Sophos Anti-Virus for Windows 95/98 Release Notes ------------------------------------------------- Version 3.28 AH, December 1999 New in this version ------------------- SWEEP versions have been updated with new virus information. A list of new viruses detected by Version 3.28 can be found in "What's New", or in the READNEWS.TXT file on the SWEEP for DOS Version 3.28 Installation Disk. Please see the "Additional Information" section for details on Sophos Anti-Virus with archive handling (AH) support. Known problems -------------- 1. Accumulation of .req files InterCheck 4.x leaves multiple files with the .req extension in the root of the primary drive. In cases where Sophos Anti-Virus has been installed from a central installation directory and the COMMS directory was not specified for messaging, multiple req files can accumulate in the root of the primary drive. If you experience this problem, follow these instructions: 1 Go to the Sophos Anti-Virus central installation directory and locate the INTERCHK.CFG file. 2 Remove the line "CommsDirectory=" from the INTERCHK.CFG file. 3 Initiate a workstation update by running setup /update from the Sophos Anti-Virus central installation directory. If you are installing Sophos Anti-Virus centrally for the first time and do not specify a COMMS directory, ensure that you remove the line "CommsDirectory=" from the INTERCHK.CFG file before creating a local installation of Sophos Anti-Virus. Modifications from Version 3.27 ------------------------------- 1. Version information All SWEEP versions have been updated with new virus information. A list of new viruses detected by Version 3.28 can be found in "What's New" or in the READNEWS.TXT file on the Release CD, or in the READNEWS.TXT file on the SWEEP for DOS Version 3.28 Installation Disk. 2. Microsoft Project Microsoft Project files are now swept for viruses. The extensions "MPP" and "MPT" have been added to the list of files that Sophos Anti-Virus scans by default. To disable this feature, please refer to the "Troubleshooting" section below. 3. Sophos Anti-Virus no longer honours the action flag when disinfection is succesful. In version 3.27 Sophos Anti-Virus would honour the user request and undertake the action specified on an infected document even if it had managed to disinfect it. This behaviour has been modified so that Sophos Anti-Virus will now only undertake the action if the object could not be disinfected or if disinfection failed. Additional information ---------------------- 1. Detection of viruses within archives This version of Sophos Anti-Virus contains a re-engineered virus detection engine which includes many enhancements over the previous engine, including the ability to scan inside archive files. It can be configured via the "Scan inside archive files" option on the "Action" configuration page. Selecting this option enables scanning within the following archive types: Name: ARJ Description: a reasonably widespread archiving and compression format. File extension: .arj Used most often for: storing collections of files together in one convenient compressed file. Most commonly used on Windows systems. Name: CMZ Description: a Unix compressor which is very similar to LZW File extension: .Z Used most often for: compressing single files. Name: TAR Description: a Unix archiver program which stores files in a single archive without compression File extension: .tar Used most often for: collecting source files together for software package distribution. Often used in combination with a compression program, e.g. GZIP Name: RAR Description: a general purpose archiving and compression program which allows higher compression ratios than other PC archiving tools File extension: .rar Used most often for: compressing large numbers of small files Name: GZIP Description: a compression utility to replace Unix Compress because of its better compression and freedom from patented algorithms File extension: .gz Used most often for: compressing web downloads, especially when applied to TAR files Name: ZIP Description: an extremely widespread archiving and compression format File extension: .zip Used most often for: Storing collections of files together conveniently in one compressed file. Most commonly used on Windows systems 2. Optimised file updating In this version of Sophos Anti-Virus for Windows 95/98, product updates now involve copying only those files which have changed, rather than all files in the product distribution. This means that if you add an IDE (virus identity) file from the Sophos website, for example, only the new IDE file will be copied from your Central Installation Directory (CID) down to your workstations. This will optimise the updating process, especially for dial-up or WAN users. You no longer force automatic updates by editing configuration files in the server's CID. Instead, from the Sophos Anti-Virus installation directory, issue the command SETUP /UPDATE /SRCPATH="\\SERVERNAME\CID" to signal that an update should be triggered from the specified CID on the server SERVERNAME. 3. New "About" dialog SAV for Windows 95/98 GUI now displays more detailed version information. 4. New on-line Help The on-line Help files have been upgraded and restructured. 5. Improved temporary file-handling During some forms of scanning Sophos Anti-Virus needs to make use of temporary file storage. By default these files are stored in the TEMP subdirectory of the Sophos Anti-Virus application. You may create the following registry key and associated value to over-ride the default behaviour: Key: HKEY_LOCAL_MACHINE\SOFTWARE\SOPHOS\ADVANCED\ Value Name: TEMP_DIR Type: REG_SZ (String) Data: Path to the user specified temporary directory *including the trailing backslash character* 6. Updated start menu The Start menu has been updated to: Start\Programs\Sophos Anti-Virus\ it now includes a short cut to the Sophos home page. Troubleshooting --------------- The following problems may require the use of the Registry Editor (Regedt32.exe). Microsoft have issued the following warning with respect to the Registry Editor: "Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk." 1. Disabling scanning of Microsoft project files Should you wish to disable the scanning of Microsoft project files you may create the following registry key and associated value to over-ride the default behaviour: * Create the following registry key and associated values: Key: HKEY_LOCAL_MACHINE\SOFTWARE\SOPHOS\SWEEP95\VIRUSENGINE\ Value Name: Project Type: REG_DWORD Data: 0 Compatibility issues -------------------- 1. Bay Networks (Performance Technologies) Instant Internet A conflict between the version of the WinSock client installed by the Instant Internet application and the Sophos SMTP.SMM module can lead to the Sophos Anti-Virus service not starting or stopping correctly. As a work-around add the following value to the registry. Key: HKEY_LOCAL_MACHINE\Software\Sophos\Sweep95\SMMS\ SMTP\ Value Name: No Startup Check Type: REG_DWORD Data: 0x1 This will prevent the SMTP module checking for the appropriate network transport protocols during startup. ---------------- Sophos Plc, The Pentagon, Abingdon, OX14 3YP, England Tel 01235 559933 o Fax 01235 559935 Sophos Pty Ltd, Level 4, 725 George Street, Sydney, NSW 2000, Australia Tel 02 9212 1600 o Fax 02 9212 1788 Sophos Plc, 2, Place de la Defense, BP240, 92053 Paris la Defense, France Tel 01 46 92 24 42 o Fax 01 46 92 24 00 Sophos GmbH, Am Hahnenbusch 21, D-55268 Nieder-Olm, Germany Tel 06136 91193 o Fax 06136 911940 Sophos Inc, 50-S Audubon Road, Wakefield, MA 01880, USA Tel 781 213 3456 o Fax 781 213 5466 o Toll Free: 888 SOPHOS 9 Sales email sales@sophos.com Technical support email support@sophos.com Web http://www.sophos.com/