home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PC World 1999 September
/
PCWorld_1999-09_cd.bin
/
Software
/
Antiviry
/
McAf403
/
DATA.Z
/
WhatsNew.TXT
< prev
Wrap
Text File
|
1999-05-17
|
48KB
|
1,294 lines
What's New in McAfee VirusScan v4.0.3 (4023)
for Windows 95 and Windows 98
Copyright (c) 1999 Networks Associates Technology, Inc.
All Rights Reserved.
Thank you for using McAfee VirusScan for Windows 95 and
Windows 98. This What's New file contains important
information regarding this release. Network Associates
strongly recommends that you read the entire document.
Network Associates welcomes your comments and suggestions.
Please use the information provided in this file to contact
Customer Care or technical support.
___________________
WHAT'S IN THIS FILE
- New Features
- Issues Resolved in this Release
- Known Issues
- Installation
- Documentation
- Frequently Asked Questions
- Contacting Network Associates
****IMPORTANT NOTE****
The WHATSNEW.TXT files that accompany each product will no
longer list the viruses the product detects and removes.
That information will appear only in the WHATSNEW.TXT file
that comes with the .DAT update.
****
____________
NEW FEATURES
1. VirusScan detects and cleans files infected with the
W97M/MELISSA virus and its variants. For up-to-date
detection and removal capability, visit the Network
Associates A.V.E.R.T. website at www.avertlabs.com.
2. A new Network Associates scanning engine is at the heart
of VirusScan v4.0.3. Created and backed by the combined
efforts of the McAfee Labs and Dr Solomon anti-virus
research teams, this engine delivers outstanding virus
detection and cleaning rates. The new engine also
detects viruses in nearly all of the popular compressed
file formats.
3. A new Emergency Disk wizard now guides you through the
process of formatting a floppy disk, copying necessary
files to it, and preparing the disk for use. To make
your Emergency Disk bootable, be sure to select the
Copy System Files checkbox in the Format dialog box
when it appears. The Emergency Disk you create is now
easier to use and more powerful than in previous
VirusScan versions.
When you run a scan operation from the Emergency Disk
you create, you can choose the .DAT files to use for
that operation from a simple menu arrangement. Choosing
the .DAT files installed on your hard disk allows you
to run more powerful scan operations.
4. A new VShield Properties dialog box groups the
configuration options for VShield's long-standing
System Scan module with those for a new, optional
set of modules: E-mail Scan, Internet Filter, and
Download Scan. For even quicker and easier setup,
VShield includes a configuration wizard that enables
the most common scanning options for an excellent
balance between system performance and virus
protection. Now you can set up VShield in one quick
pass and get complete protection from viruses and
malicious software at all potential points of entry.
To activate these optional features, you must install
VirusScan using the Custom Setup option.
5. Download Scan also examines other files you choose to
download, while the Internet Filter module detects
hostile Java applets and ActiveX controls. You can also
configure Internet Filter to block access to specific
undesirable sites. With this broad focus, VirusScan
seals all points of entry for viruses and other
malicious software.
6. New versions of VirusScan Command Line components give
VirusScan for Windows 95 and Windows 98 powerful and
up-to-date protection for command-line environments.
7. VShield will start looking for viruses in new mail that
you receive in your MAPI mailbox while you are logged
in to your MAPI mail server. In this way, VShield
provides you with continuous, real-time anti-virus
protection for your MAPI-based e-mail, whichever profile
you use. You can set VShield to clean any viruses it
finds in your e-mail, or have VShield delete or move the
infected files to a quarantine folder.
8. VirusScan's heuristic scanning technology evaluates the
probability that a file or a macro might be infected by
a new, unidentified virus. You can choose to use
heuristic scanning to look for file-infecting viruses,
macro viruses, or both.
9. A revamped VShield Security module allows you to protect
individual property pages for any VShield module against
unauthorized changes. Use it to keep others who use your
computer from making changes, or configure VShield with
those settings you want all users on your network to
have, then distribute password-protected settings files
to enforce a network-wide anti-virus security policy.
10. A rewritten VirusScan Scheduler replaces the AV Console
component included with previous VirusScan versions. It
now includes right-click functionality that allows you
to create new tasks and view activity logs directly
from the task list. An enhanced scheduling function
allows you to run your tasks at a random interval within
60 minutes of the time you set for them. This feature
allows you to avoid clogging network bandwidth with
simultaneous update or upgrade requests, or cross-
network scanning tasks.
____________
KNOWN ISSUES
1. Using DOS memory managers might cause VirusScan to
falsely detect viruses in memory. Since Windows 95 and
Windows 98 no longer require DOS memory managers, you
can eliminate false warnings by preceding each line in
your CONFIG.SYS file that includes settings for a DOS
memory manager with REM. This deactivates the memory
manager. To learn more about working with your
CONFIG.SYS file, see your DOS or Windows documentation.
2. If you use a password to protect your VShield
configuration options, VShield will ask you for that
password whenever you open the VShield Properties
dialog box. Use your mouse to click inside the text
box provided in order to enter the password--keyboard
shortcuts will not work. Microsoft acknowledges this
issue in its Knowledge Base Article ID #Q84133. Next,
click OK to use the password you enter. To close the
password verification dialog box without entering a
password, click Cancel.
