home *** CD-ROM | disk | FTP | other *** search
Text File | 1999-05-17 | 46.7 KB | 1,294 lines |
- What's New in McAfee VirusScan v4.0.3 (4023)
- for Windows 95 and Windows 98
- Copyright (c) 1999 Networks Associates Technology, Inc.
- All Rights Reserved.
-
-
- Thank you for using McAfee VirusScan for Windows 95 and
- Windows 98. This What's New file contains important
- information regarding this release. Network Associates
- strongly recommends that you read the entire document.
-
- Network Associates welcomes your comments and suggestions.
- Please use the information provided in this file to contact
- Customer Care or technical support.
-
- ___________________
- WHAT'S IN THIS FILE
-
- - New Features
- - Issues Resolved in this Release
- - Known Issues
- - Installation
- - Documentation
- - Frequently Asked Questions
- - Contacting Network Associates
-
-
- ****IMPORTANT NOTE****
-
- The WHATSNEW.TXT files that accompany each product will no
- longer list the viruses the product detects and removes.
- That information will appear only in the WHATSNEW.TXT file
- that comes with the .DAT update.
-
- ****
-
- ____________
- NEW FEATURES
-
- 1. VirusScan detects and cleans files infected with the
- W97M/MELISSA virus and its variants. For up-to-date
- detection and removal capability, visit the Network
- Associates A.V.E.R.T. website at www.avertlabs.com.
-
- 2. A new Network Associates scanning engine is at the heart
- of VirusScan v4.0.3. Created and backed by the combined
- efforts of the McAfee Labs and Dr Solomon anti-virus
- research teams, this engine delivers outstanding virus
- detection and cleaning rates. The new engine also
- detects viruses in nearly all of the popular compressed
- file formats.
-
- 3. A new Emergency Disk wizard now guides you through the
- process of formatting a floppy disk, copying necessary
- files to it, and preparing the disk for use. To make
- your Emergency Disk bootable, be sure to select the
- Copy System Files checkbox in the Format dialog box
- when it appears. The Emergency Disk you create is now
- easier to use and more powerful than in previous
- VirusScan versions.
-
- When you run a scan operation from the Emergency Disk
- you create, you can choose the .DAT files to use for
- that operation from a simple menu arrangement. Choosing
- the .DAT files installed on your hard disk allows you
- to run more powerful scan operations.
-
- 4. A new VShield Properties dialog box groups the
- configuration options for VShield's long-standing
- System Scan module with those for a new, optional
- set of modules: E-mail Scan, Internet Filter, and
- Download Scan. For even quicker and easier setup,
- VShield includes a configuration wizard that enables
- the most common scanning options for an excellent
- balance between system performance and virus
- protection. Now you can set up VShield in one quick
- pass and get complete protection from viruses and
- malicious software at all potential points of entry.
- To activate these optional features, you must install
- VirusScan using the Custom Setup option.
-
- 5. Download Scan also examines other files you choose to
- download, while the Internet Filter module detects
- hostile Java applets and ActiveX controls. You can also
- configure Internet Filter to block access to specific
- undesirable sites. With this broad focus, VirusScan
- seals all points of entry for viruses and other
- malicious software.
-
- 6. New versions of VirusScan Command Line components give
- VirusScan for Windows 95 and Windows 98 powerful and
- up-to-date protection for command-line environments.
-
- 7. VShield will start looking for viruses in new mail that
- you receive in your MAPI mailbox while you are logged
- in to your MAPI mail server. In this way, VShield
- provides you with continuous, real-time anti-virus
- protection for your MAPI-based e-mail, whichever profile
- you use. You can set VShield to clean any viruses it
- finds in your e-mail, or have VShield delete or move the
- infected files to a quarantine folder.
-
- 8. VirusScan's heuristic scanning technology evaluates the
- probability that a file or a macro might be infected by
- a new, unidentified virus. You can choose to use
- heuristic scanning to look for file-infecting viruses,
- macro viruses, or both.
-
- 9. A revamped VShield Security module allows you to protect
- individual property pages for any VShield module against
- unauthorized changes. Use it to keep others who use your
- computer from making changes, or configure VShield with
- those settings you want all users on your network to
- have, then distribute password-protected settings files
- to enforce a network-wide anti-virus security policy.
-
- 10. A rewritten VirusScan Scheduler replaces the AV Console
- component included with previous VirusScan versions. It
- now includes right-click functionality that allows you
- to create new tasks and view activity logs directly
- from the task list. An enhanced scheduling function
- allows you to run your tasks at a random interval within
- 60 minutes of the time you set for them. This feature
- allows you to avoid clogging network bandwidth with
- simultaneous update or upgrade requests, or cross-
- network scanning tasks.
-
- ____________
- KNOWN ISSUES
-
- 1. Using DOS memory managers might cause VirusScan to
- falsely detect viruses in memory. Since Windows 95 and
- Windows 98 no longer require DOS memory managers, you
- can eliminate false warnings by preceding each line in
- your CONFIG.SYS file that includes settings for a DOS
- memory manager with REM. This deactivates the memory
- manager. To learn more about working with your
- CONFIG.SYS file, see your DOS or Windows documentation.
-
- 2. If you use a password to protect your VShield
- configuration options, VShield will ask you for that
- password whenever you open the VShield Properties
- dialog box. Use your mouse to click inside the text
- box provided in order to enter the password--keyboard
- shortcuts will not work. Microsoft acknowledges this
- issue in its Knowledge Base Article ID #Q84133. Next,
- click OK to use the password you enter. To close the
- password verification dialog box without entering a
- password, click Cancel.
