PC World 1998 December/PCWorld_1998-12_cd.bin/software/Antiviry/MCAF/WHATSNEW.TXT

Text File | 1998-10-14 | 17KB | 669 lines

    What's New in the Network Associates 3110 .DAT Files
    Copyright (c) 1992-1998 by Network Associates, Inc.,
     and its Affiliated Companies. All Rights Reserved.



Thank you for using Network Associates products. This
What's New file contains important information regarding
the current data (.DAT) files. Network Associates strongly
recommends that you read the entire document.

Network Associates welcomes your comments and suggestions.
Please use the information provided in this file to contact
Customer Care or technical support.

___________________
WHAT'S IN THIS FILE

- What are .DAT files?
- New Features
- Known Issues
- Installation
- Additional Information
- Contacting Network Associates

____________________
WHAT ARE .DAT FILES?

DAT files contain up-to-date virus signatures and other
information that Network Associates anti-virus products use
to protect your computer against the thousands of computer
viruses in circulation. New .DAT files are released monthly
to provide protection against the 100 to 300 new viruses
that appear each month. To ensure that you are protected
against the latest virus threats, download and install the
latest .DAT files every month.

____________
NEW FEATURES

* NEW VIRUSES DETECTED *

The 3110 .DAT files are compatible with Network Associates
anti-virus products that use v3.x scan engines only.
Network Associates recommends that for optimal detection you
use these .DAT files with v3.2.0 or later scan engines.
These .DAT files are NOT compatible with McAfee v2.x or with
McAfee v4.x scan engines.

The 3110 .DAT files detect these 56 new viruses:

AETA.5315
BLASHYRKH.A
BLASHYRKH.B
CARTMAN.E
CARTMAN.F
CERBUS
CLASS.A
CLASS.B
CLASS.E
CLASS.F
DELMACRO.A
DMV.M
FHD.A
GROOV.B
GROOV.C
HLLP.CREED.5209
HLLT.5228
INQUISITOR
JEDI.C
NETBUS.153
NICEDAY.X
NONO.A
NOP.L
NOTTICE.B
NOTTICE.NEW3
STEROID.D
TROJECTOR
TROJECTOR.1463
TROJECTOR.1561
TWNO.AO
W32/CHEVAL.TCV
WAZZU.DS
WAZZU.NEW2
WAZZU.DT
WAZZU.DY
WAZZU.NEWVAR1
WIN95/DARKSIDE
XM/LAROUX.AE
XM/LAROUX.EI
XM/LAROUX.EJ
XM/LAROUX.EK
XM/LAROUX.EO
XM/LAROUX.EP
XM/LAROUX.EW
XM/LAROUX.NEW13
XM/LAROUX.NEW14
XM/LAROUX.NEW15
XM/LAROUX.NEW16
XM/LAROUX.NEW17
XM/LAROUX.NEWVAR10
XM/LAROUX.NEWVAR11
XM/LAROUX.NEWVAR12
XM/TABEJ.A
XM/TABEJ.B
XM/TABEJ.C
ZOMBIE

* NEW VIRUSES REMOVED *

The 3110 .DAT files remove the 49 new viruses shown in the
list below. Network Associates software removes a virus
either by removing the infecting virus code from files or
by removing the file from your computer.

BLASHYRKH.B
CARTMAN.E
CARTMAN.F
CLASS.A
CLASS.B
CLASS.E
CLASS.F
DELMACRO.A
DMV.M
FHD.A
GROOV.B
GROOV.C
INQUISITOR
JEDI.C
NETBUS.153
NICEDAY.X
NONO.A
NOP.L
NOTTICE.B
NOTTICE.NEW3
STEROID.D
TROJECTOR.1463
TROJECTOR.1561
W32/CHEVAL.TCV
WAZZU.DS
WAZZU.NEW2
WAZZU.DT
WAZZU.DY
WAZZU.NEWVAR1
WIN95/DARKSIDE
XM/LAROUX.AE
XM/LAROUX.EI
XM/LAROUX.EJ
XM/LAROUX.EK
XM/LAROUX.EO
XM/LAROUX.EP
XM/LAROUX.EW
XM/LAROUX.NEW13
XM/LAROUX.NEW14
XM/LAROUX.NEW15
XM/LAROUX.NEW16
XM/LAROUX.NEW17
XM/LAROUX.NEWVAR10
XM/LAROUX.NEWVAR11
XM/LAROUX.NEWVAR12
XM/TABEJ.A
XM/TABEJ.B
XM/TABEJ.C
ZOMBIE

The INTERNET.DAT component of the 3110 .DAT files
enables McAfee VirusScan v4.x for Windows 95 and Windows
98, McAfee WebScanX, and WebShieldX Proxy to detect
these 130 hostile Java classes:

ALLTARGETS.CLASS
ANIMATIONSOURCE.CLASS
ANIMATIONSOURCEAPPLET.CLASS
APPLETKILLER.CLASS
APPSTATUS.CLASS
ARCTEST.CLASS
ASSASSIN.CLASS
ATTACKER.CLASS
ATTACKTH.CLASS
AUDIOKILLER.CLASS
BANKINSPECT.CLASS
BARAPPLET.CLASS
BEGINNER.CLASS
BLINK.CLASS
BLUESCREEN.CLASS
BUMCHANGE.CLASS
CALCULAT.CLASS
CHANGEBANK.CLASS
CHART.CLASS
CHATOUREXPRESS.CLASS
CLIENT.CLASS
CONSUME.CLASS
CRASHCOM405.CLASS
DELETEFILE.CLASS
DGCLOCK.CLASS
DISKHOG.CLASS
DOMYWORK.CLASS
DOUBLETROUBLE.CLASS
DUPE.CLASS
DYNAPPLET.CLASS
EI.CLASS
ERRORMES.CLASS
EXAMPLE0.CLASS
EXECTEST.CLASS
EXITTEST.CLASS
FILEINFO.CLASS
FIXJAVA.CLASS
FORGER.CLASS
FRACTION.CLASS
FTPUSERSAPPLET.CLASS
GEN.CLASS
GENFRACTION.CLASS
GETAPPLETCL.CLASS
GRAPH.CLASS
HIJACKER.CLASS
HOSECOM404.CLASS
HOSEMOCH.CLASS
HOSTILETHREADS.CLASS
HUGOBANE1.CLASS
HUGOBANE3.CLASS
HUGOBANE5.CLASS
IMAGEBANK.CLASS
INSPECTCLIENT3.CLASS
INSPECTSERVERTHREAD.CLASS
IRRITANT.CLASS
JAVAMAIL.CLASS
JFSAPPLET.CLASS
JLPR.CLASS
JMUSH.CLASS
LETTERBOARD.CLASS
LETTERBUTTON.CLASS
LIFEGAME.CLASS
LOADLIBRARY.CLASS
LOGIN.CLASS
LOGINSER.CLASS
MANDELTEST.CLASS
MOUSECHASE.CLASS
MOUSECHASEEXCEPTION.CLASS
MUTATOR.CLASS
MYTIMER.CLASS
NERVOUSI.CLASS
NETSCOPE.CLASS
NEWLOADER.CLASS
NOISYBEAR.CLASS
OWNNET.CLASS
PENPAL.CLASS
PORT25.CLASS
PUBLICEN.CLASS
READFILE.CLASS
REPLACEPROPERTIESFILE.CLASS
REPORT.CLASS
REPORTSERVERSOCKET.CLASS
RM.CLASS
SCANALYZER.CLASS
SCAPEGOAT.CLASS
SEETHEWEB.CLASS
SELLDRUGS.CLASS
SENDMAILAPPLET.CLASS
SENDTEST.CLASS
SEXY.CLASS
SHORTCUT.CLASS
SHOWBASICREADS.CLASS
SILENTTH.CLASS
SIMPLETEXT.CLASS
SLOWERKILLER.CLASS
SOLARVENGEANCERT.CLASS
STARFIELD3.CLASS
STARSMEN.CLASS
STEALSTUFF.CLASS
STRANGEBREW.CLASS
TARGET.CLASS
TELESCRIVENTE.CLASS
TELNET.CLASS
TELNETGUI.CLASS
TELNETGUI2.CLASS
THREADKILLER.CLASS
TICKERTAPE.CLASS
TICKET.CLASS
TICKETHOLDER.CLASS
TICKETREADER.CLASS
TOURGUIDE.CLASS
TRALLALA.CLASS
TRIPLEFRAME.CLASS
TRIPLETHREAT.CLASS
TRIPLETHREAT2.CLASS
TUMBLEITEM.CLASS
TUMBLINTEXT.CLASS
TURNTRICKS.CLASS
UNGRATEFUL.CLASS
UNPLUGGED.CLASS
VALUEBOX.CLASS
VIRUS.CLASS
WASTEFUL.CLASS
WEBMAILER.CLASS
WIDGET.CLASS
WORDMANAGER.CLASS
WORDMEISTER.CLASS
WRITEFILE.CLASS
XYZAPP.CLASS
ZEALAND.CLASS


The INTERNET.DAT component of the 3110 .DAT files enables
McAfee VirusScan 4.x for Windows 95 and Windows 98, WebScanX,
and WebShieldX Proxy to detect these six hostile ActiveX
controls:

EXPLODER.OCX
NETLIST.CAB
NETLIST.OCX
RUNNER.OCX
SLINGSHOT.CAB
SLINGSHOT1.CAB

____________
KNOWN ISSUES

1.  If you have already used VirusScan v3.x for
    Windows 3.1x to detect a virus or clean an infected
    file, you might not be able to load the Virus List
    into memory. Viewing the Virus List more than once
    might also cause your system to run out of memory.