3. Disk defragmentation programs move files as they work
to maximize hard disk efficiency. If you have VShield,
VirusScan, or other applications active during a disk
defragmentation operation, your disk defragmentation
program might tell you that it cannot find the active
application files. This is normal and does not mean
that the files do not exist. To avoid error messages
like this, close all open applications and disable
VShield, then run your disk defragmentation operation
again.
4. VShield will not detect infected files within a .zip
archive if you have Novell's Client32 installed on
your computer, and you:
* Use Universal Naming Convention (UNC) notation to
navigate to a directory on a NetWare server that
contains the infected archive; and
* Extract the infected files from the archive into
the same directory.
To avoid this problem, map a drive letter on your
computer to the target directory on the NetWare
server before you extract the compressed files. To
ensure maximum anti-virus protection for your NetWare
servers, install and use NetShield NetWare from
Network Associates.
5. If you ask VShield to prompt you for an action when
it finds a virus or a hostile object and you choose
to have VShield move the infected file to a quarantine
directory, VShield does not retain the correct
filename for the infected file. Instead, VShield
renames the infected file as it moves it. As a result,
the infected file appears on the hard disk with a
completely different filename and a .TMP extension.
If you tell VShield to move infected files to a
quarantine directory automatically, however, the
program will retain the correct file names.
6. If you start your computer with a VirusScan Emergency
Disk that you created, the Emergency Disk utility will
quit to a command prompt when it detects and cleans a
boot sector infection. To ensure that you have removed
all infecting viruses from your system, Network
Associates recommends that you use the Emergency Disk
to restart your computer again, then run another scan
operation, before you restart your computer normally.
7. VirusScan will detect and remove the XF/SIC.A virus
from infected Microsoft Excel documents. If you later
use Excel 97 to open a file from which VirusScan has
removed this virus, Excel will tell you that it cannot
find a particular worksheet within the file at a
particular cell reference. It will also tell you that
continuing could damage your worksheet and ask you
whether you want to cancel your request to open
the file. The worksheet name it mentions will vary.
You may safely open the worksheet. Click No in the
confirmation dialog box to continue.
To prevent the message from reappearing, open the
document in Excel, then click the Insert menu, point
to Name, then choose Define. In the dialog box that
appears, delete the entries Auto_Open and Auto_Close.
Save and close the file normally.
8. VirusScan's Internet Filter module does not block any
IP addresses you have asked it to block if you connect
to the Internet through America Online.
9. If you use software that blocks online advertisements,
such as Ads-Off, while you have VShield active, your
system could become unstable.
10. VShield will not detect infected files contained in a
.ZIP archive if:
* You use a WinZip plug-in for Netscape Navigator;
* You specify a particular directory into which you
want the WinZip plug in to extract the infected
files; and
11. VirusScan will not detect more than one infected file or
object embedded within Microsoft Office files.
12. VirusScan does not include support for right-click scan
operations on the My Documents folder in Windows 98.
13. If you install this version of VirusScan on a system
that already has NetShield's AntiVirus Console installed
on it, then later remove VirusScan from that system,
you'll see an error message that tells you VirusScan
cannot find a certain registry key. This error also
occurs if you install VirusScan first, then install
the AntiVirus Console, then remove VirusScan.
Both NetShield and VirusScan share particular registry
keys, but each program gives these keys different values.
To avoid this error, you can reinstall the AntiVirus
Console. Alternatively, you can back up your registry
file, install the AntiVirus Console, then restore your
registry file in order to preserve the correct settings.
The affected registry keys are:
HKLM\Software\McAfee\VirusScan
ConsoleEXE
szVSTempDir
dwDefaultServerPlatform
dwCommTimeOut
Product
szInstallDir
szProductVer
szSerialNum
szUpdateEXE
szVirusInfoURLValue
szVirDefVer
szVirDefDate
szEngineVer
____________
INSTALLATION
* INSTALLING VIRUSSCAN *
1. Insert the floppy disk or compact disc with your copy
of VirusScan into your floppy disk drive or CD-ROM
drive.
If you downloaded a compressed copy of VirusScan
from the Network Associates website or other electronic
service, create a temporary directory on your hard disk
or on a disk available on your network, then extract
the files you downloaded into that directory.
2. Click Start in the Windows taskbar, then choose Run.
3. Type x:\setup.exe in the Run dialog box to start the
installation utility from a floppy disk. To start the
utility from a CD-ROM, type x:\win95\setup.exe. In both
cases, x is the drive letter that designates your
floppy drive or your CD-ROM drive.
If you extracted files that you downloaded to your
hard disk or to a disk on your network, specify the
path to the correct directory. For example, type
C:\DOWNLOAD\SETUP.EXE.
4. Click OK to continue.
The VirusScan installation wizard will start. Follow
the instructions shown on each wizard pane to choose
the VirusScan options you want.