-
- 3. Disk defragmentation programs move files as they work
- to maximize hard disk efficiency. If you have VShield,
- VirusScan, or other applications active during a disk
- defragmentation operation, your disk defragmentation
- program might tell you that it cannot find the active
- application files. This is normal and does not mean
- that the files do not exist. To avoid error messages
- like this, close all open applications and disable
- VShield, then run your disk defragmentation operation
- again.
-
- 4. VShield will not detect infected files within a .zip
- archive if you have Novell's Client32 installed on
- your computer, and you:
-
- * Use Universal Naming Convention (UNC) notation to
- navigate to a directory on a NetWare server that
- contains the infected archive; and
- * Extract the infected files from the archive into
- the same directory.
-
- To avoid this problem, map a drive letter on your
- computer to the target directory on the NetWare
- server before you extract the compressed files. To
- ensure maximum anti-virus protection for your NetWare
- servers, install and use NetShield NetWare from
- Network Associates.
-
- 5. If you ask VShield to prompt you for an action when
- it finds a virus or a hostile object and you choose
- to have VShield move the infected file to a quarantine
- directory, VShield does not retain the correct
- filename for the infected file. Instead, VShield
- renames the infected file as it moves it. As a result,
- the infected file appears on the hard disk with a
- completely different filename and a .TMP extension.
-
- If you tell VShield to move infected files to a
- quarantine directory automatically, however, the
- program will retain the correct file names.
-
- 6. If you start your computer with a VirusScan Emergency
- Disk that you created, the Emergency Disk utility will
- quit to a command prompt when it detects and cleans a
- boot sector infection. To ensure that you have removed
- all infecting viruses from your system, Network
- Associates recommends that you use the Emergency Disk
- to restart your computer again, then run another scan
- operation, before you restart your computer normally.
-
- 7. VirusScan will detect and remove the XF/SIC.A virus
- from infected Microsoft Excel documents. If you later
- use Excel 97 to open a file from which VirusScan has
- removed this virus, Excel will tell you that it cannot
- find a particular worksheet within the file at a
- particular cell reference. It will also tell you that
- continuing could damage your worksheet and ask you
- whether you want to cancel your request to open
- the file. The worksheet name it mentions will vary.
-
- You may safely open the worksheet. Click No in the
- confirmation dialog box to continue.
-
- To prevent the message from reappearing, open the
- document in Excel, then click the Insert menu, point
- to Name, then choose Define. In the dialog box that
- appears, delete the entries Auto_Open and Auto_Close.
- Save and close the file normally.
-
- 8. VirusScan's Internet Filter module does not block any
- IP addresses you have asked it to block if you connect
- to the Internet through America Online.
-
- 9. If you use software that blocks online advertisements,
- such as Ads-Off, while you have VShield active, your
- system could become unstable.
-
- 10. VShield will not detect infected files contained in a
- .ZIP archive if:
-
- * You use a WinZip plug-in for Netscape Navigator;
- * You specify a particular directory into which you
- want the WinZip plug in to extract the infected
- files; and
-
- 11. VirusScan will not detect more than one infected file or
- object embedded within Microsoft Office files.
-
- 12. VirusScan does not include support for right-click scan
- operations on the My Documents folder in Windows 98.
-
- 13. If you install this version of VirusScan on a system
- that already has NetShield's AntiVirus Console installed
- on it, then later remove VirusScan from that system,
- you'll see an error message that tells you VirusScan
- cannot find a certain registry key. This error also
- occurs if you install VirusScan first, then install
- the AntiVirus Console, then remove VirusScan.
-
- Both NetShield and VirusScan share particular registry
- keys, but each program gives these keys different values.
- To avoid this error, you can reinstall the AntiVirus
- Console. Alternatively, you can back up your registry
- file, install the AntiVirus Console, then restore your
- registry file in order to preserve the correct settings.
-
- The affected registry keys are:
-
- HKLM\Software\McAfee\VirusScan
- ConsoleEXE
- szVSTempDir
- dwDefaultServerPlatform
- dwCommTimeOut
- Product
- szInstallDir
- szProductVer
- szSerialNum
- szUpdateEXE
- szVirusInfoURLValue
- szVirDefVer
- szVirDefDate
- szEngineVer
-
- ____________
- INSTALLATION
-
- * INSTALLING VIRUSSCAN *
-
- 1. Insert the floppy disk or compact disc with your copy
- of VirusScan into your floppy disk drive or CD-ROM
- drive.
-
- If you downloaded a compressed copy of VirusScan
- from the Network Associates website or other electronic
- service, create a temporary directory on your hard disk
- or on a disk available on your network, then extract
- the files you downloaded into that directory.
-
- 2. Click Start in the Windows taskbar, then choose Run.
-
- 3. Type x:\setup.exe in the Run dialog box to start the
- installation utility from a floppy disk. To start the
- utility from a CD-ROM, type x:\win95\setup.exe. In both
- cases, x is the drive letter that designates your
- floppy drive or your CD-ROM drive.
-
- If you extracted files that you downloaded to your
- hard disk or to a disk on your network, specify the
- path to the correct directory. For example, type
- C:\DOWNLOAD\SETUP.EXE.
-
- 4. Click OK to continue.
-
- The VirusScan installation wizard will start. Follow
- the instructions shown on each wizard pane to choose
- the VirusScan options you want.
