Release Notes for McAfee VirusScan v4.5 Anti-Virus Software for Windows 95, Windows 98, Windows NT Workstation v4.0, and Windows 2000 Professional Copyright (c) 1992-2000 Networks Associates Technology, Inc. All Rights Reserved. //////////////////////////////////////////////// Version Release Date: March 8, 2000 Includes Engine Version: 4.0.50 Includes .DAT File Version: 4064 //////////////////////////////////////////////// Thank you for using McAfee VirusScan anti-virus software. This Read Me file contains important information regarding this release. McAfee strongly recommends that you read the entire document. McAfee welcomes your comments and suggestions. Please use the information provided in this file to contact Customer Service, technical support, or the documentation team for this product. ****IMPORTANT NOTE**** Current SuperDAT versions will not function with VirusScan v4.5 software. You may use the AutoUpdate utility to download incremental .DAT file releases. SuperDAT v1.2, when released, will include support for this VirusScan version. ***** ___________________ WHAT'S IN THIS FILE - NF1 New Features - DC1 Documentation - SR1 System Requirements - IN1 Installation - IN2 Testing Your Installation - KN1 Known Issues - FQ1 Frequently Asked Questions - NA1 Contacting Network Associates - NA2 Download Support - NA3 For Product Upgrades - NA4 For Reporting Problems - NA5 For On-Site Training Information - NA6 Network Associates Beta Site - NA7 AVERT Anti-Virus Research Site - YC1 Statement of Year 2000 Compliance - CT1 Copyright and Trademark Attributions - CT2 Trademarks - CT3 License Agreement NOTE: A unique identifying code precedes each heading in this file. To jump to a particular heading within the file, copy the three-character code -- NA1, for example -- from the list above into your text editor's Find dialog box, or equivalent, then search for the identifying code to move directly to that heading. __________________ NF1 - NEW FEATURES * VirusScan v4.5 anti-virus software now includes complete platform support for Windows 95, Windows 98, Windows NT Workstation v4.0, and Windows 2000 Professional in a single product installation. All platforms include VShield scanning technology and allow you to install optional modules that look for viruses and other malicious code that arrives via Messaging Application Programming Interface (MAPI) and Simple Mail Transfer Protocol (SMTP) mail systems, file downloads from the Internet, potentially dangerous websites, and other sources. The VShield technology in this release brings robust protection from harmful Java applets and ActiveX controls to the Windows NT Workstation v4.0 and Windows 2000 Professional platforms for the first time. * New AutoUpdate technology in this release now allows VirusScan software to download incremental .DAT file updates, which reduces the time and bandwidth you need to ensure that your software has the very latest virus definition data available. * VirusScan software now incorporates support for existing and forthcoming McAfee software management solutions, including Management Edition v2.0 and v2.5 software, and ePolicy Orchestrator v1.0 software. * This release includes the latest available Olympus scan engine technology, which includes such features as: - Enhanced PowerPoint .PPT file cleaning. This allows VirusScan to clean both infected .PPT files and embedded .PPT files - Windows 32-bit virus detection in memory - Detection and cleaning for files that have no extensions - Enhanced .ZIP file cleaning. This allows VirusScan to remove viruses from self-extracting WinZip archives * Download Scan, an enhanced VShield module available for the first time on the Windows NT Workstation v4.0 and Windows 2000 Professional platforms, examines any file you choose to download from the Internet, looking for viruses, hostile Java applets, and dangerous ActiveX controls. An E-Mail Scan module performs the same functions for mail attachments you receive via MAPI and SMTP mail systems. The VShield Internet Filter module, meanwhile, blocks potentially dangerous Internet and websites from desktop access. * The VShield scanner will start looking for viruses in new mail that you receive in your MAPI mailbox while you are logged into your MAPI mail server. This provides you with continuous, real-time anti-virus protection for your MAPI-based e-mail, whichever profile you use. You can set the background scanner to clean any viruses it finds in your e-mail, or have it delete or move infected files to a quarantine folder. * An enhanced VShield Security module allows you to protect individual property pages for any VShield module against unauthorized changes. Use it to keep others who use your computer from making changes, or configure and lock down the VShield scanner with those settings you want all users on your network to have to enforce a consistent anti-virus policy across your enterprise. * You can install VirusScan software on Windows NT Workstation v4.0 and Windows 2000 Professional systems so that it runs in a new Maximum Security mode. This mode prevents users without Administrator rights to the target computer from configuring or disabling any VirusScan component. ___________________ DC1 - DOCUMENTATION McAfee, a division of Network Associates, Inc., provides each of its products with an extensive set of documentation, which usually consists of one or more product guides saved in Adobe Acrobat Portable Document Format (.PDF), and an online help system, whose form can vary, depending on the platform on which the product runs. Copiesof the product documentation come with the product CD-ROM or are available on the Network Associates website. A copy of the latest version of the free Acrobat Reader also comes with the product CD-ROM. To download other Acrobat Reader versions, visit the Adobe website at: http://www.adobe.com/prodindex/acrobat/readstep.html McAfee VirusScan software includes this documentation set: * A Getting Started Guide. This guide introduces the product, provides installation instructions, outlines product features, and provides a brief overview. In many cases, a printed version of this guide will accompany the product CD-ROM. * A User's Guide. McAfee User's Guides document all product functions extensively, and discuss how best to use your McAfee product to accomplish your tasks. An Adobe Acrobat .PDF version