NOTE: The installation procedure outlined in the
VirusScan User's Guide has changed. To install the
VShield modules responsible for scanning your POP or
SMTP Internet mail, for scanning your corporate
cc:Mail system, or for filtering harmful ActiveX or
Java objects and dangerous Internet sites, you must
choose the Custom Installation option and select
each of these components.
The Typical or Compact installation will, however,
install the VShield component responsible for scanning
your MAPI-based email systems.
5. When you finish your installation, restart your
computer.
* PRIMARY PROGRAM FILES FOR VIRUSSCAN *
Note: The specific files you see on your computer will
depend on the type of license you purchased. Your
VirusScan copy might not include some of these files.
_INST32I.EX_ File used in uninstallation
_SETUP.DLL File used in uninstallation
_SETUP32.LIB File used in uninstallation
ADVGUI.DLL Advanced interface Dynamic Link
Library file
ALLDRIVE.VSC VirusScan settings file
AVCONSOL.EXE VirusScan Scheduler
AVCONSOL.INI VirusScan Scheduler settings file
BOOTSCAN.EXE Emergency Disk command line scanner
BROWSENT.DLL Dynamic Link Library file
CDFW800.DLL Dynamic Link Library file for
cc:Mail Scan
CDMW800.DLL Dynamic Link Library file for
cc:Mail Scan
CFGCOM32.DLL Dynamic Link Library file
CFW800.DLL Dynamic Link Library file for
cc:Mail Scan
CHKVXD.EXE VShield check file
CHRSET32.DLL Dynamic Link Library file for
cc:Mail Scan
CIW800.DLL Dynamic Link Library file for
cc:Mail Scan
CLEAN.DAT Virus definitions file
CMW800.DLL Dynamic Link Library file for
cc:Mail Scan
CONFIG32.EXE VirusScan Configuration Program
CONFWIZ.EXE VShield Configuration Wizard
CSH.DLL Dynamic Link Library file for Help
DEFAULT.VSC Default VirusScan settings file
DEFAULT.VSH Default VShield settings file
DEISL1.ISU File used in uninstallation
DMIALERT.DLL Dynamic Link Library File for DMI
Alerting
DOMAINX.DAT Banned URL definitions file
ECAPI.DLL Dynamic Link Library file for
E-Commerce
ECCOMMS.DLL Dynamic Link Library file for
E-Commerce
ECENGINE.EXE Electronic Commerce program
EDISK.EXE Emergency Disk Creation Wizard
program
EDWIZ16.EXE Emergency Disk utility program
EMALSCAN.DLL Dynamic Link Library file for
MAPI on-access and on-demand
scanning
EMCLEAN.DAT Emergency Disk Virus definitions
file
EMNAMES.DAT Emergency Disk Virus definitions
file
EMSCAN.DAT Emergency Disk Virus definitions
file
FAXFORM.TXT Form to purchase licensed version
of VirusScan--suitable for faxing
INETWH16.DLL Dynamic Link Library File
INETWH32.DLL Dynamic Link Library File
INTERNET.DAT Hostile Applet definitions file
IPSCANX.DAT Banned IP definitions file
LICENSE.DAT License definitions file
LICENSE.TXT License agreement file
MCARCHIV.DLL Dynamic Link Library file for
Compressed file scanning
MCKRNL32.DLL Dynamic Link Library file
MCSCAN32.DLL Dynamic Link Library file
MCUTIL32.DLL Dynamic Link Library file
MCZIP32.DLL Dynamic Link Library file for Send
Virus utility
MEDB632.DLL Dynamic Link Library file for
cc:Mail Scan
MESSAGES.DAT Message strings definitions file
MEW800.DLL Dynamic Link Library file for
cc:Mail Scan
MFLDR32.DLL Dynamic Link Library file
NAMES.DAT Virus definitions file
PACKING.LST Packing list file
PRESERVE.INI Preserved settings file
README.1ST License agreement file
RESELLER.TXT Network Associates resellers list
file
RWABS16.DLL Dynamic Link Library file for
Emergency Disk creation
RWABS32.DLL Dynamic Link Library file for
Emergency Disk creation
S95EXT.DLL Dynamic Link Library file
SCAN.DAT Virus definitions file
SCAN.EXE Command-line scan program
SCAN_C.VSC VirusScan settings file
SCAN32.EXE VirusScan graphical user interface
scanning program
SCAN86.EXE DOS command line scan program
SCANPM.EXE Protected mode command line scan
program
SCRSCAN.EXE Screen Saver scan program
SCRSCANP.DLL Dynamic Link Library file for
ScreenScan
SCRSCANR.DLL Dynamic Link Library file for
ScreenScan
SENDVIR.EXE Anti-Virus Research Submission
program
SETUP.EXE Setup program
SHUTIL.DLL Dynamic Link Library file
UNINST.INS File for Uninstall
VALIDATE.EXE Validation utility program
VIM32.DLL Dynamic Link Library file for
cc:Mail Scan
VMEFNW32.DLL Dynamic Link Library file for
cc:Mail Scan
VSC.LM Electronic Commerce settings file
VSCAN4.CNT VirusScan Help file
VSCAN4.HLP VirusScan Help file
VSCAN40.EXE VirusScan Launcher program
VSCLM.INI Electronic Commerce settings file
VSCONFIG.EXE VirusScan configuration program
file
VSECOMR.EXE Electronic Commerce program file
VSHWIN32.EXE VShield program file
VSSTAT.EXE VShield statistics program file
WBHOOK32.DLL Dynamic Link Library file
WCMDR.EXE File for Uninstall
WCMDR.INI File for Uninstall
WCMDRSIL.INI File for Uninstall
WEBSCANX.EXE VShield program file
WHATSNEW.TXT This document
Files installed in the WINDOWS directory:
SECCAST.ICO SecureCast icon file
Files installed in the WINDOWS\SYSTEM directory:
MCAFECOM.DLL Dynamic Link Library file
MCKRNL.VXD Virtual Device Driver
MCSCAN32.VXD Virtual Device Driver
MCUTIL.VXD Virtual Device Driver
VSHIELD.VXD Virtual Device Driver for VShield
VSHINIT.VXD Virtual Device Driver for VShield
* TESTING YOUR INSTALLATION *
The Eicar Standard AntiVirus Test File is a combined
effort by anti-virus vendors throughout the world to
implement one standard by which customers can verify
their anti-virus installations.