-
- NOTE: The installation procedure outlined in the
- VirusScan User's Guide has changed. To install the
- VShield modules responsible for scanning your POP or
- SMTP Internet mail, for scanning your corporate
- cc:Mail system, or for filtering harmful ActiveX or
- Java objects and dangerous Internet sites, you must
- choose the Custom Installation option and select
- each of these components.
-
- The Typical or Compact installation will, however,
- install the VShield component responsible for scanning
- your MAPI-based email systems.
-
- 5. When you finish your installation, restart your
- computer.
-
-
- * PRIMARY PROGRAM FILES FOR VIRUSSCAN *
-
- Note: The specific files you see on your computer will
- depend on the type of license you purchased. Your
- VirusScan copy might not include some of these files.
-
- _INST32I.EX_ File used in uninstallation
- _SETUP.DLL File used in uninstallation
- _SETUP32.LIB File used in uninstallation
- ADVGUI.DLL Advanced interface Dynamic Link
- Library file
- ALLDRIVE.VSC VirusScan settings file
- AVCONSOL.EXE VirusScan Scheduler
- AVCONSOL.INI VirusScan Scheduler settings file
- BOOTSCAN.EXE Emergency Disk command line scanner
- BROWSENT.DLL Dynamic Link Library file
- CDFW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- CDMW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- CFGCOM32.DLL Dynamic Link Library file
- CFW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- CHKVXD.EXE VShield check file
- CHRSET32.DLL Dynamic Link Library file for
- cc:Mail Scan
- CIW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- CLEAN.DAT Virus definitions file
- CMW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- CONFIG32.EXE VirusScan Configuration Program
- CONFWIZ.EXE VShield Configuration Wizard
- CSH.DLL Dynamic Link Library file for Help
- DEFAULT.VSC Default VirusScan settings file
- DEFAULT.VSH Default VShield settings file
- DEISL1.ISU File used in uninstallation
- DMIALERT.DLL Dynamic Link Library File for DMI
- Alerting
- DOMAINX.DAT Banned URL definitions file
- ECAPI.DLL Dynamic Link Library file for
- E-Commerce
- ECCOMMS.DLL Dynamic Link Library file for
- E-Commerce
- ECENGINE.EXE Electronic Commerce program
- EDISK.EXE Emergency Disk Creation Wizard
- program
- EDWIZ16.EXE Emergency Disk utility program
- EMALSCAN.DLL Dynamic Link Library file for
- MAPI on-access and on-demand
- scanning
- EMCLEAN.DAT Emergency Disk Virus definitions
- file
- EMNAMES.DAT Emergency Disk Virus definitions
- file
- EMSCAN.DAT Emergency Disk Virus definitions
- file
- FAXFORM.TXT Form to purchase licensed version
- of VirusScan--suitable for faxing
- INETWH16.DLL Dynamic Link Library File
- INETWH32.DLL Dynamic Link Library File
- INTERNET.DAT Hostile Applet definitions file
- IPSCANX.DAT Banned IP definitions file
- LICENSE.DAT License definitions file
- LICENSE.TXT License agreement file
- MCARCHIV.DLL Dynamic Link Library file for
- Compressed file scanning
- MCKRNL32.DLL Dynamic Link Library file
- MCSCAN32.DLL Dynamic Link Library file
- MCUTIL32.DLL Dynamic Link Library file
- MCZIP32.DLL Dynamic Link Library file for Send
- Virus utility
- MEDB632.DLL Dynamic Link Library file for
- cc:Mail Scan
- MESSAGES.DAT Message strings definitions file
- MEW800.DLL Dynamic Link Library file for
- cc:Mail Scan
- MFLDR32.DLL Dynamic Link Library file
- NAMES.DAT Virus definitions file
- PACKING.LST Packing list file
- PRESERVE.INI Preserved settings file
- README.1ST License agreement file
- RESELLER.TXT Network Associates resellers list
- file
- RWABS16.DLL Dynamic Link Library file for
- Emergency Disk creation
- RWABS32.DLL Dynamic Link Library file for
- Emergency Disk creation
- S95EXT.DLL Dynamic Link Library file
- SCAN.DAT Virus definitions file
- SCAN.EXE Command-line scan program
- SCAN_C.VSC VirusScan settings file
- SCAN32.EXE VirusScan graphical user interface
- scanning program
- SCAN86.EXE DOS command line scan program
- SCANPM.EXE Protected mode command line scan
- program
- SCRSCAN.EXE Screen Saver scan program
- SCRSCANP.DLL Dynamic Link Library file for
- ScreenScan
- SCRSCANR.DLL Dynamic Link Library file for
- ScreenScan
- SENDVIR.EXE Anti-Virus Research Submission
- program
- SETUP.EXE Setup program
- SHUTIL.DLL Dynamic Link Library file
- UNINST.INS File for Uninstall
- VALIDATE.EXE Validation utility program
- VIM32.DLL Dynamic Link Library file for
- cc:Mail Scan
- VMEFNW32.DLL Dynamic Link Library file for
- cc:Mail Scan
- VSC.LM Electronic Commerce settings file
- VSCAN4.CNT VirusScan Help file
- VSCAN4.HLP VirusScan Help file
- VSCAN40.EXE VirusScan Launcher program
- VSCLM.INI Electronic Commerce settings file
- VSCONFIG.EXE VirusScan configuration program
- file
- VSECOMR.EXE Electronic Commerce program file
- VSHWIN32.EXE VShield program file
- VSSTAT.EXE VShield statistics program file
- WBHOOK32.DLL Dynamic Link Library file
- WCMDR.EXE File for Uninstall
- WCMDR.INI File for Uninstall
- WCMDRSIL.INI File for Uninstall
- WEBSCANX.EXE VShield program file
- WHATSNEW.TXT This document
-
-
-
- Files installed in the WINDOWS directory:
-
- SECCAST.ICO SecureCast icon file
-
-
-
- Files installed in the WINDOWS\SYSTEM directory:
-
- MCAFECOM.DLL Dynamic Link Library file
- MCKRNL.VXD Virtual Device Driver
- MCSCAN32.VXD Virtual Device Driver
- MCUTIL.VXD Virtual Device Driver
- VSHIELD.VXD Virtual Device Driver for VShield
- VSHINIT.VXD Virtual Device Driver for VShield
-
-
- * TESTING YOUR INSTALLATION *
-
- The Eicar Standard AntiVirus Test File is a combined
- effort by anti-virus vendors throughout the world to
- implement one standard by which customers can verify
- their anti-virus installations.
