home *** CD-ROM | disk | FTP | other *** search
- What's New in VirusScan for DOS v2.5.2 (9609)
- Copyright 1994-1996 by McAfee, Inc.
- All Rights Reserved.
-
-
- Thank you for using McAfee's VirusScan for DOS.
- This What's New file contains important information
- regarding the current version of this product.
- It is highly recommended that you read the
- entire document.
-
- McAfee welcomes your comments and suggestions.
- Please use the information provided in this file
- to contact us.
-
- ___________________
- WHAT'S IN THIS FILE
-
- - New Features
- - Known Issues
- - Installation
- - Documentation
- - Frequently Asked Questions
- - Contact McAfee
-
- ____________
- NEW FEATURES
-
- * ENHANCEMENTS *
-
- 1. VirusScan is now able to decrypt execute-only macros.
- As a result, macro viruses that are distributed in
- source form and recompiled can be detected.
-
- 2. More polymorphic detectors have been added and
- polymorphic detection has been refined.
-
- 3. VirusScan 2.5.2 includes increased detection capability
- for finding viruses in memory.
-
- 4. VirusScan 2.5.2 provides more information about sporatic
- false identification.
-
-
- * NEW VIRUSES DETECTED *
-
- This DAT file (9609) detects the following 68 new viruses.
- In addition, locations that have experienced problems with
- a particular virus are identified.
-
- _1194 Spain
- ACCOUNT.AVENGER.873
- ALLIANCE
- ARCV.255
- ARCV.679
- ARCV.745
- ASH.743
- BEDA.1530
- BEER.2620
- BEER.3164.B
- BEER.3192.B
- BIRTHDAY:DE (*) Germany
- BLEAH
- BUERO:DE Germany
- BW-525
- CASTELLO.3742 Spain
- CHEGUEVA Spain
- COMPBACK.3783
- CORDOBES.3334 Spain
- DEI.8772
- DEI.DR.8772
- DELWIN.1199
- DIETZEL:DE (*)
- DODGER
- HASSLE
- HASTA.884
- HLLP.NAZI.5984
- IVP.665
- JERUSALEM.BUPT.1220
- JERUSALEM.BUPT.1279
- JERUSALEM.BUPT.1367
- KABOUT.1804 (*)
- KARNAVALI.1972 Europe
- KDG
- KITTY
- LAMEGO.729 Portugal
- LIBERTY.2857.D
- LITTLEPEST.4243 (*)
- MANNEQUIN
- MANZON.1404 Europe
- MENDOZA.3380 Spain
- MSU.297
- NECROS.1164.A
- NECROS.1164.B
- PHALCON.1117
- PINDONGA.B
- PS-MPC.578.C
- PS-MPC.611.J
- PS-MPC.753
- PS-MPC.AOS
- PULCE.1840
- RADYUM.509
- RAHACK.936 Netherlands
- RDA FIGHTER.5871
- RIOT.ETERNITY.565
- SALMAN.2000 US
- SATRIA.RZ Europe
- SCREAMING_FIST.652
- SCREAMING_FIST.709
- SIRIUS.ALIVE.4608
- TANPRO.749
- TEQUILA.2468
- TURNER.3276
- TV
- V3.1765
- VACSINA.1206.A
- VERWOLF
- VICTOR.2442.A
- (*) Requires DOS/Win 2.5.2 engine
-
-
- * NEW VIRUSES REMOVED *
-
- This DAT file (9609) removes the following 38 new viruses.
- In addition, locations that have experienced problems with
- a particular virus are identified.