of the document is stored on the product CD-ROM. You can also download a copy in .PDF format from the Network Associates FTP site. * An Administrator's Guide. Administrator's Guides describe how to deploy, maintain and administer McAfee server-based products in a networked environment. An Adobe Acrobat .PDF version of the document is stored on the product CD-ROM. You can also download a copy in .PDF format from the Network Associates FTP site. * An online help system. Online help gives you quick access to hints and tips about how to use your VirusScan software. The software also includes context-sensitive online help. To see brief, descriptive help topics for buttons, lists or other elements within dialog boxes, right-click each item, then click the What's This? menu item that appears. * A LICENSE.TXT file. This file outlines the terms under which you may use McAfee products. Read it carefully. If you install the McAfee product, you agree to the license terms. * This README.TXT file. This file describes last-minute additions or changes to the documentation, lists any known behavior or other issues with the product release, and often supplements the Acrobat .PDF guides by outlining new product features in incremental product updates. To comment, ask about, or suggest improvements to McAfee anti-virus product documentation, send e-mail to: tvd_documentation@nai.com To get answers to your technical support questions, send messages to: techsupport@mcafee.com To ask about your eligibility for updates and upgrades, check your registration, or ask general questions related to McAfee anti-virus software, send messages to: services_corporate_division@nai.com _________________________ SR1 - SYSTEM REQUIREMENTS VirusScan v4.5 anti-virus software will install and run on any IBM PC or PC-compatible computer equipped with: * A processor equivalent to at least an Intel Pentium-class or compatible processor. McAfee recommends an Intel Pentium processor or Celeron processor running at a minimum of 166 MHz. * A CD-ROM drive. If you downloaded your copy of VirusScan software, this is an optional item. * At least 40MB of free hard disk space for a full installation. McAfee recommends 75MB. * At least 16MB of free random-access memory (RAM). McAfee recommends at least 20MB. * Microsoft Windows 95, Windows 98, Windows NT Workstation v4.0 with Service Pack 4 or later, or Windows 2000 Professional. McAfee recommends that you also have Microsoft Internet Explorer v4.0.1 or later installed, particularly if your system runs any Windows 95 version. __________________ IN1 - INSTALLATION To install VirusScan software, follow these steps: 1. Insert the compact disc with your VirusScan copy into your CD-ROM drive. If you downloaded a compressed copy of the software from the Network Associates website or other electronic service, create a temporary directory on your hard disk or on a disk available on your network, then extract the files you downloaded into that directory. 2. Click Start in the Windows taskbar, then choose Run. 3. Type x:\setup.exe in the Run dialog box to start the installation utility from a CD-ROM. Here, x is the drive letter that designates your CD-ROM drive. If you extracted files that you downloaded to your hard disk or to a disk on your network, specify the path to the correct directory. For example, type: c:\download\setup.exe 4. Click OK to continue. Before it continues with the installation, Setup first asks to see whether it should check to see whether you have previous VirusScan versions installed on your computer. 5. Click Yes to continue. If you click No, Setup quits immediately. If you have a previous VirusScan version on your system, Setup will find it immediately. It will then remove the previous version, but will temporarily preserve the configuration options you set for that version if your system is running Windows 95 or Windows 98. A later step will allow you to transfer those options to the current VirusScan installation. Setup will next verify that your computer has Microsoft Installer v1.1 already installed. If it does not, Setup will install the files it needs to continue with the installation, then will ask you to restart your computer. If you have the correct MSI version on your computer and do not have any previous VirusScan versions installed on your system, Setup will display its first wizard panel immediately. Skip to Step 6 to continue. If Setup does not find MSI v1.1 on your computer, it installs files that it needs to continue the installation, then prompts you to restart your computer. Click Restart System. If Setup removed a previous VirusScan version from your system, Setup will also ask you to restart your computer. When your computer restarts, Setup will continue from where it left off. 6. The welcome message asks you to read this README.TXT document. Click Next> to continue. 7. Read the terms of the license agreement. If you do not agree to the license terms, select I Do Not Agree to the Terms of the License Agreement, then click Next>. Setup will stop immediately. Otherwise, select I Agree to the Terms of the License Agreement, then click Next> to continue with the installation. 8. Setup next checks to see whether incompatible software exists on your computer. If you have no other anti-virus software on your system, Setup then moves to the Security Type panel for Windows NT Workstation or Windows 2000 Professional systems. Otherwise, it will display the Setup Type panel. Skip to Step 12 to continue. If your computer runs Windows 95 or Windows 98, Setup also gives you the option to preserve the VShield configuration settings you chose for the earlier version. NOTE: If your computer runs Windows NT Workstation v4.0 or Windows 2000 Professional, Setup will remove the previous VirusScan version, but will not preserve any previous VShield scanner settings. 9. Select Preserve On Access Settings, if the option is available, then click Next> to continue. If Setup finds incompatible software, it will display a wizard panel that gives you the option to remove the conflicting software. If you have no incompatible software on your system and your computer runs Windows 95 or Windows 98, skip to Step 12 to continue with the installation. If you have no incompatible software and your system runs Windows NT Workstation v4.0 or Windows 2000 Professional, skip to Step 11 to continue. Otherwise, continue with Step 10. 