-
- To test your installation, copy the following line
- into its own file, then save the file with the name
- EICAR.COM.
-
- X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
-
- The file size will be 69 or 70 bytes.
-
- Next, start your anti-virus software and allow it to scan
- the directory that contains EICAR.COM. When your software
- scans this file, it will report finding the
- EICAR virus.
-
- Note that this file is NOT A VIRUS. Delete the file
- when you have finished testing your installation to
- avoid alarming unsuspecting users.
-
- ______________________
- UNINSTALLING VIRUSSCAN
-
- To uninstall VirusScan, click Start in the Windows taskbar,
- choose Settings, point to Control Panel, and open. Open the
- Add/Remove Programs utility from the folder. Highlight
- VirusScan on the program list, and click Add/Remove to
- uninstall VirusScan.
-
- To remove VirusScan without using the uninstall utility,
- follow these steps:
-
- 1. Remove references to VirusScan from your AUTOEXEC.BAT
- and your SYSTEM.INI files. To do so, follow these
- steps:
-
- A. Start the Windows system editor. Click Start in the
- Windows taskbar, then choose Run. Type SYSEDIT in
- the Run dialog box, then click OK.
-
- A set of text files will open on your screen. Your
- AUTOEXEC.BAT file should appear as the first or
- topmost window in this set. Click the title bar for
- the SYSTEM.INI window to bring it to the foreground,
- then locate this line:
-
- [boot]SCRNSAVE.EXE=C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCRSCAN.EXE
-
- B. Change the line to read:
-
- [boot]SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\WINDOW~1.SCR
-
- D. When you have restored your SYSTEM.INI file to its
- original state, choose Save from the SYSEDIT File
- menu to save your changes, then choose Exit from the
- File menu to quit the SYSEDIT application.
-
- 2. Remove VirusScan icons from the Start menu. To do this,
- follow these steps:
-
- A. Click Start in the Windows taskbar, point to
- Settings, then choose Taskbar.
-
- B. Click the Start Menu Programs tab.
-
- C. Click the Remove button.
-
- D. Select the McAfee VirusScan folder in the list that
- appears in the Remove Shortcuts/Folders dialog box,
- then click Remove.
-
- E. Windows will ask you to confirm your action. Click
- Yes to continue.
-
- F. Click Close to close the Remove Shortcuts/Folders
- dialog box, then click OK to close the Taskbar
- Properties dialog box.
-
- 3. Edit the Registry. To do this, follow these steps:
-
- A. Start the Windows Registry editor. Click Start in
- the Windows taskbar, then choose Run. Type REGEDIT
- in the Run dialog box, then click OK.
-
- B. Click + to expand the HKEY_LOCAL_MACHINE folder,
- click + again to expand the SOFTWARE folder, then
- click one more time to expand the CLASSES folder.
- Next, delete these keys or entries:
-
- \.vsc
- \.vsh
- \CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}
- \CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}\InProcServer32
- \CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}
- \CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}\InProcServer32
- \comfile\shell\VirusScan
- \Directory\shell\VirusScan
- \Drive\shell\VirusScan
- \Excel.Addin\shell\VirusScan
- \Excel.Chart.5\shell\VirusScan
- \Excel.Chart.8\shell\VirusScan
- \Excel.Macrosheet\shell\VirusScan
- \Excel.Sheet.5\shell\VirusScan
- \Excel.Sheet.8\shell\VirusScan
- \Excel.Template\shell\VirusScan
- \Excel.Workspace\shell\VirusScan
- \Excel.XLL\shell\VirusScan
- \exefile\shell\VirusScan
- \Office.Binder.8\shell\VirusScan
- \Office.Binder.98\shell\VirusScan
- \rtffile\shell\VirusScan
- \VSConfigFile
- \VSHConfigFile
- \WinZip\shell\VirusScan
- \Word.Document.6\shell\VirusScan
- \Word.Document.8\shell\VirusScan
- \Word.RTF\shell\VirusScan
- \Word.RTF.8\shell\VirusScan
- \Word.Template\shell\VirusScan
- \Word.Template.8\shell\VirusScan
-
-
- C. Move to the HKEY_LOCAL_MACHINE\SOFTWARE folder, then
- delete these keys or entries:
-
- 1. McAfee
-
- \Scan95
- \ScreenScan
-
- 2. \Microsoft\Windows\CurrentVersion\AppPaths\
-
- \SCAN32.EXE
- \SCRSCAN.EXE
- \VSHWIN32.EXE
-
- 3. \Microsoft\Windows\CurrentVersion\
- Controls Folder\Display\shellex
- \PropertySheetHandlers
-
- \ScrScanP
-
- 4. \Microsoft\Exchange\Client\Extensions\
-
- \Exchange Scan="4.0;C:\Program Files
- \Network Associates\McAfee VirusScan
- \emalscan.dll;1;11000000000000;1110000;"
- \Outlook Setup Extension=
- "4.0;Outxxx.dll;7;000000000000000;0000000000;OutXXX"
-
- 5. \Microsoft\Windows\CurrentVersion\Run\
-