To test your installation, copy the following line
into its own file, then save the file with the name
EICAR.COM.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
The file size will be 69 or 70 bytes.
Next, start your anti-virus software and allow it to scan
the directory that contains EICAR.COM. When your software
scans this file, it will report finding the
EICAR virus.
Note that this file is NOT A VIRUS. Delete the file
when you have finished testing your installation to
avoid alarming unsuspecting users.
______________________
UNINSTALLING VIRUSSCAN
To uninstall VirusScan, click Start in the Windows taskbar,
choose Settings, point to Control Panel, and open. Open the
Add/Remove Programs utility from the folder. Highlight
VirusScan on the program list, and click Add/Remove to
uninstall VirusScan.
To remove VirusScan without using the uninstall utility,
follow these steps:
1. Remove references to VirusScan from your AUTOEXEC.BAT
and your SYSTEM.INI files. To do so, follow these
steps:
A. Start the Windows system editor. Click Start in the
Windows taskbar, then choose Run. Type SYSEDIT in
the Run dialog box, then click OK.
A set of text files will open on your screen. Your
AUTOEXEC.BAT file should appear as the first or
topmost window in this set. Click the title bar for
the SYSTEM.INI window to bring it to the foreground,
then locate this line:
[boot]SCRNSAVE.EXE=C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCRSCAN.EXE
B. Change the line to read:
[boot]SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\WINDOW~1.SCR
D. When you have restored your SYSTEM.INI file to its
original state, choose Save from the SYSEDIT File
menu to save your changes, then choose Exit from the
File menu to quit the SYSEDIT application.
2. Remove VirusScan icons from the Start menu. To do this,
follow these steps:
A. Click Start in the Windows taskbar, point to
Settings, then choose Taskbar.
B. Click the Start Menu Programs tab.
C. Click the Remove button.
D. Select the McAfee VirusScan folder in the list that
appears in the Remove Shortcuts/Folders dialog box,
then click Remove.
E. Windows will ask you to confirm your action. Click
Yes to continue.
F. Click Close to close the Remove Shortcuts/Folders
dialog box, then click OK to close the Taskbar
Properties dialog box.
3. Edit the Registry. To do this, follow these steps:
A. Start the Windows Registry editor. Click Start in
the Windows taskbar, then choose Run. Type REGEDIT
in the Run dialog box, then click OK.
B. Click + to expand the HKEY_LOCAL_MACHINE folder,
click + again to expand the SOFTWARE folder, then
click one more time to expand the CLASSES folder.
