   Release Notes for McAfee VirusScan v4.5.1
 (c) 2001 Networks Associates Technology, Inc.
              All Rights Reserved.


===============================================

Release:    April 30, 2001

  DAT Version:4134, April 18, 2001
  Engine Version:4.1.40

===============================================


Thank you for using VirusScan v4.5.1 software.
This file contains important information
regarding this release. We strongly recommend
that you read the entire document.

We welcome your comments and suggestions.

_______________________________________________
IMPORTANT NOTES:

  -  If you are upgrading your workstations
     from VirusScan v4.0.2 or v4.0.3, this
     version of the Setup program requires two
     reboots:
      -   When the earlier version of the
          software is removed.
      -   When the newer version has been
          installed.

  -  If you have installed a beta version or a
     release candidate of the software, you
     must first uninstall it before installing
     the production release. McAfee does not
     support automatic upgrading of a
     pre-release version of the software.


_______________________________________________
WHAT'S IN THIS FILE
  -  New Features
  -  System Requirements
  -  Installation
  -  Testing Your Installation
  -  Resolved Issues
  -  Known Issues
  -  Using VirusScan with McAfee Deployment
     Software
  -  Frequently Asked Questions
  -  Documentation
  -  Contacting McAfee and Network Associates
  -  Copyright and Trademark Attributions
      -   Trademarks
      -   License Agreement


_______________________________________________
NEW FEATURES

1.  SCANNING ONLY VULNERABLE FILE TYPES
    A new option, "Default files," is now
    available. When selected, the scanner
    examines only file types that AVERT
    (Anti-Virus Emergency Response Team)
    defines as vulnerable to currently
    circulating viruses. The weekly release of
    virus definition (.DAT) files includes the
    list of vulnerable file types.

2.  UPGRADING THE SCANNING ENGINE WHILE
    UPDATING .DAT FILES
    The new AutoUpdate utility allows you to
    upgrade the scanning engine at the same
    time that you update your .DAT files by
    selection a new option, "Update scanning
    engine if newer scanning engine exists."

3.  CREATING A MIRROR OF THE NETWORK ASSOCIATES
    UPDATE SITE
    This release includes a new utility for
    creating a location on your network that
    replicates the contents of the Network
    Associates update folder. See
    "Installation" for information about
    installing the Mirror utility.

    NOTE: A new command-line switch has been
          provided for use with command-line
          installations, including login
          scripts or batch files. The new
          switch, /BATCH, runs AutoUpdate,
          AutoUpgrade, or the Mirror utility in
          unattended mode. As a result, dialog
          boxes are displayed as the task
          progresses, but the final status
          dialog box closes automatically 2
          seconds after the task completes. The
          syntax for this switch depends on
          which task you are running. For
          example:
             MCUPDATE /TASK UPDATE /BATCH
             MCUPDATE /TASK UPGRADE /BATCH
             MCUPDATE /TASK MIRROR /BATCH

4.  CONFIGURING AUTOUPDATE
    Using a new interface, you can now
    designate up to 16 sites from which to
    download the .DAT files and scanning
    engine. In addition to transferring files
    via FTP from a remote location, or by using
    UNC notation to transfer a file from a
    shared folder on your network, you can now
    transfer files from a location on the
    computer you are using to configure
    AutoUpdate.

    In the previous releases, you could
    retrieve and save the update files for
    later use. That functionality has been
    included in the new Mirror function.

    The previous release included the option of
    automatic reboot following a successful
    update. Rebooting is no longer required
    after updating.

5.  RUNNING A PROGRAM AFTER UPDATING OR
    UPGRADING

      -   AUTOUPDATE
         In the previous release, if you chose
         to run a program after updating, the
         utility did so whether or not the
         update was successful. In this
         release, you can specify that the
         program run only if the update was
         successful.

      -   AUTOUPGRADE
         In the previous release, you could not
         specify a program to run after
         upgrading. In this release, you can
         specify that a program run after
         AutoUpgrade. The program will run
         whether or not the upgrade was
         successful.

6.  USING PASSIVE FTP
    The previous release offered only active
    FTP for downloading files. This release
    provides for passive FTP as well, which
    helps eliminate firewall or proxy
    interference with client/server
    communication. On networks that have only
    active FTP available, you can deselect
    passive FTP.

7.  SCHEDULING A SCAN OF A NETWORK DRIVES

      -   SCANNING A MAPPED NETWORK DRIVE IN
          WINDOWS NT AND WINDOWS 2000
         The previous release could not perform
         a scheduled on-demand scan on a mapped
         network drive in a Windows NT or
         Windows 2000 environment. With this
         release, you can schedule the
         on-demand scanner to perform a scan on
         a network drive in a Windows NT or
         Windows 2000 environment.

      -   ASSOCIATING A USER ACCOUNT WITH A
          SCHEDULED SCAN.
         In previous releases, a scheduled task
         required that a user be logged on at
         the time scheduled for the scan. If
         the user who configured the task was
         not logged on at run time, the scan
         failed. In this release you can
         associate a particular user account
         with the scheduled scanning activity.
         At the scheduled time, the scanner
         uses the specified account to perform
         the scan.