- \AvconsoleExe="C:\Program Files\Network Associates\
- McAfee VirusScan\avconsole.exe /minimize"
- \McAfeeWebScanX="C:\Program Files\Network Associates\
- McAfee VirusScan\WebScanX.exe"
- \Vshwin32EXE="C:\Program Files\Network Associates\
- McAfee VirusScan\VSHWIN32.EXE"
- \VsStatEXE="C:\Program Files\Network Associates\
- McAfee VirusScan\VSSTAT.EXE"
-
- 6. \Microsoft\Windows\CurrentVersion\RunServices
-
- \Vshwin32EXE="C:\Program Files\Network Associates\
- McAfee VirusScan\VSHWIN32.EXE"
-
- 7. \Microsoft\Windows\CurrentVersion\Controls Folder\
-
- \Display\shellex\PropertySheetHandlers\ScrScanP\
- @="{C88249A0-AD7E-11cf-AD53-444553540000}"
-
- 8. \Microsoft\Windows\CurrentVersion\SharedDLLs
-
- \C:\WINDOWS\SYSTEM\MCAFECOM.DLL
- \C:\WINDOWS\SYSTEM\MCKRNL.VXD
- \C:\WINDOWS\SYSTEM\MCSCAN32.VXD
- \C:\WINDOWS\SYSTEM\MCUTIL.VXD
- \C:\WINDOWS\SYSTEM\VSHIELD.VXD
- \C:\WINDOWS\SYSTEM\VSHINIT.VXD
-
- 9. \Microsoft\Windows\CurrentVersion\Uninstall
-
- \McAfee VirusScan
-
-
-
- D. Move to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\
- Services\VxD\ folder, then delete these keys or entries:
-
- \VSHINIT
-
- 4. Restart your computer.
-
- 5. Delete VirusScan files and directories. To do so,
- follow these steps:
-
- A. Click Start, point to Programs, then choose Windows
- Explorer.
-
- B. Locate the folder that contains your copy of
- VirusScan. If you chose the default installation
- options, you should find VirusScan in this
- directory path:
-
- Program Files\Network Associates\McAfee VirusScan
-
- C. Remove the following files from the \Windows\system
- directory on your hard disk:
-
- MCAFECOM.DLL
- MCKRNL.VXD
- MCSCAN32.VXD
- MCUTIL.VXD
- VSHIELD.VXD
- VSHINIT.VXD
-
- You have now removed VirusScan from your system.
- Restart your computer to have your changes take effect.
-
- _____________
- DOCUMENTATION
-
- For more information, refer to the users guides for each
- product included on the CD-ROM or available from Network
- Associates electronic services. Each product user's guide
- is saved in Adobe Acrobat Portable Document Format (.PDF).
- You can view and print this document with Adobe's Acrobat
- Reader. PDF files can include hypertext links and other
- navigation features to assist you in finding answers to
- questions about your Network Associates product.
-
- To download Adobe Acrobat Reader from the World Wide Web,
- visit Adobe's website at:
-
- http://www.adobe.com/prodindex/acrobat/readstep.html
-
- To download documentation for Network Associates anti-virus
- software, visit the Network Associates FTP site at:
-
- ftp://ftp.nai.com/pub/manuals/total_virus_defense
-
- Additional contact information appears in the following
- section.
-
- Documentation feedback is welcome. Send e-mail to
- tvd_documentation@nai.com.
-
- __________________________
- FREQUENTLY ASKED QUESTIONS
-
- Regularly updated lists of frequently asked questions
- about Network Associates products are also available on
- the Network Associates website, on CompuServe, and on
- America Online.
-
- Q: I use both cc:Mail and a MAPI-compliant e-mail system
- at work. Can I have VShield scan both of these systems
- at once or switch back and forth between them?
-
- A: VShield's E-Mail Scan module includes support for only
- one e-mail client at any given time. You may not, for
- example, have the E-Mail Scan module scan both a
- MAPI-compliant mailbox and a Lotus cc:Mail server at
- the same time. You can, however, scan first one mailbox
- then switch the E-Mail Scan module so that it scans the
- other mailbox. You can also have VShield's E-Mail Scan
- module examine your cc:Mail mailbox in the background,
- then have VirusScan's E-Mail Scan on-demand component
- begin scanning your MAPI mailbox.
-
-
- Q: I am installing new software on my computer, and the
- manual recommends disabling any anti-virus software.
- How do I disable VShield without uninstalling it?
-
- A: Right-click the VShield icon located in your system
- tray next to the system clock, point to Enable, then
- choose System Scan from the shortcut menu. If System
- Scan does not have a checkmark beside it in this menu,
- it is already disabled. After you install your new
- software, reactivate VShield by right-clicking the
- VShield icon in the system tray, pointing to Enable,
- then choosing System Scan from the shortcut menu. If
- System Scan has a checkmark next to it in the menu,
- it is enabled.
-
-
- Q: I've activated VirusScan's heuristic scanning option,
- and now it identifies some viruses as "unknown." Why?