2.  Because of memory limitations, these .DAT file versions
    will not work with VirusScan for DOS v3.0.0 or v3.0.1.
    Network Associates recommends that you upgrade your
    copy of VirusScan for DOS to the current version.

3.  If you have more than 20 viruses on your system, VirusScan
    v3.1.0 for Windows 3.1x might display the error message
    "Unable to allocate memory" during a scan operation.
    Network Associates recommends that you upgrade your
    VirusScan copy to the current version in order to avoid
    this issue.

____________
INSTALLATION

* INSTALLING THE PRODUCT *

DAT file updates are stored in a compressed format to reduce
transmission time. To install your update, create a
temporary directory and copy the downloaded file to the
directory. Unzip the files, then copy them to the
appropriate permanent directories, replacing your existing
files.

* PRIMARY PROGRAM FILES FOR VIRUS DEFINITIONS *

Files located in the Install directory:
=======================================

       CLEAN.DAT = Data file for virus cleaning
    POLYSCAN.DAT = Data file for advanced polymorphic virus
                   detection
       NAMES.DAT = Data file for virus names
        SCAN.DAT = Data file for virus scanning
    INTERNET.DAT = Data file to detect hostile Java/ActiveX
                   objects

* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined
effort by anti-virus vendors throughout the world to
implement one standard by which customers can verify
their anti-virus installations.

To test your installation, copy the following line
into its own file, then save the file with the name
EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

The file size will be 69 or 70 bytes.

Next, start VirusScan and allow it to scan the
directory that contains EICAR.COM. When VirusScan
scans this file, it will report finding the
EICAR-STANDARD-AV-TEST-FILE virus.

Note that this file is NOT A VIRUS. Delete the file
when you have finished testing your installation to
avoid alarming unsuspecting users.

______________________
ADDITIONAL INFORMATION

Macro viruses are named using this standard:

The first of a family is given "name.A". For each
subsequently discovered variant, the suffix letters
progress until .Z is reached. The next is given .AA
until .AZ is reached. The next is given .BA, etc.
until .ZZ is reached. The next would then be given
.AAA and so on.

A macro virus name without a variant notation refers
to all variants of that virus.

_____________________________
CONTACTING NETWORK ASSOCIATES

On December 1, 1997, McAfee Associates merged with
Network General Corporation, Pretty Good Privacy, Inc.,
and Helix Software, Inc. to form Network Associates, Inc.
You may direct all questions, comments and technical
support requests to the Network Associates Customer Care
department at any of the addresses or phone numbers
listed below.

Contact the Network Associates Customer Care
department at:

1.  Phone [phone]
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax [phone]
    24-hour, Group III Fax

3.  Fax-back automated response system [phone]


Send correspondence to any of the following Network
Associates locations:

     Network Associates Corporate Headquarters
     3965 Freedom Circle
     McCandless Towers
     Santa Clara, CA 95054

     Phone numbers for corporate-licensed customers:
     Phone: [phone]
     Fax:   [phone]

     Phone numbers for retail-licensed customers:
     Phone: [phone]
     Fax:   [phone]

Network Associates offices outside the United States:

     NA Network Associates Oy
     Kielotie 14 B
     01300 Vantaa
     FINLAND
     Phone: [phone]
     Fax:   [phone]

     Network Associates AG
     Baeulerwisenstrasse 3
     8152 Glattbrugg
     Switzerland
     Phone: [phone]
     Fax:   [phone]

     Network Associates Australia
     Level 1, 500 Pacific Highway
     St. Leonards, NSW 2065
     Phone: [phone]
     Fax:   [phone]

     Network Associates Austria
     Pulvermuehlstrasse 17
     Linz
     Postal Code A-4040
     Phone: [phone]
     Fax:   [phone]

     Network Associates Brasil
     Rua Geraldo Flausino Gomez 78
     Cj. - 51 Brooklin Novo - Sπo Paulo
     SP - 04575-060 - Brasil
     Phone:  [phone]
     Fax:    [phone]

     Network Associates Canada
     139 Main Street, Suite 201
     Unionville, Ontario
     Canada L3R 2G6
     Phone: [phone]
     Fax:   [phone]