_______________________________________________
SYSTEM REQUIREMENTS

VirusScan v4.5.1 software installs and runs on
a computer equipped with:

1.  Intel Pentium-class or compatible
    processor. (Intel Pentium or Celeron
    processor with a minimum of 166MHz
    recommended.)

2.  A CD-ROM drive if you are installing the
    program from CD.

3.  A minimum of 16MB of free RAM.

4.  A minimum of 55 MB of hard disk space for a
    full installation of the software.

5.  One of the following operating systems:
  -  Microsoft Windows 95
  -  Windows 98
  -  Windows NT 4.0 with Service Pack 4 or
     later
  -  Windows 2000 Professional
  -  Windows Millennium Edition

6.  We recommend that you have Microsoft
    Internet Explorer v4.0.1 or later
    installed, particularly if your system runs
    any version of Windows 95.


_______________________________________________
INSTALLATION

This README includes general information about
installing VirusScan v4.5.1 on a single
computer using the Setup Wizard. If you want to
install the new Mirror utility, you must
perform a custom installation and mark Mirror
Task for installation. To locate the Mirror
Task on the Custom Setup page, expand the
"Console" branch of the tree view, then expand
the "McUpdate" branch. Click the "Mirror Task"
icon and select "This feature will be installed
on local hard drive."

  -  For detailed steps, see the Installation
     Guide that is included with the product.

  -  For information on using McAfee ePolicy
     Orchestrator to deploy and configure the
     VirusScan software, see the ePolicy
     Orchestrator Administrator’s Guide, and
     the VirusScan Anti-Virus Software v4.5
     Configuration Guide for use with McAfee
     ePolicy Orchestrator Software.

  -  For information on the following
     installation scenarios, see the VirusScan
     v4.5 Administrator’s Guide
      -   Using command-line options to install
          the software.
      -   Using McAfee Management Edition to
          install the software.
      -   Using third-party utilities to
          install the software, including: SMS
          scripts; Windows NT login scripts;
          and Tivoli IT Director.

      See also the section called "Using
      VirusScan with McAfee Deployment
      Software" in this README.

  -  If you are using a third party software to
     install the VirusScan product, and want to
     include the Mirror utility in the
     installation, use the following
     command-line argument:

        SETUP.EXE INSTALLMIRROR=True

  -  The VirusScan Installer includes an
     Uninstaller function that removes
     previously installed anti-virus software,
     including McAfee VirusScan v4.5, and other
     anti-virus software products produced by
     McAfee and most other major
     manufacturers.
    ­  If you performing a silent installation,
      the uninstaller will automatically remove
      all previously installed anti-virus
      software.
    ­  If you are using SETUP.EXE to install
      the product, and SETUP detects a
      previously installed anti-virus product,
      you are prompted to confirm its removal
      from your system.
       ­  If the previous version is VirusScan
          TC, SETUP does not continue.
       ­  If the previous installation is not a
          McAfee anti-virus product, and you do
          not agree to its removal, SETUP will
          install VirusScan 4.5.1. However,
          multiple anti-virus programs on the
          same system can generate undesirable
          interactions. McAfee does not support
          VirusScan 4.5.1 on a system where
          another anti-virus software product
          is also present.
       ­  In the unusual situation where the
          previous installation was a McAfee
          retail anti-virus product, such as
          VirusScan v5, the uninstallation may
          crash. McAfee recommends that
          previously installed retail versions
          be removed using the Windows
          Add/Remove Programs feature before
          installing VirusScan.
    ­  When the Uninstaller removes some
      anti-virus software programs, it will
      trigger the uninstallation process native
      to those programs. As a result, rebooting
      may occur without warning, if initiated
      by the third-party uninstaller.


_______________________________________________
RESOLVED ISSUES

The following list describes issues that have
been resolved with this release.

1.  Certain elements of command syntax caused
    Windows NT and Windows 2000 to truncate a
    command. Those elements have been removed
    in this release. This helps protect against
    calling a program whose name corresponds to
    a truncated command.

2.  This release provides a signature to
    selected files to assure that Windows NT
    and Windows 2000 call the authentic
    executable, rather than a different
    executable with the same name.

3.  This release includes improved password
    encryption to help protect against
    unauthorized decryption.

4.  In the previous version, some system
    resources, such as system memory, were not
    fully released after scanning or updating.
    Under some conditions, this memory "leak"
    could cause a system to crash, or slow
    down. In this version, system resources are
    fully released.

5.  In the previous version, some corrupted
    archive files caused the VirusScan
    application to generate a Dr. Watson error
    message during a scan, or to stop
    completely and log a Dr. Watson error
    message in the Windows Event Viewer.

    A modified library file now allows
    VirusScan to recognize certain types of
    corrupted files, avoiding the Dr. Watson
    error or termination of the scan currently
    in progress. The corrupted file, however,
    is not scanned. McAfee recommends that you
    review your VirusScan log files regularly
    to identify files that the software could
    not scan.

    Note: Information about corrupted archive
          files does not appear in the log
          file.