10. Select the checkbox shown, then click Next>. Setup will start the uninstallation utility that the conflicting software normally uses, and allow it to remove the software. NOTE: The uninstallation utility might tell you that you need to restart your computer to completely remove the other software. You do not need to do so to continue with your VirusScan installation —- so long as the other software is not active, Setup can continue without conflicts. 11. If your system runs Windows 95 or Windows 98, skip to Step 12 to continue the installation. Otherwise, Setup asks you whether you want to run this VirusScan installation with Maximum or Standard security. These options mean: * Use Maximum Security. This option prevents users that do not have Administrator rights to this computer from setting any VirusScan configuration options or from disabling any VirusScan component. VirusScan tasks and scan operations will otherwise occur normally. * Use Standard Security. This option allows any user that has rights to this computer to stop and start any VirusScan component, and to set configuration options for any component or task. Click the button for the option you prefer, then click Next> to continue. 12. Select Typical in the Setup Type wizard panel, then click Next>. The typical installation copies these VirusScan components to your hard disk: * The VirusScan application * The VShield background scanning component, but without the E-Mail Scan, Download Scan or Internet Filter modules. To install these modules, you must choose the Custom installation option. * The Alert Manager Client configuration component * The VirusScan Console * The AutoUpdate and AutoUpgrade components * VirusScan Command Line * The Emergency Disk wizard The VirusScan User's Guide describes custom installations in more detail. 13. Setup tells you that it is ready to begin the installation. Click Install to continue. If you have a previous VirusScan version on your computer, Setup first removes it. Setup then copies new program files to your hard disk. When Setup completes the file installation, it will offer to have VirusScan examine your hard disk and memory for viruses before it takes you through the initial product configuration. NOTE: If you had Setup remove a previous VirusScan version, the application will start and scan your system AFTER you restart your computer. 14. Leave the Scan Memory for Viruses Before Configuring checkbox clear, then click the Skip Config button. The VirusScan User's Guide describes the VirusScan configuration options in more detail. For this version, Setup will NOT scan your memory for viruses at this stage unless you select the checkbox, then click Configure. 15. Setup tells you that it has completed the installation successfully. Leave the Start On-Access Scanner checkbox selected, then click Finish. If your computer is running Windows NT Workstation v4.0 or Windows 2000 Professional, Setup starts the VShield background scanner immediately. If you are running Windows 95 or Windows 98, the VShield scanner will start after you restart your computer. * IN2 - TESTING YOUR INSTALLATION * The EICAR Standard AntiVirus Test File is a combined effort by anti-virus vendors throughout the world to implement one standard by which customers can verify their anti-virus installations. To test your installation, copy the following line into its own file, then save the file with the name EICAR.COM. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* The file size will be 68 or 70 bytes. Next, start your anti-virus software and allow it to scan the directory that contains EICAR.COM. When your software scans this file, it will report finding the EICAR test file. Note that this file is NOT A VIRUS. Delete the file when you have finished testing your installation to avoid alarming unsuspecting users. __________________ KN1 - KNOWN ISSUES NOTE: A 12- to 15-digit code appears in brackets after most of the issues listed in this section. The code is the Solution ID that identifies a document that describes the issue in detail, and gives its current status. The document is available online in the Network Associates KnowledgeBase. To log in to the KnowledgeBase, connect to this Network Associates site: http://www.nai.com/asp_set/support/technical/login.asp You will need a customer password to get access to the Knowledgebase. Contact your sales representative, Network Associates Customer Service, or visit this website: http://www.nai.com/asp_set/support/technical/registration.asp Once you log in, you can use Solution ID to search for the correct document. See the instructions given at the site for more information. 1. If you have never installed software that uses the Microsoft Installer (MSI) utility, or if you installed Microsoft Office 2000 or other software that uses MSI v1.0, the VirusScan Setup utility must first install certain files it needs for the VirusScan installation. Setup then will ask you to restart your computer. After you do so, you may continue with the installation. [1.0.8701794.2574583] 2. Current SuperDAT versions will not function with VirusScan v4.5 software. You may still use the included AutoUpdate utility to download and install new incremental .DAT file updates, and you may also install new .DAT files by stopping the VShield scanner or the McShield service, then copying the files to the appropriate directory. To learn more about this process, see the README.TXT file that accompanies each week's .DAT file release. [1.0.8701804.2574583] 3. If you use Novell Client32 on your system for access to Novell NetWare servers, McAfee recommends that you reboot your system after you install VirusScan software in order to activate all VirusScan components with proper access to Novell NetWare servers. [1.0.8702822.2574645] 4. Using DOS memory managers might cause the VirusScan software to falsely detect viruses in memory. Since Windows 95 and Windows 98 no longer require DOS memory managers, you can eliminate false warnings by preceding each line in your CONFIG.SYS file that includes settings for a DOS memory manager with REM. This deactivates the memory manager. To learn more about working with your CONFIG.SYS file, see your DOS or Windows documentation. [1.0.8702832.2574645] 5. Disk defragmentation programs move files as they work to maximize hard disk efficiency. If