     Network Associates China
     Office Tower Room 1557,
     New Century Hotel,
     No. 6 Southern Road Capital Gym
     Beijing
     China 100044
     Phone: [phone]
     Fax:   [phone]

     Network Associates Deutschland GmbH
     Industriestrasse 1
     D-82110 Germering
     Germany
     Phone: [phone]
     Fax:   [phone]

     Network Associates International B.V.
     Gatwickstraat 25
     1043 GL Amsterdam
     The Netherlands
     Phone: [phone]
     Fax:   [phone]

     Network Associates France S.A.
     50 rue de Londres
     75008 Paris
     France
     Phone: [phone]
     Fax:   [phone]

     Network Associates International Ltd.
     Minton Place, Victoria Street
     Windsor, Berkshire
     SL4 1EG
     United Kingdom
     Phone: [phone]
     Fax:   [phone]

     Network Associates Japan, Inc.
     Toranomon 33 Mori Bldg.
     3-8-21 Toranomon
     Minato-ku, Tokyo 105-0001
     Japan
     Phone: [phone]
     Fax:   [phone]

     Network Associates Korea
     135-090, 18th Floor, Kyoung-Am Bldg.
     157-27 Samsung-Dong, Kangnam-Ku
     Seoul, Korea
     Phone: [phone]
     Fax:   [phone]

     Network Associates Latin America
     150 South Pine Island Road, Suite 205
     Plantation, Florida 33324
     Phone: [phone]
     Fax:   [phone]

     Network Associates de Mexico
     Andres Bello No. 10, 4 Piso
     4th Floor
     Col. Polanco
     Mexico City, Mexico D.F. 11560
     Phone: [phone]
     Fax:   [phone]

     Network Associates Portugal
     Rua Gen. Ferreira Martins, 10-6░c
     1495 ALG╔S PORTUGAL
     Phone:  [phone]
     Fax:    [phone]

     Network Associates South East Asia
     7 Temasek Boulevard
     The Penthouse
     #44-01, Suntec Tower One
     Singapore 038987
     Phone: [phone]
     Fax:   [phone]

     Network Associates Spain
     Serrano 240, Plta. -1
     28016 Madrid SPAIN
     Phone: [phone]
     Fax:   [phone]

     Network Associates Srl
     Centro Direzionale Summit
     Palazzo D/1
     Via Brescia, 28
     20063 - Cernusco sul Naviglio (MI)
     ITALY
     Phone: [phone]
     Fax:   [phone]

     Net Tools Network Associates South Africa
     Bardev House, St. Andrews
     Meadowbrook Lane
     Epson Downs, P.O. Box 7062
     Bryanston
     Johannesburg
     South Africa 2021
     Phone: [phone]
     Fax:   [phone]

     Network Associates Sweden
     DatavΣgen 3a
     Box 596
     S - 175 26 JΣrfΣlla
     Sweden
     Phone: [phone]
     Fax:   [phone]

Or, you can receive online assistance through any
of the following resources:

 1.  Internet E-mail: [e-mail]

 2.  Internet FTP: ftp.nai.com

 3.  World Wide Web: http://support.nai.com

 4.  America Online: keyword MCAFEE

 5.  CompuServe: GO NAI

To provide the answers you need quickly and efficiently,
the Network Associates technical support staff needs
some information about your computer and your software.
Please have this information ready when you call:

 - Program name and version number
 - Computer brand and model
 - Any additional hardware or peripherals connected to
   your computer
 - Operating system type and version numbers
 - Network name, operating system, and version
 - Network card installed, where applicable
 - Modem manufacturer, model, and baud, where applicable
 - Relevant browsers or applications and their version
   numbers, where applicable
 - How to reproduce your problem: when it occurs, whether
   you can reproduce it regularly, and under what
   conditions
 - Information needed to contact you by voice, fax, or
   e-mail

We also seek and appreciate general feedback.


* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use Network
Associates products, we have established a reseller's
program to provide service, sales, and support for our
products worldwide. For a listing of resellers, see the
resellers.txt file or contact Network Associates
Customer Care for resellers near you.


* FOR REPORTING PROBLEMS *

Network Associates prides itself on delivering a
high-quality product. If you find any problems, please
take a moment to review the contents of this file. If
the problem you've encountered is documented, there is
no need to report the problem to Network Associates.

If you find any feature that does not appear to
function properly on your system, or if you believe
an application would benefit greatly from enhancement,
please contact Network Associates with your suggestions
or concerns.


* FOR ON-SITE TRAINING INFORMATION *

Contact Network Associates Customer Service at
[phone].


* NETWORK ASSOCIATES BETA SITE *

Get pre-release software, including DAT files, through
http://beta.nai.com. You will have access to Public
Beta and External Test Areas. Your feedback will make
a difference.