6.  In the previous release, removing America
    Online (AOL) client files generated an IPF
    error because of a conflict with the
    VirusScan component that identifies
    downloaded files and subjects them to
    scanning. In this version, you can remove
    AOL files without generating an error.

7.  In the previous release, using a Windows NT
    or Windows 2000 Professional feature to
    access a floppy disk drive on a computer
    (usually a laptop) that is running the
    on-access scanner but does not have a
    floppy disk drive, caused the scanner to
    time out and generate a General Protection
    Fault error.

    Now, the on-access scanner ignores the
    established timeout period when the scanner
    examines floppy drives. The scanner tries
    to scan the non-existent floppy disk until
    the operating system times out.

8.  In the previous release, VirusScan always
    attempted to identify the IP address of the
    computer on which it is running. However,
    if VirusScan was running on a mobile system
    that could not connect to a host network,
    or if network problems were producing
    delays, the VirusScan software waited for
    the IP address identification function to
    time out before scanning continued. As a
    result, on Windows 95 or Windows 98
    systems, there was a delay before the
    scanner started. In some cases, mobile
    systems dialed into a network repeatedly,
    whenever VirusScan started or ran a scan
    task.

    Now, you can set a registry value that
    prevents VirusScan from asking for IP
    address information; this prevents
    VirusScan from hanging or attempting to
    connect to a network.

    To create the registry value, follow these
    steps:

      a.  Start the Windows registry editor.

      b.  Locate this registry key:

           HKLM
             SOFTWARE
                Network Associates
                  TVD
                    Shared Components
                       Alert Manager
                         CurrentVersion

      c.  Create a new DWORD variable with the
          name NoIP. Assign a value of zero to
          this variable.

      d.  Close the registry editor.

9.  In the previous version, when an on-demand
    scanning activity ran, it consumed all
    available CPU capacity not already in use
    by another process. This preempts other
    processes that require additional CPU
    capacity to start or continue.

    Now you can create a registry value that
    specifies the maximum average CPU capacity
    that the on-demand scanner can consume.

    To create the registry value, follow these
    steps:

      a.  Start the Windows registry editor.

      b.  b. Locate this registry key:

           HKLM
             SOFTWARE
                Network Associates
                  TVD
                    VirusScan

      c.  Create a new REG_DWORD variable with
          the name ODSAverageCPUUse. Assign a
          value between 10 and 90. This value
          represents the average percentage of
          CPU capacity that the on-demand
          scanner can consume. Values below 10
          or above 90 are ignored.

          IMPORTANT: When using the DWORD
          EDITOR to assign the numeric value,
          be certain to select the DECIMAL
          option so that the value is read as a
          percentage.

      d.  Close the registry editor.


_______________________________________________
KNOWN ISSUES

   NOTE:
   An alphanumeric code appears in brackets
   after some of the issues listed in this
   section. The code is the Solution ID that
   identifies a document that describes the
   issue in detail, and gives its current
   status. The document is available online in
   the Network Associates KnowledgeBase. To log
   on to the KnowledgeBase, connect to this
   Network Associates site:

      http://knowledge.nai.com

   You will need your customer grant number to
   access the KnowledgeBase. Contact your sales
   representative, Network Associates Customer
   Service, or visit this website:

      http://www.mcafeeb2b.com/support/primesupport/default.asp

   Once you log on, use Solution ID to search
   for the correct document. See the
   instructions given at the site for more
   information.


1.  Disk defragmentation programs move files as
    they work to maximize hard disk efficiency.
    If you have the VShield scanner; the
    VirusScan application; or another
    application active during a disk
    defragmentation operation, your
    defragmentation program might tell you that
    it cannot find the active application
    files. This is normal and does not mean
    that the files do not exist. To avoid error
    messages like this, close all open
    applications and disable the VShield
    scanner, then run your disk defragmentation
    operation again. [1.0.8702843.2574645]

2.  You cannot configure the Download Scan
    module to move infected files to a
    quarantine folder. You can still configure
    it to delete or ignore the infected file.

3.  If you want to substitute the VirusScan
    4.5.1 e-mail scanning function for a
    previously installed McAfee stand-alone
    e-mail scanner, you must first remove the
    earlier e-mail scanner. Specifically:
      -   If you have installed any previous
          version of VirusScan for Microsoft
          Outlook software, last released
          immediately following the
          W97M/Melissa outbreak in 1999, you
          must first remove this software
          before you install VirusScan v4.5.1
          software.
          The Microsoft Installer Setup utility
          for VirusScan v4.5 software will NOT
          remove VirusScan for Outlook
          software. [1.0.8703000.2574645]
      -   If you have the GroupShield Exchange
          client scanner installed on your
          computer, you must first remove it in
          order to use the VirusScan E-Mail
          Scan extension to scan your e-mail.
          If you prefer to use the GroupShield
          Exchange client, you should NOT
          install the VirusScan E-Mail Scan
          module or extension during Setup or,
          if you have already installed the
          module and extension, you should
          remove them. [1.0.8703041.2574645]
      -   The GroupShield Exchange client
          scanner and the VirusScan E-mail Scan
          module conflict when both are
          installed on the same workstation. Do
          not deploy an installation package
          that includes the VirusScan E-mail
          scanning module to workstations that
          are running the GroupShield Exchange
          client.
          If you want to preserve the
          GroupShield Exchange client, create a
          custom installation of the VirusScan
          software that does not include the
          E-mail scanning module.
          If you want your workstations to use
          the VirusScan E-mail module, first
          uninstall the GroupShield Exchange
          client from the target workstations.
          [1.0.8703041.2574645]