-
- A: VirusScan's heuristic scanning feature looks for certain
- "virus-like" characteristics in the files it scans. When
- it finds a sufficient number of these characteristics,
- VirusScan concludes that the file is infected. This
- powerful scanning technique allows VirusScan to discover
- viruses that are so new that they do not yet have names
- or identities. VirusScan will, however, identify viruses
- by name when they match its list of known viruses.
-
-
- Q: When I choose Virus List in VirusScan, I get a message
- that tells me it's unable to connect. What's happening?
-
- A: Network Associates now stores its virus information in
- a web-based Virus Information Library. To use this
- feature, you must have a network-based or dial-up
- Internet connection and web browsing software installed
- on your computer. If you still cannot connect, start
- your web browser and enter this address into the text
- box at the top of your browser window:
-
- http://vil.mcafee.com/villib/alpha.asp
-
-
- Q: I have an existing VirusScan installation with a lot
- of custom settings. Can I keep these settings when I
- upgrade to the current VirusScan version?
-
-
- A: The Setup utility for VirusScan v4.0.3 or later will
- offer to preserve your settings from previous versions
- during installation. This feature will preserve any
- configuration options you set in v3.2.0 or later. It
- will make every attempt to preserve settings for
- VirusScan 3.x versions earlier than v3.2.0, but
- Network Associates does not support this feature for
- versions earlier than v3.2.0. Setup will NOT preserve
- settings from VirusScan v2.x, nor from any version of
- WebScanX.
-
-
- Q: How can I get Setup to remove all files, including
- settings files, from existing VirusScan versions when
- I run a silent installation?
-
- A: To have Setup remove all VirusScan files during a silent
- installation, open the SETUP.ISS file that you use for
- the silent installation, then find the section that
- reads:
-
- [DLG_12110-0]
- Result=0
-
- If the value shown for Result is zero, Setup will
- preserve your VirusScan settings. If the value is 1,
- Setup will remove VirusScan completely. Change the
- value to reflect the action you want Setup to take,
- then save and close SETUP.ISS. To learn more about
- recording and running a silent installation, consult
- the VirusScan User's Guide.
-
-
- Q: When VirusScan detects an infection in files compressed
- in .CAB or ZIP-SFX format, why doesn't VirusScan clean,
- delete, or move the files?
-
- A: Because files compressed in .CAB and ZIP-SFX formats can
- include a Microsoft Authenticode certificate, altering
- the files can render them unusable. To avoid this
- possibility, VirusScan does not clean, delete, or move
- infected files compressed in .CAB or ZIP-SFX format.
- Network Associates recommends that you decompress any
- infected files compressed in these formats, then run
- VirusScan again to clean the uncompressed files.
-
-
- Q: VirusScan detected a virus on my system, but it is not
- one of the default files listed in its Program
- Extensions dialog box. Therefore, I suspect it might be
- a false detection. What can I do to verify a detected
- virus?
-
- A: If you suspect a false detection on a non-executable
- file, run VirusScan's command line scanner, SCAN.EXE,
- to verify the infection. If VirusScan detects a virus
- and SCAN.EXE does not, download the latest .DAT file
- update, then scan your system again. If VirusScan still
- detects a virus that you suspect is a false detection,
- please report the issue to Network Associates technical
- support.
-
-
- Q: I would like to purchase and download the latest
- version of VirusScan from one of the Network Associates
- electronic services, but I do not want to give my
- credit card information over the Internet for
- security purposes. Can I purchase VirusScan via modem
- and download the product via the Internet?
-
- A: Yes. The first time you download VirusScan, the Network
- Associates SecureCast wizard will prompt you to select
- the transmission method you prefer to use to download
- your Network Associates product. It will also prompt
- you to transmit your encrypted credit card information.
-
- At the Transaction Connection Type dialog box, select
- Internet to download your order via the Internet.
- At the Security Connection Type dialog box, select
- Direct Dial Modem to transmit your credit card
- information via modem.
-
-
- Q: I have created my own Emergency Disk without using
- the Emergency Disk creation utility. Is there anything
- I need to do to be sure that it will work properly?
-
- A: To have your own Emergency Disk start scanning properly,
- you must create a CONFIG.SYS file on the boot diskette,
- then add these lines:
-
- DEVICE=HIMEM.SYS
- DOS=HIGH
-
- Add the HIMEM.SYS file from the \WINDOWS directory to
- the boot diskette.
-
- NOTE: For detailed instructions on creating an
- Emergency Disk, refer to the instructions outlined in
- the VirusScan User's Guide, which you'll find on the
- Network Associates website.
-
- NOTE ALSO: If you copied the files EMNAMES.DAT,
- EMCLEAN.DAT, and EMSCAN.DAT to the Emergency Disk you
- created (as it states in the User's Guide), you must
- rename these files to NAMES.DAT, CLEAN.DAT, and
- SCAN.DAT, respectively, in order for the Emergency Disk
- to function properly.
-
-
- Q: What error codes can CHKVXD.EXE return?
-
- A: Possible CHKVXD.EXE error level codes, along with their
- descriptions, are:
-
- 65535(-1)= VShield not installed
-
- 0 = VShield enabled
-
- 1 = VShield disabled
-
-
- Q: How can I tell that ScreenScan is working?
-
- A: ScreenScan does not tell you when it scans your system,
- but if you enable the logging option when you configure
- it, VirusScan will record all ScreenScan activity in
- its log file.
-
-
- Q: Can I update Network Associates data (.DAT) files to
- detect new viruses?
-
- A: Yes, you can install and use the Network Associates
- SecureCast client software to receive updated files
- automatically, as soon as they become available. For
- details, consult the VirusScan User's Guide.