you have the VShield scanner, the VirusScan application, or another application active during a disk defragmentation operation, your defragmentation program might tell you that it cannot find the active application files. This is normal and does not mean that the files do not exist. To avoid error messages like this, close all open applications and disable the VShield scanner, then run your disk defragmentation operation again. [1.0.8702843.2574645] 6. If you use the Microsoft SCANDISK.EXE utility to verify your hard disk integrity, McAfee strongly recommends that you first disable the VShield scanner. Because the VShield scanner and the Scandisk utility use similar methods to check files on your hard disk, having both active simultaneously can cause conflicts. [1.0.8702859.2574645] 7. This release will detect and remove the XF/SIC.A virus from infected Microsoft Excel documents. If you later use Excel 97 to open a file from which the VirusScan application has removed this virus, Excel will tell you that it cannot find a particular worksheet within the file at a particular cell reference. It will also tell you that continuing could damage your worksheet and ask you whether you want to cancel your request to open the file. The worksheet name it mentions will vary. You may safely open the worksheet. Click No in the confirmation dialog box to continue. To prevent the message from reappearing, open the document in Excel, click the Insert menu, point to Name, then choose Define. In the dialog box that appears, delete the entries Auto_Open and Auto_Close. Save and close the file normally. [1.0.8702869.2574645] 8. The VShield scanner's Internet Filter module does not block any IP addresses you have asked it to block if you connect to the Internet through America Online. [1.0.8702879.2574645] 9. If you use software that blocks online advertisements, such as Ads-Off, while you have the VShield scanner active, your system could become unstable. [1.0.8702889.2574645] 10. If you have a software and hardware inventory operation for a client computer running in conjunction with Microsoft System Management Server v2.0 (SMS), and you have the VShield scanner enabled simultaneously, normal operations on the client computer might show slight delays if you: * Run a login script that tries to connect to and run an application from a network share; or * Use UNC notation to open a share from the command line. To work around this issue, disable or delay your login script until after the SMS inventory has finished, avoid opening shares from the command line, or disable VShield temporarily during the SMS inventory. To prevent the scanner from slowing your computer as you open shares from the command line, you can add the characters \\ to the VShield Exclusions property page to prevent the scanner from examining any network share you specify with UNC notation. [1.0.8702899.2574645] 11. In some circumstances, the VShield Download Scan module will display an error message if you choose Prompt for User Action as your response options and you've selected the Move File checkbox to include this option in the alert message the scanner displays when it finds an infected item. If the module tells you it has found a virus, and you then choose to move the infected file to a quarantine folder, the Download Scan module will try unsuccessfully to copy the file. This issue occurs only in some situations and with some web browser software versions. [1.0.8702909.2574645] 12. If you have the VShield Internet Filter module set to detect hostile Java classes or applets and to offer you the choice to block them or allow them through, the VShield scanner will display an alert message twice when it finds a hostile object: once when the Download Scan module detects the item as it writes to your hard disk, then again when the Internet Filter module detects it as your browser software tries to execute it. You may tell the Download Scan module to delete the item or move it to a quarantine folder when it detects it, or you can have the Internet Filter module block the item before your browser software can execute it. [1.0.8702919.2574645] 13. If your computer runs Windows NT Workstation v4.0 or Windows 2000 Professional, the VShield scanner will not delete macro viruses it finds even if you have set the scanner to do so. To protect these systems from macro viruses, set the scanner to clean infected files, move them to a quarantine folder, or deny access to them. [1.0.8702929.2574645] 14. If you install the VirusScan software to its default program directory, remove the software, then reinstall it into a different program directory, Microsoft Outlook will not locate the extension it needs to open the E-Mail Scan application. To remedy this problem, delete the file EXTEND.DAT, which you'll find in your Windows user directory. On Windows NT Workstation v4.0 systems, you'll find this file in this path by default: C:\Winnt\profiles\\Application Data \Microsoft\Outlook\EXTEND.DAT On Windows 2000 Professional systems, you'll find the file in this path by default: C:\Documents and Settings\ \Application Data\Microsoft\Outlook On Windows 95 and Windows 98 systems, you'll find the file in this path by default: C:\Windows\Application Data\Microsoft\Outlook NOTE: If you create more than one profile on any of these systems, Microsoft Outlook will create an EXTEND.DAT file for each profile. If you move the VirusScan software, McAfee recommends that you delete the EXTEND.DAT file in each profile you use on your computer and allow Outlook to re-create it. [1.0.8702939.2574645] 15. If you install this version on computers that run Windows NT Workstation v4.0 or Windows 2000 Professional, you may use only the System Account for all VirusScan services. [1.0.8702950.2574645] 16. Internet Filter module support for the NeoPlanet v5.0 browser and America Online browsers is incomplete in this release. If you set the Internet Filter module to block particular URLs or IP addresses, then use the NeoPlanet or America Online browsers to visit an IP address you've blocked, you can still connect to the banned site. For the NeoPlanet browser, you can work around this issue by entering only URLs in the browser window--the Internet Filter module will correctly block banned sites entered as URLs. [1.0.8702960.2574645] 17. If you use McAfee Management Edition v2.5 to distribute