4.  You cannot use .VSC files you created for
    use with VirusScan version 4.0.3 or
    earlier, to start scan operations with this
    VirusScan release. This VirusScan release
    will not correctly interpret all of the
    settings saved in the older .VSC file.
    [1.0.8703020.2574645]

5.  The current release does not support the
    MSI_INST.EXE utility. VirusScan 4.5
    includes this utility, which allowed you to
    export your current VirusScan configuration
    settings to a Microsoft Installer (MSI)
    file for deployment to workstations on your
    network.  The functionality was described
    on pages 68-70 of the VirusScan 4.5
    Administrator’s Guide.

6.  If you want to use the Internet Filter
    module to prevent users from accessing a
    website, you can do so by adding its IP
    address or its URL to a list of banned
    sites. However, if your Internet access is
    via a proxy server, and you want to list
    the site’s IP address, you must add the IP
    address to the list of Banned URLs, rather
    than to the list of Banned IP addresses.

7.  If you update your virus definition, (.DAT)
    files during Setup, you can ignore the
    option to start the on- access scanner.
    When you choose to run AutoUpdate during
    Setup, the on-access scanner starts
    automatically as part of that process. The
    subsequent Setup wizard window asks "Do you
    want to start the on-access scanner?" This
    option is intended for users who do not
    update during Setup but who do want to
    start the on-access scanner.

8.  If you upgrade your operating system from
    Windows 95, Windows 98, or Windows
    Millennium Edition to Windows 2000, your
    VirusScan software does not function
    correctly. This is because the version
    installed on your Windows system does not
    include files that are required for use in
    a Windows NT environment such as Windows
    2000. We recommend that you uninstall the
    VirusScan software from your Windows 95 or
    Windows 98 system before upgrading to
    Windows 2000. When Windows 2000 has been
    installed, reinstall the VirusScan
    program.

9.  If you install this release over a previous
    installation of anti-virus software, the
    installation may not be complete until the
    system is rebooted. If you use a script to
    perform the upgrade as a silent
    installation, be certain that the script
    reads the registry value RebootNeeded=1, in
    the registry at:

      HKEY_LOCAL_MACHINE
        SOFTWARE
           Network Associates
             TVD
               VirusScan
                  RebootNeeded

    If the value is 1, reboot before proceeding
    to the next step of the installation.

    For information about silent installations,
    see page 59 of the Administrator’s Guide
    for VirusScan 4.5

10. If you update your .DAT files from a UNC
    shared folder on a Windows NT system, using
    an account other than the account of the
    currently logged in user, the Windows
    operating system allows that UNC shared
    folder to be accessible to the currently
    logged on user until the computer is
    rebooted. In order to improve the security
    of the UNC shared folder, McAfee recommends
    that you designate it "Read only."

11. The Restore System functionality in Windows
    Millennium Edition preserves all deleted
    files. As a result, if you select "Delete"
    as the scanner’s response to detecting an
    infection, the file is not actually
    deleted, but moved to the RESTORE folder,
    from which the VirusScan software cannot
    delete it. Microsoft refers to this
    condition in an article located at the
    following URL.

      http://support.microsoft.com/support/kb/articles/Q263/4/55.ASP

    In order to avoid repeated detection of an
    infected file that cannot be deleted, the
    on-demand scanner excludes the RESTORE
    folder from scanning activities, by
    default. (You can remove that exclusion.)
    However, the on-access scanner does not
    exclude the RESTORE folder. If on-access
    scanning is enabled, and you use the
    Restore System function, any infection in
    the RESTORE folder will be detected.

12. VirusScan 4.5.1 does not support scanning
    of e-mail received via CC:Mail.

13. When configuring the Mirror utility, you
    cannot designate the root of a mapped
    network drive as the destination folder
    containing the replica of the Network
    Associates update FTP site. You must first
    create the destination folder on the mapped
    drive, and then include  its name in the
    destination’s path.

14. Microsoft Internet Explorer, version 5 or
    later creates a zero-byte file
    corresponding to any file you are
    downloading from the internet. If you have
    enabled the Download Scan module, and the
    file you are downloading is infected,
    VirusScan deletes the file from the
    temporary folder where it placed it for
    examination. However, because it is holding
    a zero-byte file, Internet Explorer
    reports that the file has been downloaded,
    even though VirusScan has already deleted
    it.