Next, delete these keys or entries:
\.vsc
\.vsh
\CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}
\CLSID\{9EF56D61-A50F-11ce-B105-0000C04B2D52}\InProcServer32
\CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}
\CLSID\{C88249A0-AD7E-11cf-AD53-444553540000}\InProcServer32
\comfile\shell\VirusScan
\Directory\shell\VirusScan
\Drive\shell\VirusScan
\Excel.Addin\shell\VirusScan
\Excel.Chart.5\shell\VirusScan
\Excel.Chart.8\shell\VirusScan
\Excel.Macrosheet\shell\VirusScan
\Excel.Sheet.5\shell\VirusScan
\Excel.Sheet.8\shell\VirusScan
\Excel.Template\shell\VirusScan
\Excel.Workspace\shell\VirusScan
\Excel.XLL\shell\VirusScan
\exefile\shell\VirusScan
\Office.Binder.8\shell\VirusScan
\Office.Binder.98\shell\VirusScan
\rtffile\shell\VirusScan
\VSConfigFile
\VSHConfigFile
\WinZip\shell\VirusScan
\Word.Document.6\shell\VirusScan
\Word.Document.8\shell\VirusScan
\Word.RTF\shell\VirusScan
\Word.RTF.8\shell\VirusScan
\Word.Template\shell\VirusScan
\Word.Template.8\shell\VirusScan
C. Move to the HKEY_LOCAL_MACHINE\SOFTWARE folder, then
delete these keys or entries:
1. McAfee
\Scan95
\ScreenScan
2. \Microsoft\Windows\CurrentVersion\AppPaths\
\SCAN32.EXE
\SCRSCAN.EXE
\VSHWIN32.EXE
3. \Microsoft\Windows\CurrentVersion\
Controls Folder\Display\shellex
\PropertySheetHandlers
\ScrScanP
4. \Microsoft\Exchange\Client\Extensions\
\Exchange Scan="4.0;C:\Program Files
\Network Associates\McAfee VirusScan
\emalscan.dll;1;11000000000000;1110000;"
\Outlook Setup Extension=
"4.0;Outxxx.dll;7;000000000000000;0000000000;OutXXX"
5. \Microsoft\Windows\CurrentVersion\Run\
\AvconsoleExe="C:\Program Files\Network Associates\
McAfee VirusScan\avconsole.exe /minimize"
\McAfeeWebScanX="C:\Program Files\Network Associates\
McAfee VirusScan\WebScanX.exe"
\Vshwin32EXE="C:\Program Files\Network Associates\
McAfee VirusScan\VSHWIN32.EXE"
\VsStatEXE="C:\Program Files\Network Associates\
McAfee VirusScan\VSSTAT.EXE"
6. \Microsoft\Windows\CurrentVersion\RunServices
\Vshwin32EXE="C:\Program Files\Network Associates\
McAfee VirusScan\VSHWIN32.EXE"
7. \Microsoft\Windows\CurrentVersion\Controls Folder\
\Display\shellex\PropertySheetHandlers\ScrScanP\
@="{C88249A0-AD7E-11cf-AD53-444553540000}"
8. \Microsoft\Windows\CurrentVersion\SharedDLLs
\C:\WINDOWS\SYSTEM\MCAFECOM.DLL
\C:\WINDOWS\SYSTEM\MCKRNL.VXD
\C:\WINDOWS\SYSTEM\MCSCAN32.VXD
\C:\WINDOWS\SYSTEM\MCUTIL.VXD
\C:\WINDOWS\SYSTEM\VSHIELD.VXD
\C:\WINDOWS\SYSTEM\VSHINIT.VXD
9. \Microsoft\Windows\CurrentVersion\Uninstall
\McAfee VirusScan
D. Move to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\
Services\VxD\ folder, then delete these keys or entries:
\VSHINIT
4. Restart your computer.
5. Delete VirusScan files and directories. To do so,
follow these steps:
A. Click Start, point to Programs, then choose Windows
Explorer.
B. Locate the folder that contains your copy of
VirusScan. If you chose the default installation
options, you should find VirusScan in this
directory path:
Program Files\Network Associates\McAfee VirusScan
C. Remove the following files from the \Windows\system
directory on your hard disk:
MCAFECOM.DLL
MCKRNL.VXD
MCSCAN32.VXD
MCUTIL.VXD
VSHIELD.VXD
VSHINIT.VXD
You have now removed VirusScan from your system.
Restart your computer to have your changes take effect.
_____________
DOCUMENTATION
For more information, refer to the users guides for each
product included on the CD-ROM or available from Network
Associates electronic services. Each product user's guide
is saved in Adobe Acrobat Portable Document Format (.PDF).
You can view and print this document with Adobe's Acrobat
Reader. PDF files can include hypertext links and other
navigation features to assist you in finding answers to
questions about your Network Associates product.
To download Adobe Acrobat Reader from the World Wide Web,
visit Adobe's website at:
http://www.adobe.com/prodindex/acrobat/readstep.html
To download documentation for Network Associates anti-virus
software, visit the Network Associates FTP site at:
ftp://ftp.nai.com/pub/manuals/total_virus_defense
Additional contact information appears in the following
section.
Documentation feedback is welcome. Send e-mail to
tvd_documentation@nai.com.
__________________________
FREQUENTLY ASKED QUESTIONS
Regularly updated lists of frequently asked questions
about Network Associates products are also available on
the Network Associates website, on CompuServe, and on
America Online.
Q: I use both cc:Mail and a MAPI-compliant e-mail system
at work. Can I have VShield scan both of these systems
at once or switch back and forth between them?
A: VShield's E-Mail Scan module includes support for only
one e-mail client at any given time. You may not, for
example, have the E-Mail Scan module scan both a
MAPI-compliant mailbox and a Lotus cc:Mail server at
the same time. You can, however, scan first one mailbox
then switch the E-Mail Scan module so that it scans the
other mailbox. You can also have VShield's E-Mail Scan
module examine your cc:Mail mailbox in the background,
then have VirusScan's E-Mail Scan on-demand component
begin scanning your MAPI mailbox.
Q: I am installing new software on my computer, and the
manual recommends disabling any anti-virus software.
How do I disable VShield without uninstalling it?
A: Right-click the VShield icon located in your system
tray next to the system clock, point to Enable, then
choose System Scan from the shortcut menu. If System
Scan does not have a checkmark beside it in this menu,
it is already disabled. After you install your new
software, reactivate VShield by right-clicking the
VShield icon in the system tray, pointing to Enable,
then choosing System Scan from the shortcut menu. If
System Scan has a checkmark next to it in the menu,
it is enabled.