-
- _1194 Spain
- ACCOUNT.AVENGER.873
- ALLIANCE England
- ARCV.255
- ARCV.657
- ARCV.679
- ARCV.745
- ASH.743
- BIRTHDAY:DE (*) Germany
- BLEAH
- BUERO:DE Germany
- CHEGUEVA Spain
- COMPBACK.3783
- CORDOBES.3334 Spain
- DEI.8772
- DEI.DR.8772
- DIETZEL:DE (*)
- HASSLE
- HASTA.884
- HLLP.NAZI.5984
- IVP.665
- LAMEGO.729 Portugal
- LITTLE_BROTHER Germany
- NO_FRILL.835 Australia
- PS-MPC.611.J
- PS-MPC.753
- RAHACK.936 Netherlands
- SALMAN.2000 US
- SATRIA.RZ Europe
- SCREAMING_FIST.652
- SHELL.10634 Internet
- TANPRO.524
- TANPRO.749
- TEQUILA.2468
- TV
- V3.1765
- VICTOR.2442.A
- ZYX Europe
- (*) Requires DOS/Win 2.5.2 engine
-
- ____________
- KNOWN ISSUES
-
- When a macro virus is detected in conjuction with
- other viruses, the macro virus remover will not work.
- If this occurs, remove the other virus first or work
- in a separate area.
-
- ____________
- INSTALLATION
-
- * INSTALLING THE PRODUCT *
-
- Perform one of the following installation procedures
- depending on which version of VirusScan for DOS you
- want to install.
-
- 1. For the installable version of VirusScan for DOS,
- take the following steps:
-
- a. Execute the INSTALL.BAT program.
- b. Follow the on-screen instructions.
-
- By default, McAfee's installation program makes
- a directory on the hard disk drive named
- C:\MCAFEE\VIRUSCAN and copies the program files
- to that directory.
-
- The installation script adds the directory
- to the path statement in your AUTOEXEC.BAT file
- and adds two lines that call and recall the
- VShield program to provide on-access virus
- prevention. For the most complete virus protection,
- McAfee recommends using the /ANYACCESS switch.
-
- or
-
- 2. For the non-installable version of VirusScan for
- DOS, take the following steps:
-
- a. Make a directory on your hard disk drive.
- b. Copy the files to that directory.
- c. Add that directory to the path statement in
- your AUTOEXEC.BAT file.
-
- If you would like to perform a "silent" installation
- of VirusScan for DOS, requiring no user interaction
- and using all default settings, add -s (i.e. SETUP.EXE -s)
- to the setup command when you install the product.
-
- * PRIMARY PROGRAM FILES FOR VIRUSSCAN FOR DOS *
-
- Files located in the Install directory:
- =======================================
-
- SCAN.EXE = VirusScan for DOS program
- README.1ST = McAfee information
- PACKING.LST = Packing list
- VALIDATE.EXE = Authenticity validation program
- SCAN.DAT = Virus scan definition data
- NAMES.DAT = Virus names definition data
- CLEAN.DAT = Virus clean definition data
- WHATSNEW.TXT = What's New document
- AGENTS.TXT = McAfee Authorized Agents
-
-
- * TESTING YOUR INSTALLATION *
-
- The Eicar Standard AntiVirus Test File is a combined effort
- by anti-virus vendors throughout the world to come up
- with one standard by which customers can verify their
- anti-virus installations.
-
- To test your installation, copy the following line into its
- own file and name it EICAR.COM.
-
- X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
-
- When done, you will have a 69- or 70-byte file.
-
- When VirusScan is applied to this file, SCAN will report
- finding the EICAR-STANDARD-AV-TEST-FILE virus.
-
- It is important to know that THIS IS NOT A VIRUS. However,
- users often have the need to test that their installations
- function correctly. The anti-virus industry, through the
- European Institute for Computer Antivirus Research, has
- adopted this standard to facilitate this need.
-
- Please delete the file when installation testing is
- completed so unsuspecting users are not unnecessarily
- alarmed.
-
-
- * UNINSTALLING THE PRODUCT *
-
- 1. Execute VSHIELD/REMOVE to remove VShield from
- memory, then remove the files from your hard
- drive and remove any lines in your AUTOEXEC.BAT
- file that call VShield. If an error message is
- displayed indicating that VShield could not be
- removed from memory, take the following step.
-
- 2. Edit your AUTOEXEC.BAT file and remove the line
- that calls VShield, then reboot your system. On
- restarting your system, VShield will not be loaded
- into memory and you can remove the files from your
- hard drive.