15. The VirusScan Installer includes an
    Uninstaller function that removes
    previously installed anti-virus software,
    including McAfee VirusScan v4.5, and other
    anti-virus software products produced by
    McAfee and most other major manufacturers.
    When the Uninstaller removes some
    anti-virus software programs, it may
    trigger the uninstallation process native
    to those programs. As a result:
      -   rebooting may occur without warning.
      -   the previously installed anti-virus
          software may generate messages while
          they are being uninstalled by the
          VirusScan installer. Consult the
          documentation for the previously
          installed to determine what effect,
          if any will result from accepting or
          ignoring these messages.
      -   In the unusual situation where the
          previous installation was a McAfee
          retail anti-virus product, such as
          VirusScan v5, the uninstallation may
          generate a Dr Watson, or simply fail.
          McAfee recommends that previously
          installed retail versions be removed
          using the Windows Add/Remove Programs
          feature before installing VirusScan.

16. If you want to update your virus definition
    (.DAT) files from a mapped network drive,
    you must use the "Local Path" option that
    can be found on the Site Options property
    page for AutoUpdate settings. This
    procedure is effective only if the user is
    logged-on and has read  access rights to
    the update folder. For information about
    setting AutoUpdate options, see the
    VirusScan 4.5.1 Release Guide.

17. If you want to update your .DAT files from
    a shared folder on a Novell NetWare server,
    the user must be logged-on and have read
    and file scan rights to the shared folder.

18. The on-access scanner may time-out while
    scanning a file on a drive that is mapped
    to a Novell NetWare volume, if the client
    is running Microsoft Windows NT, and is
    using Novell NetWare client 4.8. McAfee
    recommends that you not attempt to scan
    network drives from a Windows NT
    workstation that is running that version of
    the Novell client.

19. If you use Novell Client32 on your system
    for access to Novell NetWare servers,
    McAfee recommends that you reboot your
    system after you install VirusScan software
    in order to activate all VirusScan
    components with proper access to Novell
    NetWare servers. [1.0.8702822.2574645]

20. Scheduled on-demand tasks cannot run on
    Windows NT systems unless a user is logged
    on at the time that the task is scheduled
    to run.


_______________________________________________
USING VIRUSSCAN WITH McAFEE DEPLOYMENT
SOFTWARE

1.  If you use McAfee Management Edition v2.5
    to distribute EXTRA.DAT files, you must add
    a file named EXDTSCPT.INI to the Management
    Edition installation directory. The file
    will ensure that Management Edition
    software correctly installs the EXTRA.DAT
    file where the new VirusScan version now
    looks for .DAT files.
    To obtain a copy of the EXDTSCPT.INI file,
    download the package ME_EXTRA.ZIP from the
    AVERT website at:

    http://www.mcafeeb2b.com/beta/tvdbeta/tools/default.asp
    [1.0.8702970.574645]

2.  If you use McAfee Management Edition
    software to install this VirusScan version
    over a previous VirusScan version, you
    might need to choose Apply Configuration
    from the Management Edition console twice
    in order to ensure that the new VirusScan
    version installs correctly on a target
    computer.

    If you schedule a VirusScan installation
    for a time when you will not be at the
    Management Edition console, this could mean
    that an interval could elapse when you have
    neither VirusScan v4.5.1 software or any
    earlier VirusScan versions installed on
    your system. To ensure that this does not
    happen, install the new VirusScan version
    at a time when you can immediately reapply
    your VirusScan configuration policy from
    the Management Edition console.

    This issue occurs because Management
    Edition update agent on the target computer
    will not automatically try to pass
    configuration options to the client
    software after a system restart. You must
    restart the target computer after Setup
    removes previous VirusScan versions, or if
    the Microsoft Installer (MSI) must install
    itself as a service on the target
    computer.

3.  If you are using McAfee ePolicy
    Orchestrator to configure the VirusScan
    .NAP file, and if you include a semicolon
    (;) when entering a string in a text box,
    the string will be truncated at the point
    that the semicolon appears. If the text is
    a message that appears elsewhere, (for
    example, a virus warning,) the message will
    lose any text following the semicolon. If
    the text is the path of a target or a
    source, the truncated path may be
    unrecognizable.

4.  The database bundled with ePolicy
    Orchestrator version 1.1 does not support
    the use of extended characters in paths,
    file names, or in any user-entered text.
    This includes characters such as ä, à, á,
    è, é, ê, ö, ó, ô, ü, ç, ñ, ß, etc. In order
    to use such characters, you must upgrade
    the data base to IBM Secureway version 3.2.
    Contact your support or sales
    representative to obtain the upgrade.

5.  The use of McAfee ePolicy Orchestrator
    software to administer VirusScan will not
    overwrite pre-existing password settings on
    the client system. ePolicy Orchestrator
    communicates directly with the VirusScan
    installations on your workstations through
    the ePolicy Orchestrator agent. Because
    this is a secure communication channel, you
    do not need to enter a password to ensure
    security, nor will the Console prompt you
    to do so.

6.  You cannot modify VirusScan program
    settings using the "Modify" function in
    Windows "Add/Remove Programs" feature. The
    modification fails because the original
    Microsoft Installer (.MSI) file that
    contained the program settings cannot be
    found on the target workstations. (After
    enforcing the policies that you set, the
    ePolicy Orchestrator agent deletes the
    original MSI file from the client.) When
    you receive the message indicating that
    Windows cannot find the .MSI file, use the
    "Browse" button to locate the .MSI file
    that you used in the original deployment of
    the software.