EXTRA.DAT files, you will need to add a file named EXDTSCPT.INI to the Management Edition installation directory. The file will ensure that Management Edition software correctly installs the EXTRA.DAT file where the new VirusScan version now looks for .DAT files. To obtain a copy of the EXDTSCPT.INI file, download the package ME_EXTRA.ZIP from the AVERT website at: http://www.mcafeeb2b.com/beta/tvdbeta/tools/default.asp [1.0.8702970.2574645] 18. The ScreenScan utility included with this VirusScan release does not include support for Windows 2000 Professional. [1.0.8702980.2574645] 19. If you start a scan operation with the VirusScan application (SCAN32.EXE), then terminate that operation before it finishes--by pressing CTRL+ALT+DEL, selecting SCAN32.EXE, and clicking End Task, for example--the VShield scanner will not recognize any future VirusScan application scan operation you run as a legitimate action. Instead, it will see VirusScan application activity as potentially harmful and will display virus alert messages. To resolve this issue, you must restart your computer. [1.0.8702990.2574645] 20. If you have installed any previous version of VirusScan for Microsoft Outlook software, last released immediately following the W97M/Melissa outbreak in 1999, you must first remove this software before you install VirusScan v4.5 software. The Microsoft Installer Setup utility for VirusScan v4.5 software will NOT remove VirusScan for Outlook software. [1.0.8703000.2574645] 21. If you use the SuperDAT utility with the AutoUpgrade utility, do NOT schedule an AutoUpgrade task to run at startup. AutoUpgrade must stop the VirusScan Console to download and install a new SuperDAT package. It then enables the Console again once it has finished its update. When the Console starts again at that point, it runs AutoUpgrade again, which starts the cycle over. As a workaround, schedule an AutoUpgrade task to run at a particular time. [1.0.8703010.2574645] 22. You may not use .VSC files you created for use with earlier VirusScan releases to start scan operations with this VirusScan release. This VirusScan release will not correctly interpret all of the settings saved in the older .VSC file. [1.0.8703020.2574645] 23. If you have the VShield System Scan module active on a Windows 95 or Windows 98 system when you use Network Associates PGPdisk software to mount an encrypted volume, the PGPdisk software will freeze. As a workaround, first disable the System Scan module, then use PGPdisk to mount the encrypted drive. You can then enable the System Scan module again. At that point, both PGPdisk and the System Scan module will function normally. PGPdisk software comes included with the PGP Desktop Client Security Suite v6.5.x. [1.0.8703030.2574645] 24. If you have the GroupShield Exchange client scanner installed on your computer, you must first remove it in order to use the VirusScan E-Mail Scan extension to scan your e-mail. If you prefer to use the GroupShield Exchange client, you should NOT install the VirusScan E-Mail Scan module or extension during Setup or, if you have already installed the module and extension, you should remove them. To ensure that the module and extension are not installed on your computer, run Setup, then choose Custom as your installation option. Next, right-click the E-Mail Scan item, then choose This Feature Will Not Be Available from the shortcut menu that appears. [1.0.8703041.2574645] 25. If you use McAfee Management Edition software to install this VirusScan version over a previous VirusScan version, you might need to choose Apply Configuration from the Management Edition console twice in order to ensure that the new VirusScan version installs correctly on a target computer. If you schedule a VirusScan installation for a time when you will not be at the Management Edition console, this could mean that an interval could elapse when you have neither VirusScan v4.5 software or any earlier VirusScan versions installed on your system. To ensure that this does not happen, install the new VirusScan version at a time when you can immediately reapply your VirusScan configuration policy from the Management Edition console. This issue occurs because Management Edition update agent on the target computer will not automatically try to pass configuration options to the client software after a system restart. You must restart the target computer after Setup removes previous VirusScan versions, or if the Microsoft Installer (MSI) must install itself as a service on the target computer. 26. If you use McAfee Management Edition software and plan to replace an existing VirusScan v4.5 version with an EARLIER VirusScan version, such as v4.0.3, you must first remove the v4.5 VirusScan installation. You may then use Management Edition software to deploy the earlier version. You may not simply change the version number from v4.5 to v4.0.3 in the Add/Remove Component dialog box within the Management Edition software, as the Management Edition software will correctly remove the existing VirusScan version. 27. To install all VirusScan components at one time via Management Edition software, you must modify the Management Edition scripts that come with the VirusScan product package. Follow these steps: a. Extract the files VSC_9X.INI and VSC_NT.INI from the VirusScan package. b. Locate this line in each file: REGSETVAL LOCAL !VS_EXEC_KEY! “ExecCmdLine” SZ “!I_CMD_LINE!” c. Change the macro reference I_CMD_LINE so that it reads I_CMD_LINE_ALL. When you have finished, the entire line in both the VSC_9X.INI and the VSC_NT.INI files should read: REGSETVAL LOCAL !VS_EXEC_KEY! “ExecCmdLine” SZ “!I_CMD_LINE_ALL!” d. Save both files, then return them to the VirusScan product package, overwriting the existing files in that package. e. Deploy your modified VirusScan package via Management Edition software. ________________________________ FQ1 - FREQUENTLY ASKED QUESTIONS Regularly updated lists of frequently asked questions about McAfee products are also available on the Network Associates website, on CompuServe, and on America Online. Q: I use both cc:Mail and a MAPI-compliant e-mail system at work. Can I have the VShield scanner examine both of these systems at once or switch back and forth between them? A: The VShield E-Mail Scan module includes support for only one e-mail client at any given time. You may not, for example, have