-
- Note: If the files are removed from your hard drive
- prior to removing VShield from memory, an error
- message will be displayed until you remove
- VShield from memory or restart your system.
-
- _____________
- DOCUMENTATION
-
- For more information, refer to the VirusScan User's Guide,
- included on the CD-ROM versions of this program or
- available from McAfee's BBS and FTP site. This file is
- in Adobe Acrobat Portable Document Format (.PDF) and can
- be viewed using Adobe Acrobat Reader. This form of
- electronic documentation includes hypertext links and
- easy navigation to assist you in finding answers to
- questions about your McAfee product.
-
- Adobe Acrobat Reader is available on CD-ROM in the ACROREAD
- subdirectory. Adobe Acrobat Reader also can be downloaded
- from the World Wide Web at:
-
- http://www.adobe.com/Acrobat/readstep.html
-
- VirusScan documentation can be downloaded from McAfee's BBS
- or the World Wide Web at:
-
- http://www.McAfee.com or http://205.227.129.97
-
- For more information on viruses and virus prevention,
- see the McAfee Virus Information Library, included on the
- CD-ROM version of this product or available from McAfee's
- BBS and FTP site. A ViaGrafix Interactive Anti-virus
- Training program also is available on the CD-ROM version,
- or can be purchased from the McAfee Web Site.
-
- __________________________
- FREQUENTLY ASKED QUESTIONS
-
- Regularly updated lists of frequently asked questions
- about McAfee products also are available on McAfee's
- BBS, website, and CompuServe and AOL forums.
-
- Q: How much conventional memory is required to run
- VirusScan for DOS?
-
- A: A minimum of 490K of free coventional memory is
- recommended to run VirusScan for DOS.
-
-
- Q: What is the difference between the VShield DOS TSR
- and VirusScan for DOS?
-
- A: #1 VShield installs itself in memory and stays
- resident in order to monitor your system for
- viral activity. If an infected program is
- executed or an infected boot sector is accessed,
- VShield will display a warning that a virus
- is present.
-
- A: #2 VirusScan for DOS is an on-demand scanner that
- allows you to perform a complete or partial
- scan of your computer at any time. VirusScan
- for DOS can run customized scans through a
- large set of command line switches.
-
-
- Q: How can I run VirusScan for DOS from a Netware login
- script without running out of memory?
-
- A: If you are having memory problems when trying to
- run VirusScan for DOS from a NetWare login script,
- take these steps to resolve the issue:
-
- 1. Rename LOGIN.EXE to LOGIN1.EXE and remove
- any references to VirusScan.
- 2. Create a batch file named LOGIN.BAT.
- 3. On the first line of the batch file, run your
- scan with whatever switches you want to include.
- 4. On the second line of the batch file, run
- LOGIN1.EXE.
-
- By taking these steps, you eliminate the problem
- of having LOGIN.EXE and SCAN.EXE in memory at the
- same time. This allows VirusScan for DOS to run and
- your login script to be processed without problems.
-
-
- Q: Can I clean the Master Boot Record (MBR) of a
- Windows NT file system (NTFS) formatted hard drive?
-
- A: Yes. Take these steps to clean the MBR. Boot the
- Windows NT computer from a virus-free DOS bootable
- (system) diskette. Then run VirusScan for DOS;
- SCAN C: /BOOT /CLEAN. This will clean the NTFS
- Master Boot Sector and allow Windows NT to
- successfully reboot from the hard disk drive.
- However, VirusScan for DOS will not be able to read
- the rest of the NTFS partition.
-
- After starting Windows NT, execute VirusScan for
- Windows NT to detect and clean Windows NT file
- infections.
-
-
- Q: Can I update VirusScan's data files to detect
- new viruses?
-
- A: Yes. If your data files are dangerously out-of-date,
- VirusScan for DOS will prompt you to update them.