_______________________________________________
FREQUENTLY ASKED QUESTIONS

Q.  I installed VirusScan 4.5.1 from a shared
    folder on my network, using UNC notation to
    identify the location of SETUP.EXE. I
    subsequently tried to change some program
    settings using the "Modify" function in
    Windows "Add/Remove Programs" feature. The
    modification failed because Windows could
    not find the required VirusScan .MSI file
    on my computer. How can I modify the
    settings?

A.  The modification failed because the
    original Microsoft Installer (.MSI) file
    that contained the program settings cannot
    be found on your computer. (It remained in
    the network shared folder from which you
    installed the program.) When you receive
    the message indicating that Windows cannot
    find the .MSI file, use the "Browse" button
    to locate the .MSI file that was in the
    shared network folder when you installed
    the program.


Q:  Can I designate a shared UNC folder as a
    AutoUpgrade site in a Windows NT
    environment?

A:  Yes, however, any site designated as an
    Upgrade Site in the AutoUpgrade module must
    be either:

      -   A NullSessionShare, which allows
          access by  any user,

         or

      -   A location that allows full read-only
          access to all users.

         Important: See the note regarding the
         use of NullSessionShares on page 38 of
         the Release Guide.


Q.  How can I force an update of the .DAT files
    without updating the scanning engine?

A.  In the AutoUpdate / Advanced window, select
    "Force-Update the .DAT files and scanning
    engine," and deselect "Update scanning
    engine if newer scanning engine exists."


Q:  When I use the "Set Default Features"
    window to make a custom selection of
    features that I want to install, they add
    up to 18MB. When I look at the program
    directory where VirusScan is installed, the
    size of the program adds up to 42.5 MB (or
    higher). What accounts for the difference?

A:  When installed, the VirusScan product
    creates a number of Memory Map (.MMF) files
    that preserve system and setting data
    essential to the operation of the program.
    These .MMF files are stored the VirusScan
    installation folder, and account for the
    apparent increase in the size of the
    program.


Q:  I am installing new software on my
    computer, and the manual recommends
    disabling any anti-virus software. How do I
    disable the VShield scanner without
    uninstalling it?

A:  Follow these steps:

     1. Right-click the VShield icon located in
        your system tray next to the system
        clock, point to Quick Enable, then
        choose System Scan from the shortcut
        menu. If System Scan does not have a
        check mark beside it in this menu, it
        is already disabled.

     2. After you install your new software,
        you can reactivate the VShield scanner
        by right-clicking the VShield icon in
        the system tray, pointing to Enable,
        then choosing System Scan from the
        shortcut menu. If System Scan has a
        check mark next to it in the menu, it
        is already enabled.


Q:  I've activated the VirusScan software's
    heuristic scanning option, and now it
    identifies some viruses as "unknown." Why?

A:  The heuristic scanning feature looks for
    certain "virus-like" characteristics in the
    files it scans. When it finds a sufficient
    number of these characteristics, the
    program concludes that the file is
    infected. This powerful technique allows
    the program to discover viruses that are so
    new that they do not yet have names or
    identities. The program will, however,
    identify viruses by name when they match
    its list of known viruses.


Q:  When I choose Virus List from the VirusScan
    application menu, I get a message that
    tells me it's unable to connect. What's
    happening?

A:  McAfee now stores its virus information in
    a web-based Virus Information Library. To
    use this feature, you must have a
    network-based or dial-up Internet
    connection and web browsing software
    installed on your computer. If you still
    cannot connect, start your web browser and
    enter this address into the text box at the
    top of your browser window:

      http://vil.nai.com/vil/default.asp


Q:  When it detects an infection in files
    compressed in .CAB or ZIP-SFX format, why
    doesn't the VirusScan program clean,
    delete, or move the files?

A:  Because files compressed in .CAB and
    ZIP-SFX formats can include a Microsoft
    Authenticode certificate, altering the
    files can render them unusable. To avoid
    this possibility, the program does not
    clean, delete, or move infected files
    compressed in .CAB or ZIP-SFX format.
    McAfee recommends that you decompress any
    infected files compressed in these formats,
    then run your scan operation again to clean
    the uncompressed files.


Q:  What should I do if I suspect that the
    scanner is reporting false positives?

A:  If you suspect a false detection, please
    report the issue to you network
    administrator or Network Associates
    technical support.


Q:  I thought I could right-click Microsoft
    Office .DO?, .XL?, or .OBD files, then
    choose Scan for Viruses from a shortcut
    menu in order to start a scan operation. I
    have Microsoft Office installed, but when I
    try this, it doesn't work. Why not?

A:  If you installed Microsoft Office after you
    installed the VirusScan software, you might
    need to reinstall the VirusScan software to
    enable context-sensitive shortcut menus.


Q:  I'm running Microsoft Exchange Client 5.0,
    and the icons that tell me that the
    VirusScan application can run a scan
    operation from within Exchange aren't
    showing on my toolbar. Why?