Q: I've activated VirusScan's heuristic scanning option,
and now it identifies some viruses as "unknown." Why?
A: VirusScan's heuristic scanning feature looks for certain
"virus-like" characteristics in the files it scans. When
it finds a sufficient number of these characteristics,
VirusScan concludes that the file is infected. This
powerful scanning technique allows VirusScan to discover
viruses that are so new that they do not yet have names
or identities. VirusScan will, however, identify viruses
by name when they match its list of known viruses.
Q: When I choose Virus List in VirusScan, I get a message
that tells me it's unable to connect. What's happening?
A: Network Associates now stores its virus information in
a web-based Virus Information Library. To use this
feature, you must have a network-based or dial-up
Internet connection and web browsing software installed
on your computer. If you still cannot connect, start
your web browser and enter this address into the text
box at the top of your browser window:
http://vil.mcafee.com/villib/alpha.asp
Q: I have an existing VirusScan installation with a lot
of custom settings. Can I keep these settings when I
upgrade to the current VirusScan version?
A: The Setup utility for VirusScan v4.0.3 or later will
offer to preserve your settings from previous versions
during installation. This feature will preserve any
configuration options you set in v3.2.0 or later. It
will make every attempt to preserve settings for
VirusScan 3.x versions earlier than v3.2.0, but
Network Associates does not support this feature for
versions earlier than v3.2.0. Setup will NOT preserve
settings from VirusScan v2.x, nor from any version of
WebScanX.
Q: How can I get Setup to remove all files, including
settings files, from existing VirusScan versions when
I run a silent installation?
A: To have Setup remove all VirusScan files during a silent
installation, open the SETUP.ISS file that you use for
the silent installation, then find the section that
reads:
[DLG_12110-0]
Result=0
If the value shown for Result is zero, Setup will
preserve your VirusScan settings. If the value is 1,
Setup will remove VirusScan completely. Change the
value to reflect the action you want Setup to take,
then save and close SETUP.ISS. To learn more about
recording and running a silent installation, consult
the VirusScan User's Guide.
Q: When VirusScan detects an infection in files compressed
in .CAB or ZIP-SFX format, why doesn't VirusScan clean,
delete, or move the files?
A: Because files compressed in .CAB and ZIP-SFX formats can
include a Microsoft Authenticode certificate, altering
the files can render them unusable. To avoid this
possibility, VirusScan does not clean, delete, or move
infected files compressed in .CAB or ZIP-SFX format.
Network Associates recommends that you decompress any
infected files compressed in these formats, then run
VirusScan again to clean the uncompressed files.
Q: VirusScan detected a virus on my system, but it is not
one of the default files listed in its Program
Extensions dialog box. Therefore, I suspect it might be
a false detection. What can I do to verify a detected
virus?
A: If you suspect a false detection on a non-executable
file, run VirusScan's command line scanner, SCAN.EXE,
to verify the infection. If VirusScan detects a virus
and SCAN.EXE does not, download the latest .DAT file
update, then scan your system again. If VirusScan still
detects a virus that you suspect is a false detection,
please report the issue to Network Associates technical
support.
Q: I would like to purchase and download the latest
version of VirusScan from one of the Network Associates
electronic services, but I do not want to give my
credit card information over the Internet for
security purposes. Can I purchase VirusScan via modem
and download the product via the Internet?
A: Yes. The first time you download VirusScan, the Network
Associates SecureCast wizard will prompt you to select
the transmission method you prefer to use to download
your Network Associates product. It will also prompt
you to transmit your encrypted credit card information.
At the Transaction Connection Type dialog box, select
Internet to download your order via the Internet.
At the Security Connection Type dialog box, select
Direct Dial Modem to transmit your credit card
information via modem.
Q: I have created my own Emergency Disk without using
the Emergency Disk creation utility. Is there anything
I need to do to be sure that it will work properly?
A: To have your own Emergency Disk start scanning properly,
you must create a CONFIG.SYS file on the boot diskette,
then add these lines:
DEVICE=HIMEM.SYS
DOS=HIGH
Add the HIMEM.SYS file from the \WINDOWS directory to
the boot diskette.
NOTE: For detailed instructions on creating an
Emergency Disk, refer to the instructions outlined in
the VirusScan User's Guide, which you'll find on the
Network Associates website.
NOTE ALSO: If you copied the files EMNAMES.DAT,
EMCLEAN.DAT, and EMSCAN.DAT to the Emergency Disk you
created (as it states in the User's Guide), you must
rename these files to NAMES.DAT, CLEAN.DAT, and
SCAN.DAT, respectively, in order for the Emergency Disk
to function properly.
Q: What error codes can CHKVXD.EXE return?
A: Possible CHKVXD.EXE error level codes, along with their
descriptions, are:
65535(-1)= VShield not installed
0 = VShield enabled
1 = VShield disabled
Q: How can I tell that ScreenScan is working?