the E-Mail Scan module scan both a MAPI-compliant mailbox and a Lotus cc:Mail server at the same time. You can, however, scan first one mailbox then switch the E-Mail Scan module so that it scans the other mailbox. You can also have VShield's E-Mail Scan module examine your cc:Mail mailbox in the background, then have VirusScan's E-Mail Scan on-demand component begin scanning your MAPI mailbox. Q: I am installing new software on my computer, and the manual recommends disabling any anti- virus software. How do I disable the VShield scanner without uninstalling it? A: If you are running the VirusScan software on a Windows NT Workstation v4.0 or Windows 2000 Professional system, you must first log into your system with administrative rights, then follow the steps outlined below in order to disable the VShield scanner. If you are running the software on a Windows 95 or Windows 98 system, you can follow these steps immediately: 1. Right-click the VShield icon located in your system tray next to the system clock, point to Quick Enable, then choose System Scan from the shortcut menu. If System Scan does not have a check mark beside it in this menu, it is already disabled. 2. After you install your new software, you can reactivate the VShield scanner by right- clicking the VShield icon in the system tray, pointing to Enable, then choosing System Scan from the shortcut menu. If System Scan has a check mark next to it in the menu, it is already enabled. Q: I've activated the VirusScan software's heuristic scanning option, and now it identifies some viruses as "unknown." Why? A: The heuristic scanning feature looks for certain "virus-like" characteristics in the files it scans. When it finds a sufficient number of these characteristics, the program concludes that the file is infected. This powerful technique allows the program to discover viruses that are so new that they do not yet have names or identities. The program will, however, identify viruses by name when they match its list of known viruses. Q: When I choose Virus List from the VirusScan application menu, I get a message that tells me it's unable to connect. What's happening? A: McAfee now stores its virus information in a web-based Virus Information Library. To use this feature, you must have a network-based or dial-up Internet connection and web browsing software installed on your computer. If you still cannot connect, start your web browser and enter this address into the text box at the top of your browser window: http://vil.mcafee.com/villib/alpha.asp Q: When it detects an infection in files compressed in .CAB or ZIP-SFX format, why doesn't the VirusScan program clean, delete, or move the files? A: Because files compressed in .CAB and ZIP-SFX formats can include a Microsoft Authenticode certificate, altering the files can render them unusable. To avoid this possibility, the program does not clean, delete, or move infected files compressed in .CAB or ZIP-SFX format. McAfee recommends that you decompress any infected files compressed in these formats, then run your scan operation again to clean the uncompressed files. Q: The VirusScan software detected a virus on my system, but it is not one of the default files listed in its Program Extensions dialog box. Therefore, I suspect it might be a false detection. What can I do to verify a detected virus? A: If you suspect a false detection on a non- executable file, run SCAN.EXE, the VirusScan command line scanner, to verify the infection. If the VirusScan application detects a virus and SCAN.EXE does not, download the latest .DAT file update, then scan your system again. If the VirusScan application still detects a virus that you suspect is a false detection, please report the issue to Network Associates technical support. Q: Can I update McAfee data (.DAT) files to detect new viruses? A: Yes, you can use the AutoUpdate utility included as a default task with the VirusScan Console. AutoUpdate allows you to schedule periodic .DAT file updates. McAfee also makes its SecureCast client software freely available so you can receive updated files automatically, as soon as they become available. For details, visit the Network Associates website at: http://www.nai.com/asp_set/anti_virus/updates/secure.asp If you need additional assistance with downloading, contact Network Associates Download Support. Contact information appears later in this file. Q: Why are additional extensions added to the Program Files Only list? A: As the McAfee Anti-Virus Emergency Response Team (AVERT) finds viruses that can infect new file types, it adds new extensions to the default extensions list to enhance security. For instance, new viruses can infect Microsoft Office binder files, so the default extensions list now includes the file extension for these binder files so that VirusScan will examine them for viruses. Q: I thought I could right-click Microsoft Office .DO?, .XL?, or .OBD files, then choose Scan for Viruses from a shortcut menu in order to start a scan operation. I have Microsoft Office installed, but when I try this, it doesn't work. Why not? A: If you installed Microsoft Office after you installed the VirusScan software, you might need to reinstall the VirusScan software to enable context-sensitive shortcut menus. Q: I'm running Microsoft Exchange Client 5.0, and the icons that tell me that the VirusScan application can run a scan operation from within Exchange aren't showing on my toolbar. Why? A: Because of a limitation in Microsoft Exchange Client v5.0, the two Exchange On-Demand scan icons will not appear in the Exchange toolbar. Consult your Exchange documentation to learn how to place these icons onto the toolbar. Q: I'm running Microsoft Office 2000, and the VirusScan icons that let me configure and run scan operations aren't showing anywhere in my Outlook 2000 toolbar. Are they hidden? A: By default, Microsoft Office hides icons that you have not used in a long time. To see the icons, click the arrows at the far right of the Outlook toolbar. Q: I installed v4.5 of the VirusScan software and now I can't scan my cc:Mail mailbox, my Microsoft Exchange or Outlook mailboxes, or Internet mail sent via a POP or SMTP server. What happened? A: Setup no longer installs by default the VShield modules responsible for scanning your MAPI, POP or SMTP Internet mail. To install these components, you must choose