A:  Because of a limitation in Microsoft
    Exchange Client v5.0, the two Exchange
    On-Demand scan icons will not appear in the
    Exchange toolbar. Consult your Exchange
    documentation to learn how to place these
    icons onto the toolbar.


Q:  I'm running Microsoft Office 2000, and the
    VirusScan icons that let me configure and
    run scan operations aren't showing anywhere
    in my Outlook 2000 toolbar. Are they
    hidden?

A:  By default, Microsoft Office hides icons
    that you have not used in a long time. To
    see the icons, click the arrows at the far
    right of the Outlook toolbar.


Q:  Shortly after I started SETUP.EXE, I
    received a message saying that I had to
    reboot my computer before continuing with
    the installation. Why?

A:  One of the first things that Setup does is
    verify that your system is running the
    Microsoft Windows Installer (MSI) v1.1
    utility. This utility must be present
    before installation can proceed. If it is
    not present, Setup installs it. If an
    earlier version is present, Setup upgrades
    it. Depending on whether you are already
    running an earlier version of MSI, and
    depending on your operating system, you may
    be required to reboot your computer when
    MSI v1.1 is
    installed.[1.0.8701794.2574583]


Q:  I selected "Apply to all" on a virus
    notification dialog box assuming that I
    would receive not additional notifications.
    Nevertheless I continued to receive virus
    notifications. Why?

A:  If you set the scanner action to "Prompt
    for user action," a dialog box appears when
    the scanner detects an infected file. If
    you are copying a number of files from a
    network location to your computer, one of
    which is infected, the dialog box offers
    you the option of applying your selected
    action to all the infected files in the
    group being copied. In some operating
    systems, your selected action applies only
    to the first infected file detected. The
    copy process is then aborted and the
    remaining files in the group, whether
    infected or not, are left at their original
    location.


Q:  Why can’t I specify network credentials on
    my system?

A:  The Windows 95, Windows 98, and Windows
    Millennium Edition can only authenticate to
    a UNC shared folder using the credentials
    of the user currently logged-on to the
    workstation.


Q:  After I completed the installation of
    VirusScan 4.5.1, I found a number of files
    named *.TSK on my system. What are these
    files?

A:  Setup uses a series of *.TSK files to set
    the default configuration of the on-demand
    tasks that are listed in the Console. These
    files remain in the VirusScan installation
    folder on your system even after
    installation is complete. However, the
    program makes no further use of them. If
    you prefer, you can safely delete these
    files.


Q:  Has VirusScan been tested with firewall and
    proxy software?

A:  The update and upgrade features have been
    fully tested using the following firewall
    and proxy software:
      -   Network Associates Gauntlet v5.5 for
          Windows NT
      -   Network Associates Gauntlet v5.5 for
          Solaris v2.6
      -   Microsoft Proxy v2.0 for Windows NT.
      -   Microsoft Proxy v2.0 SP1 for Windows
          NT.
      -   Netscape Proxy v3.5.1 for Windows
          NT.
      -   Netscape Proxy v3.5.1 for Solaris
          v2.6.
      -   RedHat v7.0 for UNIX FTP
      -   IIS4 for Windows FTP

    Other firewall and proxy programs have not
    been fully tested.

_______________________________________________
DOCUMENTATION

This product includes a documentation set that
consists of a manual saved in Adobe Acrobat
Portable Document Format (.PDF)[ and an online
Help system].

Electronic copies of all product manuals are
included on the product CD-ROM, or are
available with a valid grant number on the
Network Associates download site:

      http://www.mcafeeb2b.com/naicommon/download/upgrade/login.asp

A copy of the latest version of the free
Acrobat Reader also comes with the product
CD-ROM, or you can download any version from
the Adobe website:

      http://www.adobe.com/prodindex/acrobat/readstep.html

This product includes the following
documentation set:

     1. Release Guide. This is a document that
        describes an interim release of a
        product. It details new features and
        known issues from the previous release
        that have been fixed. An Adobe Acrobat
        .PDF version of this guide is stored on
        the product CD-ROM. You can also
        download a copy in .PDF format from the
        Network Associates download site.

     2. Online Help system. Online Help,
        accessed from within the software
        application, gives you quick access to
        hints and tips about using your
        software. Help includes What's This?
        topics associated with each option in
        the interface. Help also includes
        step-by-step procedures for product
        features.]

     3. A LICENSE.TXT file. This file outlines
        the terms under which you may use the
        product. Read it carefully. If you
        install the product, you agree to the
        license terms.

     4. This README.TXT file. This file
        describes last-minute additions or
        changes to the documentation, lists any
        known behavior or other issues with the
        product release, lists all resolved
        issues, and supplements the Acrobat
        .PDF guides by outlining new product
        features in incremental product
        updates.

     5. A CONTACT.TXT file. This file provides
        a list of phone numbers, street
        addresses, web addresses, and fax
        numbers for Network Associates offices
        in the United States and around the
        world. It also includes contact
        information for services, such as
        technical support, customer service,
        onsite training, the beta program, and
        AVERT Anti-Virus Research Site.