A: ScreenScan does not tell you when it scans your system,
but if you enable the logging option when you configure
it, VirusScan will record all ScreenScan activity in
its log file.
Q: Can I update Network Associates data (.DAT) files to
detect new viruses?
A: Yes, you can install and use the Network Associates
SecureCast client software to receive updated files
automatically, as soon as they become available. For
details, consult the VirusScan User's Guide.
If you need additional assistance with downloading,
contact Network Associates Download Support. Contact
information appears later in this file.
Q: Why are additional extensions added to the Program Files
Only list?
A: As the Network Associates Anti-Virus Emergency Response
Team finds viruses that can infect new file types, it
adds new extensions to the default extensions list to
enhance security. For instance, new viruses can infect
Microsoft Office binder files, so the default extensions
list now includes the file extension for these binder
files so that VirusScan will examine them for viruses.
Q: I thought I could right-click Microsoft Office .DO?,
.XL?, or .OBD files, then choose Scan for Viruses
from a shortcut menu in order to start a scan operation.
I have Microsoft Office installed, but when I try this,
it doesn't work. Why not?
A: If you installed Microsoft Office after you installed
VirusScan, you might need to reinstall VirusScan to
enable context-sensitive shortcut menus.
Q: I am having trouble installing Service Pack 2 for
Microsoft Exchange Client 5.0. Why?
A: VShield uses files which the upgrade needs to write to.
In order to successfully install the service pack,
you must first close VShield by right-clicking the
VShield icon the Windows system tray, then selecting
Exit. You will now be able to successfully run the
service pack upgrade.
Q: I'm running Microsoft Exchange Client 5.0, and
VirusScan's On-Demand scan icons aren't showing on my
taskbar. Why?
A: If you're using Microsoft Exchange Client 5.0, the two
Exchange On-Demand scan icons will not appear on the
Microsoft Exchange toolbar. This is due to a limitation
in Exchange. Please refer to your Exchange documentation
for instructions on how to place these icons onto the
taskbar within Exchange.
Q: I installed VirusScan v4.0.3 and now I can't scan my
cc:Mail mailbox, or Internet mail sent via a POP or
SMTP server. What happened?
A: Setup no longer installs by default the VShield
modules responsible for scanning your POP or SMTP
Internet mail, for scanning your corporate cc:Mail
system, or for filtering harmful ActiveX or Java
objects and dangerous Internet sites. To install these
components, you must choose the Custom Installation
option during Setup, then select which of these
components you want to install. This procedure differs
from that outlined in the VirusScan User's Guide.
The Typical or Compact installation will, however,
install the VShield component responsible for scanning
your MAPI-based email systems.
_____________________________
CONTACTING NETWORK ASSOCIATES
On December 1, 1997, McAfee Associates merged with
Network General Corporation, Pretty Good Privacy, Inc.,
and Helix Software, Inc. to form Network Associates, Inc.
The combined Company subsequently acquired Dr Solomon's
Software and CyberMedia, Inc.
Network Associates continues to market and support the
product lines from each of the former entities. You may
direct all questions, comments and technical support
requests to the Network Associates Customer Care department
at any of the addresses or phone numbers listed below.
Contact the Network Associates Customer Care
department at:
1. Phone (408) 988-3832
Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time
2. Fax (408) 970-9727
24-hour, Group III Fax
3. Fax-back automated response system (408) 346-3414
Send correspondence to any of the following Network
Associates locations:
Network Associates Corporate Headquarters
3965 Freedom Circle
McCandless Towers
Santa Clara, CA 95054
Phone numbers for corporate-licensed customers:
Phone: (408) 988-3832
Fax: (408) 970-9727
Phone numbers for retail-licensed customers:
Phone: (972) 278-6100
Fax: (408) 970-9727
Network Associates offices outside the United States:
Network Associates Australia
Level 1, 500 Pacific Highway
St. Leonards, NSW
Sydney, Australia 2065
Phone: 61-2-8425-4200
Fax: 61-2-9439-5166
Network Associates Austria
Pulvermuehlstrasse 17
Linz, Austria
Postal Code A-4040
Phone: 43-732-757-244
Fax: 43-732-757-244-20
Network Associates Belgium
Bessenveldtstraat 25a
Diegem, Belgium - 1831
Phone: 32-3-716-4070
Fax: 61-2-716-4770
Network Associates do Brasil
Rua Geraldo Flausino Gomez 78
Cj. - 51 Brooklin Novo - Sπo Paulo
SP - 04575-060 - Brasil
Phone: (55 11) 5505 1009
Fax: (55 11) 5505 1006
Network Associates Canada
139 Main Street, Suite 201
Unionville, Ontario
Canada L3R 2G6
Phone: (905) 479-4189
Fax: (905) 479-4540
Network Associates People's Republic of China
New Century Office Tower, Room 1557
No. 6 Southern Road Capitol Gym
Beijing
People's Republic of China 100044
Phone: 86 10 6849-2650
Fax: 86 10 6849-2069
NA Network Associates Oy
Sinikalliontie 9, 3rd Floor
02630 Espoo
Finland
Phone: 358 9 5270 70
Fax: 358 9 5270 7100
Network Associates France S.A.