- If you have Internet access, you can download
- updated VirusScan data files from the McAfee Web
- Site, BBS, or other online resources. To download
- from the McAfee Web Site, follow these steps:
-
- 1. Go to the McAfee Web Site (http://www.mcafee.com
- or http://205.227.129.97).
-
- 2. Click on the Download McAfee button in the upper
- left hand column or frame.
-
- 3. Click Get that DAT! to update DAT files.
-
- 4. View the information provided on new DAT files
- and downloading.
-
- 5. Click on Download this Month's DAT.
-
- 6. Data file updates are stored in a compressed form
- to reduce transmission time. Unzip the files into
- a temporary directory, then copy the files to the
- appropriate directory, replacing your old files.
-
- 7. Before performing any scans, shut down your
- computer, wait a few seconds, and turn it on again.
-
- If you need additional assistance with downloading,
- contact McAfee Download Support at (408) 988-3832.
-
- ______________
- CONTACT McAFEE
-
- * FOR QUESTIONS, ORDERS, PROBLEMS, or COMMENTS *
-
- Contact McAfee's Customer Care department:
-
- 1. Call (408) 988-3832
- Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time
-
- 2. Fax (408) 970-9727
- 24-hour, Group III Fax
-
- 3. Fax-back automated response system (408) 988-3034
- 24-hour fax
-
- Send correspondence to any of the following McAfee locations:
-
- McAfee Corporate Headquarters
- 2710 Walsh Avenue
- Santa Clara, CA 95051-0963
-
- McAfee East Coast Office
- Jerral West Center
- 766 Shrewsbury Avenue
- Tinton Falls, NJ 07724-3298
-
- McAfee Central Office
- 5944 Luther Lane, Suite 117
- Dallas, TX 75225
-
- McAfee Canada
- 178 Main Street
- Unionville, Ontario
- Canada L2R 2G9
-
- McAfee Europe B.V.
- Orlyplein 81 - Busitel 1
- 1043 DS Amsterdam
- The Netherlands
-
- McAfee (UK) Ltd.
- Hayley House, London Road
- Bracknell, Berkshire RG12 2th
- United Kingdom
-
- McAfee France S.A.
- 50 rue de Londres
- 75008 Paris
- France
-
- McAfee Deutschland GmbH
- Industriestrasse 1
- D-82110 Germering
- Germany
-
- Or, you can receive online assistance through any
- of the following resources:
-
- 1. Bulletin Board System: (408) 988-4004
- 24-hour US Robotics HST DS
-
- 2. Internet e-mail: support@mcafee.com
-
- 3. Internet FTP: ftp.mcafee.com or 205.227.129.134
-
- 4. World Wide Web: http://www.mcafee.com
- or http://205.227.129.97
-
- 5. America Online: keyword MCAFEE
-
- 6. CompuServe: GO MCAFEE
-
- 7. The Microsoft Network: GO MCAFEE
-
- Before contacting McAfee, please make note of the following
- information. When sending correspondence, please include
- the same details.
-
- - Program name and version number
- - Type and brand of your computer, hard drive, and any
- peripherals
- - Operating system type and version
- - Network name, operating system, and version
- - Contents of your AUTOEXEC.BAT, CONFIG.SYS, and
- system LOGIN script
- - Microsoft service pack, where applicable
- - Network card installed, where applicable
- - Modem manufacturer, model, and baud, where
- applicable
- - Relevant browsers/applications and version number,
- where applicable
-
- - Problem
- - Specific scenario where problem occurs
- - Conditions required to reproduce problem
- - Statement of whether problem is reproducible on demand
-
- - Your contact information: voice, fax, and e-mail
-
- Other general feedback is also appreciated.
-
-
- * FOR ON-SITE TRAINING INFORMATION *
-
- Contact McAfee Customer Service (800) 338-8754.
-
-
- * FOR PRODUCT UPGRADES *
-
- To make it easier for you to receive and use McAfee's
- products, we have established an Agents program to
- provide service, sales, and support for our products
- worldwide. For a listing of agents, see the file
- AGENTS.TXT, where applicable, or contact McAfee
- Customer Service for agents near you.
-