-
- If you need additional assistance with downloading,
- contact Network Associates Download Support. Contact
- information appears later in this file.
-
-
- Q: Why are additional extensions added to the Program Files
- Only list?
-
- A: As the Network Associates Anti-Virus Emergency Response
- Team finds viruses that can infect new file types, it
- adds new extensions to the default extensions list to
- enhance security. For instance, new viruses can infect
- Microsoft Office binder files, so the default extensions
- list now includes the file extension for these binder
- files so that VirusScan will examine them for viruses.
-
-
- Q: I thought I could right-click Microsoft Office .DO?,
- .XL?, or .OBD files, then choose Scan for Viruses
- from a shortcut menu in order to start a scan operation.
- I have Microsoft Office installed, but when I try this,
- it doesn't work. Why not?
-
- A: If you installed Microsoft Office after you installed
- VirusScan, you might need to reinstall VirusScan to
- enable context-sensitive shortcut menus.
-
-
- Q: I am having trouble installing Service Pack 2 for
- Microsoft Exchange Client 5.0. Why?
-
- A: VShield uses files which the upgrade needs to write to.
- In order to successfully install the service pack,
- you must first close VShield by right-clicking the
- VShield icon the Windows system tray, then selecting
- Exit. You will now be able to successfully run the
- service pack upgrade.
-
-
- Q: I'm running Microsoft Exchange Client 5.0, and
- VirusScan's On-Demand scan icons aren't showing on my
- taskbar. Why?
-
- A: If you're using Microsoft Exchange Client 5.0, the two
- Exchange On-Demand scan icons will not appear on the
- Microsoft Exchange toolbar. This is due to a limitation
- in Exchange. Please refer to your Exchange documentation
- for instructions on how to place these icons onto the
- taskbar within Exchange.
-
-
- Q: I installed VirusScan v4.0.3 and now I can't scan my
- cc:Mail mailbox, or Internet mail sent via a POP or
- SMTP server. What happened?
-
- A: Setup no longer installs by default the VShield
- modules responsible for scanning your POP or SMTP
- Internet mail, for scanning your corporate cc:Mail
- system, or for filtering harmful ActiveX or Java
- objects and dangerous Internet sites. To install these
- components, you must choose the Custom Installation
- option during Setup, then select which of these
- components you want to install. This procedure differs
- from that outlined in the VirusScan User's Guide.
-
- The Typical or Compact installation will, however,
- install the VShield component responsible for scanning
- your MAPI-based email systems.
-
-
- _____________________________
- CONTACTING NETWORK ASSOCIATES
-
- On December 1, 1997, McAfee Associates merged with
- Network General Corporation, Pretty Good Privacy, Inc.,
- and Helix Software, Inc. to form Network Associates, Inc.
- The combined Company subsequently acquired Dr Solomon's
- Software and CyberMedia, Inc.
-
- Network Associates continues to market and support the
- product lines from each of the former entities. You may
- direct all questions, comments and technical support
- requests to the Network Associates Customer Care department
- at any of the addresses or phone numbers listed below.
-
- Contact the Network Associates Customer Care
- department at:
-
- 1. Phone (408) 988-3832
- Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time
-
- 2. Fax (408) 970-9727
- 24-hour, Group III Fax
-
- 3. Fax-back automated response system (408) 346-3414
-
-
- Send correspondence to any of the following Network
- Associates locations:
-
- Network Associates Corporate Headquarters
- 3965 Freedom Circle
- McCandless Towers
- Santa Clara, CA 95054
-
- Phone numbers for corporate-licensed customers:
- Phone: (408) 988-3832
- Fax: (408) 970-9727
-
- Phone numbers for retail-licensed customers:
- Phone: (972) 278-6100
- Fax: (408) 970-9727
-
- Network Associates offices outside the United States:
-
- Network Associates Australia
- Level 1, 500 Pacific Highway
- St. Leonards, NSW
- Sydney, Australia 2065
- Phone: 61-2-8425-4200
- Fax: 61-2-9439-5166
-
- Network Associates Austria
- Pulvermuehlstrasse 17
- Linz, Austria
- Postal Code A-4040
- Phone: 43-732-757-244
- Fax: 43-732-757-244-20
-
- Network Associates Belgium
- Bessenveldtstraat 25a
- Diegem, Belgium - 1831
- Phone: 32-3-716-4070
- Fax: 61-2-716-4770
-
- Network Associates do Brasil
- Rua Geraldo Flausino Gomez 78
- Cj. - 51 Brooklin Novo - Sπo Paulo
- SP - 04575-060 - Brasil
- Phone: (55 11) 5505 1009
- Fax: (55 11) 5505 1006
-
- Network Associates Canada
- 139 Main Street, Suite 201
- Unionville, Ontario
- Canada L3R 2G6
- Phone: (905) 479-4189
- Fax: (905) 479-4540
-
- Network Associates People's Republic of China
- New Century Office Tower, Room 1557
- No. 6 Southern Road Capitol Gym
- Beijing
- People's Republic of China 100044
- Phone: 86 10 6849-2650
- Fax: 86 10 6849-2069
-
- NA Network Associates Oy
- Sinikalliontie 9, 3rd Floor
- 02630 Espoo
- Finland
- Phone: 358 9 5270 70
- Fax: 358 9 5270 7100
-
- Network Associates France S.A.