50 Rue de Londres
75008 Paris
France
Phone: 33 1 44 908 737
Fax: 33 1 45 227 554
Network Associates GmbH
Ohmstra▀e 1
D-85716 Unterschlei▀heim
Deutschland
Phone: 49 (0)89/3707-0
Fax: 49 (0)89/3707-1199
Network Associates Hong Kong
19th Floor, Matheson Centre
3 Matheson Way
Causeway Bay
Hong Kong 63225
Phone: 852-2832-9525
Fax: 852-2832-9530
Network Associates Srl
Centro Direzionale Summit
Palazzo D/1
Via Brescia, 28
20063 - Cernusco sul Naviglio (MI)
ITALY
Phone: 39 (0)2 9214 1555
Fax: 39 (0)2 9214 1644
Network Associates Japan, Inc.
Toranomon 33 Mori Bldg.
3-8-21 Toranomon Minato-ku
Tokyo 105-0001 Japan
Phone: 81 3 5408 0700
Fax: 81 3 5408 0780
Network Associates Latin America
150 South Pine Island Road, Suite 205
Plantation, Florida 33324
United States
Phone: (954) 452-1731
Fax: (954) 236-8031
Network Associates de Mexico
Andres Bello No. 10, 4 Piso
4th Floor
Col. Polanco
Mexico City, Mexico D.F. 11560
Phone: (525) 282-9180
Fax: (525) 282-9183
Network Associates International B.V.
Gatwickstraat 25
1043 GL Amsterdam
The Netherlands
Phone: 31 20 586 6100
Fax: 31 20 586 6101
Network Associates Portugal
Av. da Liberdade, 114
1269-046 Lisboa
Portugal
Phone: 351 1 340 4543
Fax: 351 1 340 4575
Net Tools Network Associates South Africa
Bardev House, St. Andrews
Meadowbrook Lane
Epson Downs, P.O. Box 7062
Bryanston, Johannesburg
South Africa 2021
Phone: 27 11 706-1629
Fax: 27 11 706-1569
Network Associates South East Asia
78 Shenton Way
#29-02
Singapore 079120
Phone: 65 222-7555
Fax: 65 222-7555
Network Associates Spain
Orense 4, 4a Planta.
Edificio Trieste
28020 Madrid
Spain
Phone: 34 91 598 18 00
Fax: 34 91 556 14 04
Network Associates Sweden
DatavΣgen 3A
Box 596
S-175 26 JΣrfΣlla
Sweden
Phone: 46 (0) 8 580 88 400
Fax: 46 (0) 8 580 88 405
Network Associates AG
Baeulerwisenstrasse 3
8152 Glattbrugg
Switzerland
Phone: 0041 1 808 99 66
Fax: 0041 1 808 99 77
Network Associates Taiwan
Suite 6, 11F
No. 188, Sec. 5
Nan King E. Rd.
Taipei, Taiwan, Republic of China
Phone: 886-2-27-474-8800
Fax: 886-2-27-635-5864
Network Associates International Ltd.
Minton Place, Victoria Street
Windsor, Berkshire
SL4 1EG
United Kingdom
Phone: 44 (0)1753 827 500
Fax: 44 (0)1753 827 520
Or, you can receive online assistance through any
of the following resources:
1. Internet E-mail: support@nai.com
2. Internet FTP: ftp.nai.com
3. World Wide Web: http://support.nai.com
4. America Online: keyword MCAFEE
5. CompuServe: GO NAI
To provide the answers you need quickly and efficiently,
the Network Associates technical support staff needs
some information about your computer and your software.
Please have this information ready when you call:
- Program name and version number
- Computer brand and model
- Any additional hardware or peripherals connected to
your computer
- Operating system type and version numbers
- Network name, operating system, and version
- Network card installed, where applicable
- Modem manufacturer, model, and baud, where applicable
- Relevant browsers or applications and their version
numbers, where applicable
- How to reproduce your problem: when it occurs, whether
you can reproduce it regularly, and under what
conditions
- Information needed to contact you by voice, fax, or
e-mail
We also seek and appreciate general feedback.
* FOR PRODUCT UPGRADES *
To make it easier for you to receive and use Network
Associates products, we have established a reseller's
program to provide service, sales, and support for our
products worldwide. For a listing of resellers, see the
resellers.txt file or contact Network Associates
Customer Care for resellers near you.
* FOR REPORTING PROBLEMS *
Network Associates prides itself on delivering a
high-quality product. If you find any problems, please
take a moment to review the contents of this file. If
the problem you've encountered is documented, there is
no need to report the problem to Network Associates.
If you find any feature that does not appear to
function properly on your system, or if you believe
an application would benefit greatly from enhancement,
please contact Network Associates with your suggestions
or concerns.
* FOR ON-SITE TRAINING INFORMATION *
Contact Network Associates Customer Service at
(800) 338-8754.
* NETWORK ASSOCIATES BETA SITE *
Get pre-release software, including .DAT files, through
http://www.avertlabs.com. You will have access to Public
Beta and External Test Areas. Your feedback will make
a difference.