_________________________________________
CONTACTING MCAFEE AND NETWORK ASSOCIATES

Technical Support
http://knowledge.nai.com


Product Documentation Issues
tvd_documentation@nai.com


McAfee Beta Program
Beta Web Site
www.mcafeeb2b.com/beta/

E-mail
avbeta@nai.com


AVERT Anti-Virus Research Site
www.mcafeeb2b.com/avert


Download Site
www.mcafeeb2b.com/naicommon/download/

DAT File Updates
www.mcafeeb2b.com/naicommon/download/dats/find.asp

Product Upgrades
www.mcafeeb2b.com/naicommon/download/upgrade/login.asp

Valid grant number required.
Contact Network Associates Customer
Service


On-Site Training Information
www.mcafeeb2b.com/services/mcafee-training/default.asp


Finding a Reseller
www.mcafeeb2b.com/naicommon/partners/tsp-seek/intro.asp


Network Associates Customer Service
US, Canada, and Latin America toll-free:
Phone:  +1-888-VIRUS NO or +1-888-847-8766
Monday - Friday, 8 a.m. - 8 p.m.,
Central Time

E-mail: services_corporate_division@nai.com
Web:    www.nai.com
www.mcafeeb2b.com


_______________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

(c) 2001 Networks Associates Technology, Inc.
All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form or by
any means without the written permission of
Networks Associates Technology, Inc., or its
suppliers or affiliate companies. To obtain
this permission, write to the attention of the
Network Associates legal department at: 3965
Freedom Circle, Santa Clara, California 95054,
or call +1-972-308-9960.


TRADEMARKS

ActiveSecurity, ActiveHelp, ActiveShield,
Antivirus Anyware (and design), Bomb Shelter,
Building a World of Trust, Certified Network
Expert, CipherLink, Clean-Up, Cleanup Wizard,
Cloaking, CNX, CNX Certification Certified
Network Expert (and design), Compass 7,
CyberCop, CyberMedia, CyberMedia Uninstaller,
Data Security Letter (and design), N Design
(logo), Design (rabbit with hat), Discover (and
design), Disk Minder, Distributed Sniffer
System, Distributed Sniffer System (in
Katakana), Dr Solomon's, Dr Solomon's (label),
Enterprise Secure Cast, EZ Setup, First Aid,
ForceField, Gauntlet, GMT, GroupShield, Guard
Dog, HelpDesk, Homeguard, Hunter, IC Expert,
ISDN Tel/Scope, LAN Administration Architecture
(and design), LANGuru, LANGuru (in Katakana),
LANWords, Leading Help Desk Technology, LM 1, M
(and design), Magic Solutions, Magic
University, MagicSpy, MagicTree, MagicWin,
MagicWord, McAfee, McAfee (in Katakana), McAfee
(and design), McAfee Associates, MoneyMagic,
More Power To You, Multimedia Cloaking,
NetCrypto, NetOctopus, NetRoom, NetScan, Net
Shield, NetShield, NetStalker, Net Tools, Net
Tools (in Katakana), Network Associates,
Network General, Network Uptime!, NetXRay,
Notesguard, Nuts & Bolts, Oil Change, PC Medic,
PC Medic 97, PCNotary, PGP, PGP (Pretty Good
Privacy), PocketScope, Pop-Up, PowerTelnet,
Pretty Good Privacy, PrimeSupport, RecoverKey,
RecoverKey-International, ReportMagic, Registry
Wizard, RingFence, Router PM, Safe & Sound,
SalesMagic, SecureCast, Service Level Manager,
ServiceMagic, Site Meter, Smart Desk, Sniffer,
Sniffer (in Hangul), SniffMaster, SniffMaster
(in Hangul), Sniffmaster (in Katakana),
SniffNet, Stalker, Stalker (stylized),
Statistical Information Retrieval (SIR),
SupportMagic, Switch PM, TeleSniffer, TIS,
TMach, TMeg, Total Network Security, Total
Network Visibility, Total Service Desk, Total
Virus Defense, T-POD, T-POD (stylized), Trusted
Mach, Trusted Mail, UnInstaller, Virex,
Virex-PC, Virus Forum, ViruScan, VirusScan,
VShield, WebScan, WebShield, WebSniffer,
WebStalker, WebWall, Who's Watching your
Network, Wingauge, ZAC 2000, and Zip Manager
are registered trademarks of Network
Associates, Inc. and/or its affiliates in the
US and/or other countries. All other registered
and unregistered trademarks in this document
are the sole property of their respective
owners.


LICENSE AGREEMENT

NOTICE TO ALL USERS: FOR THE SPECIFIC TERMS OF
YOUR LICENSE TO USE THE SOFTWARE THAT THIS
DOCUMENTATION DESCRIBES, CONSULT THE
LICENSE.TXT OR OTHER LICENSE DOCUMENT THAT
ACCOMPANIES YOUR SOFTWARE, EITHER AS A TEXT
FILE OR AS PART OF THE SOFTWARE PACKAGING. IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH
THEREIN, DO NOT INSTALL THE SOFTWARE. IF
APPLICABLE, YOU MAY RETURN THE PRODUCT TO THE
PLACE OF PURCHASE FOR A FULL REFUND.