- 50 Rue de Londres
- 75008 Paris
- France
- Phone: 33 1 44 908 737
- Fax: 33 1 45 227 554
-
- Network Associates GmbH
- Ohmstra▀e 1
- D-85716 Unterschlei▀heim
- Deutschland
- Phone: 49 (0)89/3707-0
- Fax: 49 (0)89/3707-1199
-
-
- Network Associates Hong Kong
- 19th Floor, Matheson Centre
- 3 Matheson Way
- Causeway Bay
- Hong Kong 63225
- Phone: 852-2832-9525
- Fax: 852-2832-9530
-
- Network Associates Srl
- Centro Direzionale Summit
- Palazzo D/1
- Via Brescia, 28
- 20063 - Cernusco sul Naviglio (MI)
- ITALY
- Phone: 39 (0)2 9214 1555
- Fax: 39 (0)2 9214 1644
-
- Network Associates Japan, Inc.
- Toranomon 33 Mori Bldg.
- 3-8-21 Toranomon Minato-ku
- Tokyo 105-0001 Japan
- Phone: 81 3 5408 0700
- Fax: 81 3 5408 0780
-
- Network Associates Latin America
- 150 South Pine Island Road, Suite 205
- Plantation, Florida 33324
- United States
- Phone: (954) 452-1731
- Fax: (954) 236-8031
-
- Network Associates de Mexico
- Andres Bello No. 10, 4 Piso
- 4th Floor
- Col. Polanco
- Mexico City, Mexico D.F. 11560
- Phone: (525) 282-9180
- Fax: (525) 282-9183
-
- Network Associates International B.V.
- Gatwickstraat 25
- 1043 GL Amsterdam
- The Netherlands
- Phone: 31 20 586 6100
- Fax: 31 20 586 6101
-
- Network Associates Portugal
- Av. da Liberdade, 114
- 1269-046 Lisboa
- Portugal
- Phone: 351 1 340 4543
- Fax: 351 1 340 4575
-
- Net Tools Network Associates South Africa
- Bardev House, St. Andrews
- Meadowbrook Lane
- Epson Downs, P.O. Box 7062
- Bryanston, Johannesburg
- South Africa 2021
- Phone: 27 11 706-1629
- Fax: 27 11 706-1569
-
- Network Associates South East Asia
- 78 Shenton Way
- #29-02
- Singapore 079120
- Phone: 65 222-7555
- Fax: 65 222-7555
-
- Network Associates Spain
- Orense 4, 4a Planta.
- Edificio Trieste
- 28020 Madrid
- Spain
- Phone: 34 91 598 18 00
- Fax: 34 91 556 14 04
-
- Network Associates Sweden
- DatavΣgen 3A
- Box 596
- S-175 26 JΣrfΣlla
- Sweden
- Phone: 46 (0) 8 580 88 400
- Fax: 46 (0) 8 580 88 405
-
- Network Associates AG
- Baeulerwisenstrasse 3
- 8152 Glattbrugg
- Switzerland
- Phone: 0041 1 808 99 66
- Fax: 0041 1 808 99 77
-
- Network Associates Taiwan
- Suite 6, 11F
- No. 188, Sec. 5
- Nan King E. Rd.
- Taipei, Taiwan, Republic of China
- Phone: 886-2-27-474-8800
- Fax: 886-2-27-635-5864
-
- Network Associates International Ltd.
- Minton Place, Victoria Street
- Windsor, Berkshire
- SL4 1EG
- United Kingdom
- Phone: 44 (0)1753 827 500
- Fax: 44 (0)1753 827 520
-
-
- Or, you can receive online assistance through any
- of the following resources:
-
- 1. Internet E-mail: support@nai.com
-
- 2. Internet FTP: ftp.nai.com
-
- 3. World Wide Web: http://support.nai.com
-
- 4. America Online: keyword MCAFEE
-
- 5. CompuServe: GO NAI
-
- To provide the answers you need quickly and efficiently,
- the Network Associates technical support staff needs
- some information about your computer and your software.
- Please have this information ready when you call:
-
- - Program name and version number
- - Computer brand and model
- - Any additional hardware or peripherals connected to
- your computer
- - Operating system type and version numbers
- - Network name, operating system, and version
- - Network card installed, where applicable
- - Modem manufacturer, model, and baud, where applicable
- - Relevant browsers or applications and their version
- numbers, where applicable
- - How to reproduce your problem: when it occurs, whether
- you can reproduce it regularly, and under what
- conditions
- - Information needed to contact you by voice, fax, or
- e-mail
-
- We also seek and appreciate general feedback.
-
-
- * FOR PRODUCT UPGRADES *
-
- To make it easier for you to receive and use Network
- Associates products, we have established a reseller's
- program to provide service, sales, and support for our
- products worldwide. For a listing of resellers, see the
- resellers.txt file or contact Network Associates
- Customer Care for resellers near you.
-
-
- * FOR REPORTING PROBLEMS *
-
- Network Associates prides itself on delivering a
- high-quality product. If you find any problems, please
- take a moment to review the contents of this file. If
- the problem you've encountered is documented, there is
- no need to report the problem to Network Associates.
-
- If you find any feature that does not appear to
- function properly on your system, or if you believe
- an application would benefit greatly from enhancement,
- please contact Network Associates with your suggestions
- or concerns.
-
-
- * FOR ON-SITE TRAINING INFORMATION *
-
- Contact Network Associates Customer Service at
- (800) 338-8754.
-
-
- * NETWORK ASSOCIATES BETA SITE *
-
- Get pre-release software, including .DAT files, through
- http://www.avertlabs.com. You will have access to Public
- Beta and External Test Areas. Your feedback will make
- a difference.