
- KHIZHNJAK.509
- KHIZHNJAK.515
- KHIZHNJAK.565
- KHIZHNJAK.1011
- KINGSIZE
- LADY.873
- LENNON
- LIMPIA
- LOVECHILD_B3
- MAC.2803.B
- MAC.2824.B
- MACEDONIA
- MAG.239
- MAG.254
- MARAUDER.855
- MARBAS
- MARKY
- MATERIAL
- MIKE.252
- MIKE.256
- MIRAGE.1322
- MISS_D
- MORRISON
- NATAS.4740
- NATAS.4744
- NATAS.4746
- NATAS.4774
- NATAS.4988
- NEITHER
- NEO-TRIVAL
- NEW_MODEL
- NOVEMBER_17TH.522
- NPOX.1726
- NUCLEAR
- NYGUS.278
- OIL.579
- PANIC
- PENDULE.1066
- PETER_II.RUNTIME
- PF
- PM.733
- PMBS
- PMT.867
- POLO.812
- PS-MPC.1054
- PS-MPC.1500
- PS-MPC.MUTAGEN
- PSYCHOSIS.1195
- PURE.439
- PVW.1063
- QUARK
- QUAVER
- QUOD
- RAJA.518.B
- RAJA.871
- RATBOY.671
- RM
- RUBB.1018
- RUSSIAN TINY.352
- RUSSIAN TINY.972
- SANDRA.1356
- SCREAMING_FIST.839
- SCREAMING_FIST.846
- SELECT.1112
- SELECT.1258
- SENECA
- SHADOW.1200
- SHINEAWAY
- SIDEWINDER.B
- SILLYC.101
- SILLYC.122
- SILLYC.124
- SILLYC.144
- SILLYC.155
- SILLYC.166
- SILLYC.169
- SILLYC.190.A
- SILLYC.190.B
- SILLYC.264
- SILLYC.281
- SILLYC.292
- SILLYC.302
- SILLYC.331
- SILLYC.343
- SILLYC.468
- SILLYC.498
- SILLYC.511
- SILLYC.563
- SILLYC.626
- SILLYC.657
- SILLYCER.266
- SILLYCR.122
- SILLYCR.357
- SIR.975
- SIR.1070
- SKATER.819
- SKIS-AD1
- SMALL_COMP.101
- SOCKS
- SOFIA-TERM.1369
- STERCULIUS.428
- STONED.EMPIRE.CANADIAN
- STONED.LZR
- STONED.WXYZ.B
- SVETA.309
- TAI-PAN.438.C
- TERRA'X
- THEW.1448
- TINY.245
- TISO.846
- TRIVIAL.50.B
- TRIVIAL.84
- UNASHAMED
- UNHANDLE
- UNKNOWN1.0
- UNKNOWN1.1
- VAMPIRO.A
- VARIABLE WORM.913
- VERB
- VICE.01.FIRECIDE
- VICE.01.SAMPLE
- VICE.02.ICEBURN.689
- VICE.02.ICEMELT.676
- VICE.03.ONE13TH
- VICE.05.CODE.4722.A
- VICE.05.CODE.4722.B
- VIENNA.VIOLATOR.969
- VKIT (WIN EXE)
- VLAD.651
- VLAD.655
- VLAD.692
- VLAD.696
- VLAD.2042
- WALLY
- WEIZEN.467
- WEIZEN.471
- WILDTIMES.555
- X-BOOT
- XIV.2248
- XUXA.1096
- XUXA.1656
- YAM.680
- YANKEE DOODLE.2167
- ZAP.1121
- ZED
- ZEUS
- ZUZANA
-
- ----------------------------------------------------
- Removers added or updated in the 9510 DAT file (38):
- _1917
- 3NOP
- BARROTES.1463
- BLOODWAR
- CINDERELLA
- DRET.1710.B
- DRET.1710.C
- FICHV.2_1
- FOETUS
- FURTIVE.1901
- GINGER.445
- GOLD BUG
- HAPPYBOX
- HASITA
- ICELANDIC.2706
- INT_AA
- INVADER (MBR)
- LENNON
- LIMPIA
- LITTLE_RED.A
- NATAS.4740
- NATAS.4744
- NATAS.4746
- NATAS.4774
- NATAS.4988
- NATAS.4988 (MBR)
- PETER_II.RUNTIME
- QUARK
- SMALL_COMP.101
- STONED.WXYC
- SVC.2936.C
- TAI-PAN.438.C
- TELECOM.BOOT
- TERRA'X
- UNASHAMED
- VAMPIRO.A
- VICE.05.CODE.4722.A
- VICE.05.CODE.4722.B
-
- -----------------------
- False Alarms fixed:
- PREDITOR.II.C
- SMEG virus or variant
- TRACEBACK.3066.A GENERATION - 1
- VIROGEN.1294
- X-1B
-
- ----------------------------------------------------
- Top active viruses other than those presented above:
- AntiCmos (alias: Lixi)
- Byway (alias: Dir2.Byway) (*)
- Concept
- Da'Boys (**)
- Junkie
- MonkeyA
- MonkeyB
- Natas
- NYB (alias: B1)
- Ripper
- Sampo
- V-Sign (alias: Cansu)
- WelcomB (alias: BuptBoot)
-
- (*) Effective 9508, we adopted the CARO name of Byway. To remove
- this virus, boot up with the virus in memory. Copy all executable
- files to floppy, with a non-executable extension. Copy all the data
- files off. Format harddisk. Replace files.
-
- (**) To remove Da'Boys from a hard disk infection, one needs to
- boot from a clean corresponding DOS version and execute the
- command "SYS C:".
-