the Custom installation option during Setup, then select the components you want to install. Q: I've already installed VirusScan software on a number of network workstations. I then configured those VirusScan copies with the settings I wanted and protected those settings with a password to prevent tampering. Now I want to use McAfee ePolicy Orchestrator v1.0 software to change some of those configuration settings. Will I need to enter my password from the ePolicy Orchestrator console? What will happen to the passwords I set for each VirusScan installation? A: McAfee ePolicy Orchestrator software communicates directly with the VirusScan copies you installed on your workstations through the ePolicy Orchestrator agent. Because this is a secure communication channel, you do not need to enter a password to ensure security, nor will the Console prompt you to do so. The ePolicy Orchestrator agent will leave the password protection you put in place on the desktop completely intact. Q: I have a .VSC settings file I used with the last VirusScan version I had on my system. Can I still use this file with this VirusScan release? A: No, this VirusScan version does not interpret some of the settings in earlier .VSC file versions in the same way, so earlier files will not work correctly. McAfee recommends that you create and save your settings in a new .VSC file for use with this version. ___________________________________ NA1 - CONTACTING NETWORK ASSOCIATES On December 1, 1997, McAfee Associates merged with Network General Corporation, Pretty Good Privacy, Inc., and Helix Software, Inc. to form Network Associates, Inc. The combined Company subsequently acquired Dr Solomon's Software, Trusted Information Systems, Magic Solutions, and CyberMedia, Inc. A January 2000 company reorganization formed four independent business units, each concerned with a particular product line. These are: * Magic Solutions. This division supplies the Total Service desk product line and related products * McAfee. This division provides the Active Virus Defense product suite and related anti-virus software solutions to corporate and retail customers. * PGP Security. This division provides award-winning encryption and security solutions, including the PGP data security and encryption product line, the Gauntlet firewall product line, the WebShield E-ppliance hardware line, and the CyberCop Scanner and Monitor product series. * Sniffer Technologies. This division supplies the industry-leading Sniffer network monitoring, reporting, and analysis utility and related software. Network Associates continues to market and support the product lines from each of the new independent business units. You may direct all questions, comments, or requests concerning the software you purchased, your registration status, or similar issues to the Network Associates Customer Service department at the addresses or phone numbers listed below. Contact the Network Associates Customer Service department between 8:00 a.m. and 8:00 p.m. Central Time, Monday through Friday, at: Network Associates Customer Service 4099 McEwan, Suite 500 Dallas, Texas 75244 Contact information for corporate-licensed customers: Phone: (972) 308-9960 Fax: (972) 619-7485 (24-hour, Group III fax) E-Mail: services_corporate_division@nai.com Web: http://www.nai.com Contact information for retail licensed customers: Phone: (972) 308-9960 Fax: (972) 619-7485 (24-hour, Group III fax) E-Mail: cust_care@nai.com Web: http://www.mcafee.com Send correspondence to any of the following Network Associates locations: Network Associates Corporate Headquarters 3965 Freedom Circle McCandless Towers Santa Clara, CA 95054 Network Associates offices outside the United States: Network Associates Australia Level 1, 500 Pacific Highway St. Leonards, NSW Sydney, Australia 2065 Phone: 61-2-8425-4200 Fax: 61-2-9439-5166 Network Associates Austria Pulvermuehlstrasse 17 Linz, Austria Postal Code A-4040 Phone: 43-732-757-244 Fax: 43-732-757-244-20 Network Associates Belgique BDC Heyzel Esplanade, boîte 43 1020 Bruxelles Belgique Phone: 0032-2-478.10.29 Fax: 0032-2-478.66.21 Network Associates do Brasil Rua Geraldo Flausino Gomez 78 Cj. - 51 Brooklin Novo - São Paulo SP - 04575-060 - Brasil Phone: (55 11) 5505 1009 Fax: (55 11) 5505 1006 Network Associates Canada 139 Main Street, Suite 201 Unionville, Ontario Canada L3R 2G6 Phone: (905) 479-4189 Fax: (905) 479-4540 Network Associates People's Republic of China New Century Office Tower, Room 1557 No. 6 Southern Road Capitol Gym Beijing People's Republic of China 100044 Phone: 86 10 6849-2650 Fax: 86 10 6849-2069 Network Associates Denmark Lautruphoej 1-3 2750 Ballerup Danmark Phone: 45 70 277 277 Fax: 45 44 209 910 NA Network Associates Oy Mikonkatu 9, 5. krs. 00100 Helsinki Finland Phone: 358 9 5270 70 Fax: 358 9 5270 7100 Network Associates France S.A. 50 Rue de Londres 75008 Paris France Phone: 33 1 44 908 737 Fax: 33 1 45 227 554 Network Associates GmbH Ohmstraße 1 D-85716 Unterschleißheim Deutschland Phone: 49 (0)89/3707-0 Fax: 49 (0)89/3707-1199 Network Associates Hong Kong 19th Floor, Matheson Centre 3 Matheson Way Causeway Bay Hong Kong 63225 Phone: 852-2832-9525 Fax: 852-2832-9530 Network Associates Srl Centro Direzionale Summit Palazzo D/1 Via Brescia, 28 20063 - Cernusco sul Naviglio (MI) ITALY Phone: 39 02 92 65 01 Fax: 39 02 92 14 16 44 Network Associates Japan, Inc. Toranomon 33 Mori Bldg. 3-8-21 Toranomon Minato-ku Tokyo 105-0001 Japan Phone: 81 3 5408 0700 Fax: 81 3 5408 0780 Network Associates Latin America 1200 South Pine Island Road, Suite 375 Plantation, Florida 33324 United States Phone: (954) 452-1721 Fax: (954) 236-8031 Network Associates de Mexico Andres Bello No. 10, 4 Piso 4th Floor Col. Polanco Mexico City, Mexico D.F. 11560 Phone: (525) 282-9180 Fax: (525) 282-9183 Network Associates International B.V. Gatwickstraat 25 1043 GL Amsterdam The Netherlands Phone: 31 20 586 6100 Fax: 31 20 586 6101 Network Associates Portugal Av. da Liberdade, 114 1269-046 Lisboa Portugal Phone: 351 1 340 4543 Fax: 351 1 340 4575 Net Tools Network Associates South Africa Bardev House, St. Andrews Meadowbrook Lane Epson Downs, P.O. Box 7062 Bryanston, Johannesburg South Africa 2021 Phone: 27 11 706-1629 Fax: 27 11 706-1569 Network Associates South East Asia 78 Shenton Way #29-02 Singapore 079120 Phone: 65 222-7555 Fax: 65 222-7555 Network Associates Spain Orense 4, 4a Planta. Edificio Trieste 28020 Madrid Spain Phone: 34 9141 88 500 Fax: 34 9155 61 404 Network Associates Sweden Datavägen 3A Box 596 S-175 26 Järfälla Sweden Phone: 46 (0) 8 580 88 400 Fax: 46 (0) 8 580 88 405 Network Associates AG Baeulerwisenstrasse 3 8152 Glattbrugg Switzerland Phone: 0041 1 808 99 66 Fax: 0041 1 808 99 77 Network Associates Taiwan Suite 6, 11F No. 188, Sec. 5 Nan King E. Rd. Taipei, Taiwan, Republic of China Phone: 886-2-27-474-8800 Fax: 886-2-27-635-5864 Network Associates International Ltd. 227 Bath Road Slough, Berkshire SL1 5PP United Kingdom Phone: 44 (0)1753 217 500 Fax: 44 (0)1753 217 520 Or, you can receive online assistance through any of the following resources: 1. Internet E-mail: techsupport@mcafee.com 2. Telephone technical support Corporate-licensed customers: Contact Network Associates Customer Service for information about technical support subscription plans Retail-licensed customers: (972) 855-7044 3. Internet FTP: ftp://ftp.nai.com 4. World Wide Web: http://www.nai.com/asp_set/support/technical/intro.a sp 5. America Online: keyword MCAFEE 6. CompuServe: GO NAI To provide the answers you need quickly and efficiently, the Network Associates technical support staff needs some information about your computer and your software. Please have this information ready when you call: - Program name and version number - Computer brand and model - Any additional hardware or peripherals connected to your computer - Operating system type and version numbers - Network name, operating system, and version - Network card installed, where applicable - Modem manufacturer, model, and bits-per- second rate, where applicable - Relevant browsers or applications and their version numbers, where applicable - How to reproduce your problem: when it occurs, whether you can reproduce it regularly, and under what conditions - Information needed to contact you by voice, fax, or e-mail * NA2 - DOWNLOAD SUPPORT * To get help with navigating or downloading files from the Network Associates website or FTP site, call: Corporate customers (801) 492-2650 Retail customers (801) 492-2600 * NA3 - FOR PRODUCT UPGRADES * McAfee has a worldwide range of partnerships and reseller relationships with hundreds of independent vendors, each of which can provide you with consulting services, sales advice, and product support for McAfee and Network Associates software. To find a reseller near your location, see the RESELLER.TXT file located on your product CD-ROM or installed on your hard disk. For assistance in locating a local reseller, you can also contact Network Associates Customer Service at (972) 308-9960. * NA4 - FOR REPORTING PROBLEMS * McAfee prides itself on delivering a high-quality product. If you find any problems, please take a moment to review the contents of this file. If the problem you've encountered appears in the Known Issues section of this README.TXT file, McAfee is already aware of the problem, and you need not report it. If you find any feature that does not appear to function properly on your system, or if you believe an application would benefit greatly from enhancement, please contact Network Associates or one of its resellers with your suggestions or concerns. * NA5 - FOR ON-SITE TRAINING INFORMATION * Contact Network Associates Customer Service at (972) 308-9960. * NA6 - MCAFEE BETA SITE * To test pre-release software and obtain update files, including virus definition (.DAT) files, visit the McAfee beta site at: http://www.mcafeeb2b.com/beta/ You will have access to Public Beta and External Test Areas. Your feedback will make a difference. * NA7 - AVERT ANTI-VIRUS RESEARCH SITE * To see the latest information about emerging virus threats, submit samples of potentially infected files, and download updated scanning engine files, EXTRA.DAT files, and similar anti-virus software for testing, visit the AVERT research site at: http://www.avertlabs.com McAfee also seeks and appreciates general feedback. _______________________________________ YC1 - STATEMENT OF YEAR 2000 COMPLIANCE To learn about Network Associates Year 2000 standards and testing models, and to see a list of compliant Network Associates products, visit the Network Associates website at: http://www.nai.com/y2k For further information or questions, send an e-mail message to: y2k@nai.com. __________________________________________ CT1 - COPYRIGHT AND TRADEMARK ATTRIBUTIONS Copyright (c) 1999-2000 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. * CT2 - TRADEMARKS * * ActiveHelp, Bomb Shelter, Building a World of Trust, CipherLink, Clean-Up, Cloaking, CNX, Compass 7, CyberCop, CyberMedia, Data Security Letter, Discover, Distributed Sniffer System, Dr Solomon's, Enterprise Secure Cast, First Aid, ForceField, Gauntlet, GMT, GroupShield, HelpDesk, Hunter, ISDN Tel/Scope, LM 1, LANGuru, LeadingHelp Desk Technology, Magic Solutions, MagicSpy, MagicTree, Magic University, MagicWin, MagicWord, McAfee, McAfee Associates, MoneyMagic, More Power To You, Multimedia Cloaking, NetCrypto, NetOctopus, NetRoom, NetScan, Net Shield, NetShield, NetStalker, Net Tools, Network Associates, Network General, Network Uptime!, NetXRay, Nuts & Bolts, PC Medic, PCNotary, PGP, PGP (Pretty Good Privacy), PocketScope, Pop-Up, PowerTelnet, Pretty Good Privacy, PrimeSupport, RecoverKey, RecoverKey- International, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, Site Meter, Sniffer, SniffMaster, SniffNet, Stalker, Statistical Information Retrieval (SIR), SupportMagic, Switch PM, TeleSniffer, TIS, TMach, TMeg, Total Network Security, Total Network Visibility, Total Service Desk, Total Virus Defense, T-POD, Trusted Mach, Trusted Mail, Uninstaller, Virex, Virex-PC, Virus Forum, ViruScan, VirusScan, VShield, WebScan, WebShield, WebSniffer, WebStalker, WebWall, and ZAC 2000 are registered trademarks of Network Associates and/or its affiliates in the US and/or other countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners. * CT3 - LICENSE AGREEMENT * NOTICE TO ALL USERS: FOR THE SPECIFIC TERMS OF YOUR LICENSE TO USE THE SOFTWARE THAT THIS DOCUMENTATION DESCRIBES, CONSULT THE LICENSE.TXT, README.1ST, OR OTHER LICENSE DOCUMENT THAT ACCOMPANIES YOUR SOFTWARE, EITHER AS A TEXT FILE OR AS PART OF THE SOFTWARE PACKAGING. IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH THEREIN, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND.