McAfee AVDCDE-AA-AA User Guide
McAfee AVDCDE-AA-AA - Active Virus Defense Suite Manual
 |
View all McAfee AVDCDE-AA-AA manuals
Add to My Manuals
Save this manual to your list of manuals |
McAfee AVDCDE-AA-AA manual content summary:
- McAfee AVDCDE-AA-AA | User Guide - Page 1
McAfee VirusScan Anti-Virus Software User's Guide Version 4.5 - McAfee AVDCDE-AA-AA | User Guide - Page 2
Solutions, MagicSpy, MagicTree, Magic University, MagicWin, MagicWord, McAfee, McAfee Associates, MoneyMagic, More Power To You, Multimedia Cloaking, NetCrypto TMach, TMeg, Total Network Security, Total Network Visibility, Total Service Desk, Total Virus Defense, T-POD, Trusted Mach, Trusted Mail, - McAfee AVDCDE-AA-AA | User Guide - Page 3
to protect yourself xvii How to contact McAfee and Network Associates xviii Customer service xviii Technical support xix Download support xx Network Associates training xx Comments and feedback xx Reporting new 51 Determining when you must restart your computer 56 User's Guide iii - McAfee AVDCDE-AA-AA | User Guide - Page 4
the VShield scanner do 87 Why use the VShield scanner 88 Browser and e-mail client support 89 Enabling or starting the VShield scanner 90 Using the VShield configuration wizard 95 Setting VShield scan operations 193 Starting the VirusScan Console 194 iv McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 5
280 Using the Alert Manager Client Configuration utility 283 VirusScan software as an Alert Manager client 284 Configuring the Alert Manager client utility 284 User's Guide v - McAfee AVDCDE-AA-AA | User Guide - Page 6
deliver 308 Installing the BackWeb client and SecureCast service 309 System requirements 309 Troubleshooting the Enterprise SecureCast service 319 Unsubscribing from the SecureCast service 319 Support resources 319 SecureCast service 319 BackWeb client 320 Appendix D. Understanding iDAT - McAfee AVDCDE-AA-AA | User Guide - Page 7
its traces. Why worry? So why worry about virus infections, if most attacks do little harm? The problem is twofold. First, although relatively few viruses have destructive effects, that fact says nothing about how widespread or your dealings with others than it does to your computer. User's Guide vii - McAfee AVDCDE-AA-AA | User Guide - Page 8
specifically. Nor will it cheer you up to learn that the virus problem will probably always be with us. But knowing a bit about the though worms had eaten them. The term survives to this day to describe programs that make copies of themselves, but without McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 9
users would run what they thought was their usual software only to find their files erased, to have their account passwords stolen, or to , soon after the first personal computers reached the mass market in the early 1980s. Other researchers date the advent of virus programs to 1986, with Guide ix - McAfee AVDCDE-AA-AA | User Guide - Page 10
your computer needs to figure out where to find each of your hard disk partitions and the anti-virus software has a chance to run. Many McAfee anti-virus products anticipate this possibility by allowing you to software to help replicate their creations. An early example of this type of virus showed - McAfee AVDCDE-AA-AA | User Guide - Page 11
the virus writer's principal challenges, therefore, is to find ways to hide his or her handiwork. The earliest to leave certain files alone. They addressed this problem by having the virus write a characteristic byte undetectable variety of new forms. Finding these "polymorphic" viruses required - McAfee AVDCDE-AA-AA | User Guide - Page 12
its potential seems so vast, the web has attracted the attention and the developmental energies of nearly every computer-related company in the industry. xii McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 13
formulate and execute queries to databases using advanced search engines, send and receive live audio and video, and distribute data and multimedia resources to a worldwide audience. Much of the technology that your system automatically whenever you visit a website that hosts them. User's Guide xiii - McAfee AVDCDE-AA-AA | User Guide - Page 14
however, most users find themselves calculating the tradeoffs rather client software would interpret the instructions coded into the script and rule that where a way exists to exploit a software security hole, someone will find it and use it. Late in 1999, another virus writer demonstrated this rule - McAfee AVDCDE-AA-AA | User Guide - Page 15
McAfee (.DAT) files that enable McAfee software to detect and remove emerging viruses. McAfee has, however, face on software with a less-than-friendly purpose. Neither McAfee an adequate training program in place AVERT website. McAfee can provide you Associates family provide find out how to enlist - McAfee AVDCDE-AA-AA | User Guide - Page 16
and support the Service 4099 McEwan, Suite 500 Dallas, Texas 75244 U.S.A. The department's hours of operation are 8:00 a.m. and 8:00 p.m. Central time, Monday through Friday Other contact information for corporate-licensed customers: Phone: (972) 308-9960 Fax: (972) 619-7485 (24-hour, Group - McAfee AVDCDE-AA-AA | User Guide - Page 17
-licensed customers: Phone: (972) 308-9960 Fax: (972) 619-7485 (24-hour, Group III fax) E-Mail: [email protected] Web: http://www.mcafee.com/ Technical support McAfee and Network Associates are famous for their dedication to customer satisfaction. The companies have continued this tradition by - McAfee AVDCDE-AA-AA | User Guide - Page 18
of your AUTOEXEC.BAT, CONFIG.SYS, and system LOGIN script • Specific steps to reproduce the problem Download support To get help with navigating or downloading files from the Network Associates or McAfee websites or FTP sites, call: Corporate customers Retail customers (801) 492-2650 (801) 492 - McAfee AVDCDE-AA-AA | User Guide - Page 19
virus that is not a variation on an older type can appear on your system and escape detection. Because McAfee researchers are committed to providing you with effective and up-to-date tools you can use to protect your system samples to our offices in Australia and Southeast Asia User's Guide xix - McAfee AVDCDE-AA-AA | User Guide - Page 20
Preface International contact information To contact Network Associates outside the United States, use the addresses, phone numbers and fax numbers below. Network Associates Australia Level . 00100 Helsinki Finland Phone: 358 9 5270 70 Fax: 358 9 5270 7100 xx McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 21
02 92 65 01 Fax: 39 02 92 14 16 44 Network Associates Latin America 1200 S. Pine Island Road, Suite 375 Plantation, Florida 33324 United States Phone: (954) 452-1731 Fax: (954) 236-8031 Network Associates International B.V. Gatwickstraat 25 1043 GL Amsterdam The Netherlands Phone: 31 20 586 6100 Fax - McAfee AVDCDE-AA-AA | User Guide - Page 22
77 Network Associates International Ltd. 227 Bath Road Slough, Berkshire SL1 5PP United Kingdom Phone: 44 (0)1753 217 500 Fax: 44 (0)1753 217 520 xxii McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 23
recognize how much value McAfee anti-virus research and development brings to their fight to maintain network integrity and service levels, ensure data and fewer demands on your system. Full support for McAfee ePolicy Orchestrator management software means that network administrators . User's Guide 23 - McAfee AVDCDE-AA-AA | User Guide - Page 24
same time, as the cornerstone product in the McAfee Active Virus Defense and Total Virus Defense security suites file releases, daily beta .DAT releases, and EXTRA.DAT file support in crisis rely on the data on your computer and the time, trouble and money it would take to replace that data if it - McAfee AVDCDE-AA-AA | User Guide - Page 25
the best features of technologies that McAfee and Dr Solomon researchers developed independently for write "generic" definitions that identify entire virus families, and that can easily detect the tens or techniques, new variants, or other problems that emerging viruses now pose. This Guide 25 - McAfee AVDCDE-AA-AA | User Guide - Page 26
find many viruses simply no longer worked, since no constant sequence of bytes existed to detect. To respond to this threat, McAfee engine enhancement, McAfee researchers have honed early heuristic scanning ViruLogic, a heuristic technique that can observe a program's behavior and evaluate how - McAfee AVDCDE-AA-AA | User Guide - Page 27
specify local and network disks as scan targets, tell the application how to respond to any infections it finds, and see reports on its actions. You can start with the VirusScan Classic window, a basic configuration also enable or disable the VShield scanner from the Console window. User's Guide 27 - McAfee AVDCDE-AA-AA | User Guide - Page 28
on the server. This invaluable "x-ray" peek into your mailbox means that VirusScan software can find potential infections before they make their way to your desktop, which can stop a Melissa-like virus "Using the ScreenScan utility" on page 269 for details. 28 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 29
submit files that you believe are infected directly to McAfee anti-virus researchers. A simple wizard guides you as you choose files to submit, include - and 32-bit protected-mode DOS environments. It also includes support for extended memory and flexible memory allocations. SCAN.EXE will transfer - McAfee AVDCDE-AA-AA | User Guide - Page 30
scanning operations, but if you have trouble starting Windows or if the VirusScan GUI Started Guide, which introduces the product, provides installation instructions, website or from other electronic services. - This user's guide saved on the VirusScan software McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 31
often describes new product features incorporated into incremental product updates. You'll find the README.TXT file at the root level of your VirusScan software CD the VirusScan Administrator's Guide. This VirusScan version also comes with complete support for the McAfee ePolicy Orchestrator software - McAfee AVDCDE-AA-AA | User Guide - Page 32
moves the VirusScan interface for all supported platforms solidly into the territory VirusScan changes include: • New VShield system tray icon states tell you more about which VShield modules are active. These states are: - All VShield modules are active - McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 33
Alert Manager server supports Intel Pentium III FAQ at http://support.intel.com/support/processors/pentiumiii/psqa. appear each month. To meet this need, McAfee has incorporated updating technology in and AutoUpgrade utilities come with transparent support for the new updates, downloading and - McAfee AVDCDE-AA-AA | User Guide - Page 34
About VirusScan Software 34 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 35
Microsoft Windows 95, Windows 98, Windows NT Workstation v4.0 with Service Pack 4 or later, or Windows 2000 Professional. McAfee recommends that you also have Microsoft Internet Explorer v4.0.1 or later local-area network, or via a high-speed modem and an Internet service provider. User's Guide 35 - McAfee AVDCDE-AA-AA | User Guide - Page 36
software from the Network Associates website, from a server on your local network, or from another electronic service, make a new, temporary folder on your hard disk, then use WinZip, PKZIP, or a which gives you the option to install all VirusScan components. 36 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 37
to implement a corporate anti-virus policy, see the VirusScan Administrator's Guide, which describes how to install and configure VirusScan software to meet nearly any business contingency. You can also use McAfee ePolicy Orchestrator software to distribute and configure VirusScan software on - McAfee AVDCDE-AA-AA | User Guide - Page 38
Setup will display its first wizard panel immediately. Skip to Step 4 to continue. If Setup does not find MSI v1.1 on your computer, it installs files it needs to continue the installation, then prompts you the License Agreement, then click Next> to continue. 38 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 39
Preserve On Access Settings, if the option is available, then click Next> to continue. If Setup finds incompatible software, it will display a wizard panel that gives you the option to remove the conflicting software Step 8 on page 41 to continue. Otherwise, continue with Step 7. User's Guide 39 - McAfee AVDCDE-AA-AA | User Guide - Page 40
do so to continue with your VirusScan installation-so long as the other software is not active, Setup can continue without conflicts. Š NOTE: McAfee strongly recommends that you remove incompatible software. Because most anti-virus software operates at a very low level within your system, two anti - McAfee AVDCDE-AA-AA | User Guide - Page 41
, or schedule and run any task. Setup next asks you to choose a Typical or a Custom setup for this computer (see Figure 2-6 on page 42). User's Guide 41 - McAfee AVDCDE-AA-AA | User Guide - Page 42
, and Internet Filter modules - The ScreenScan utility To learn more about what each component does, see "What comes with VirusScan software?" on page 27. 42 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 43
feature will not be available from the menu that appears. Š NOTE: The VirusScan Setup utility does not support the other options shown in this menu. You may not install VirusScan components to run from a network, Usage. The wizard will highlight disks that have insufficient space. User's Guide 43 - McAfee AVDCDE-AA-AA | User Guide - Page 44
disk. When it has finished, it displays a panel that asks if you want to configure the product you installed (Figure 2-9). Figure 2-9. Completing Setup panel 44 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 45
application to examine your system memory for viruses before it continues. If it finds an infection, it will alert you and give you a chance to your options, see Chapter 3, "Removing Infections From Your System." If it finds nothing, the application will flash briefly as it scans your system, then - McAfee AVDCDE-AA-AA | User Guide - Page 46
write these lines to your Windows AUTOEXEC.BAT file: C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCAN.EXE C:\ @IF ERRORLEVEL 1 PAUSE This tells your system to Disk creation utility. The creation utility formats and copies a scanner and support files onto a bootable floppy disk you can use to start your system - McAfee AVDCDE-AA-AA | User Guide - Page 47
option uses default AutoUpdate configuration options to connect directly to the McAfee website and download the latest incremental .DAT file updates. Select want to change some aspect of how your computer connects to the McAfee website-firewall or proxy server settings, for example. To learn more - McAfee AVDCDE-AA-AA | User Guide - Page 48
you have chosen the option you want, click Next>. If you chose to run an AutoUpdate operation immediately, the utility will connect to the McAfee website to download new incremental .DAT files. After it finishes, the Setup sequence will resume. If you chose to configure the AutoUpdate utility, the - McAfee AVDCDE-AA-AA | User Guide - Page 49
have already installed VirusScan software with default Setup options, you can find these .DAT files in this location on your hard disk: C:\ http://www.nai.com/asp_set/anti_virus/avert/tools.asp Š NOTE: McAfee recommends that you download new Emergency .DAT files directly to a newly User's Guide 49 - McAfee AVDCDE-AA-AA | User Guide - Page 50
computer runs Windows NT Workstation or Windows 2000 Professional, the wizard tells you that it will format your Emergency Disk with the NAI-OS. 50 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 51
panel. b. Click Finish to quit the wizard when it has created your disk. Next, remove the disk from your floppy drive, lock it, label it McAfee Emergency Boot Disk and store it in a safe place. • If you chose to format your disk with Windows system files, the wizard displays a panel that - McAfee AVDCDE-AA-AA | User Guide - Page 52
to copy only the VirusScan software Command Line component the emergency .DAT files, and support files to the floppy disk. Skip to Step 3 on page 53 to continue. Insert an unlocked and unformatted floppy disk into your floppy drive. McAfee recommends that you use a completely new disk that you have - McAfee AVDCDE-AA-AA | User Guide - Page 53
Disk panel. 3. Click Next> to continue. Setup will scan your newly formatted disk for viruses (Figure 2-18). Figure 2-18. Scanning Emergency Disk for viruses User's Guide 53 - McAfee AVDCDE-AA-AA | User Guide - Page 54
(MSI) will need to replace or initialize certain files, or previous McAfee product installations might require you to remove files in order for VirusScan software to run correctly. These requirements can also vary for each supported Windows platform. In these cases, you will need to restart your - McAfee AVDCDE-AA-AA | User Guide - Page 55
Installation on a computer with Microsoft Installer v1.1 .DAT file update Scan engine update via McAfee SuperDAT utility Windows 95 and Windows 98 No restart required, unless you have Novell Client32 for as a method for their customers to test any anti-virus software installation. User's Guide 55 - McAfee AVDCDE-AA-AA | User Guide - Page 56
that begins the test message. If you are reading this manual on your computer, you can copy the line directly from the " section of the README.TXT file, which you can find in your VirusScan program directory. If you copy the line McAfee VirusScan v4.5.0 in the list, then click Add/Remove. 56 - McAfee AVDCDE-AA-AA | User Guide - Page 57
Installing VirusScan Software Setup will start and display the first Maintenance wizard panel (Figure 2-20). Figure 2-20. First maintenance panel 4. Click Next> to continue. Setup displays the Program Maintenance wizard panel. Figure 2-21. Program Maintenance panel User's Guide 57 - McAfee AVDCDE-AA-AA | User Guide - Page 58
. Setup will display progress information as it deletes VirusScan software from your system. When it has finished, click Finish to close the wizard panel. 58 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 59
not produce the results you expect, but it will help eliminate one potential cause of your computer problems. The safest course of action you can take is to install VirusScan software, then scan your system detects a virus in your computer's memory at some point after installation. User's Guide 59 - McAfee AVDCDE-AA-AA | User Guide - Page 60
scan operation into memory. If you have extended memory on your computer, it will load its database files into that memory for faster execution. 60 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 61
infection on all of your local computer's hard disks. Š NOTE: McAfee strongly recommends that you do not interrupt the BOOTSCAN.EXE scanner as but it will detect common file-infecting and boot-sector viruses. If BOOTSCAN.EXE finds a virus, it will try to clean the infected file. If it fails Guide 61 - McAfee AVDCDE-AA-AA | User Guide - Page 62
computing environment means scanning for viruses regularly. Depending on the degree to which you swap floppy disks with other users, share as once a month, or as often as several times a day. Other good habits to cultivate include scanning right before you 62 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 63
early PC advocates could never have imagined the tasks for which workers, scientists and others have harnessed problem really results from an interrupt conflict, it does allow you to eliminate one possible cause. With that knowledge, you can then go on to troubleshoot on McAfee researchers to Guide 63 - McAfee AVDCDE-AA-AA | User Guide - Page 64
can trigger false detections when VirusScan software runs. Consult the user's guide for your computer to learn about how its anti-virus features work Associates technical support or send e-mail to [email protected] with a detailed explanation of the problem you encountered. 64 McAfee VirusScan - McAfee AVDCDE-AA-AA | User Guide - Page 65
first enters your system. In its initial configuration, the module will deny access to any infected file it finds, whichever Windows version your computer runs. It will also display an alert message that asks you what you to process any other tasks it is running in the background. User's Guide 65 - McAfee AVDCDE-AA-AA | User Guide - Page 66
computer runs Windows NT Workstation v4.0 or Windows 2000, or if you choose the GUI prompt type on Windows 95 and Windows 98 systems. 66 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 67
same response to apply to all infected files that the System Scan module finds during this scan operation, select the Apply to all items checkbox in the If the module succeeds, it will restore the file to its original state and record its success in its log file. If the module cannot User's Guide 67 - McAfee AVDCDE-AA-AA | User Guide - Page 68
scan operations. If you copy this file to your hard disk, this also prevents the System Scan module from detecting the file as a virus. 68 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 69
tell the Download Scan module to take no action and to resume scanning. The module will continue until it finds another virus on your system or until it finishes the scan operation. Normally, you would use this option to directory you chose in the module's Action property page. User's Guide 69 - McAfee AVDCDE-AA-AA | User Guide - Page 70
you can extend by configuring VirusScan software to suit your own needs. With this initial configuration, the program will prompt you for a response when it finds a virus (Figure 3-6). Figure 3-6. VirusScan response options 70 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 71
, the VirusScan application will record the name of the infected file in its log so that you can restore the file from a backup copy. User's Guide 71 - McAfee AVDCDE-AA-AA | User Guide - Page 72
will prompt you for a response when it finds a virus (Figure 3-8). Figure 3-8. E-Mail proceed with its scan operation, list each infected file it finds in the lower portion of its main window (Figure the virus. The extension will continue until it finds another virus on your system or until it - McAfee AVDCDE-AA-AA | User Guide - Page 73
choice does not cause the E-Mail Scan extension to take any action against the virus it detected. See "Viewing virus information" for more details. User's Guide 73 - McAfee AVDCDE-AA-AA | User Guide - Page 74
menu in the Console window. To learn more about the Console, see Chapter 6, "Creating and Configuring Scheduled Tasks." The Library is part of the McAfee AVERT website, which you can visit at: http://www.nai.com/asp_set/anti_virus/avert/intro.asp The AVERT website has a wealth of virus-related data - McAfee AVDCDE-AA-AA | User Guide - Page 75
Software tools you can use to extend or supplement your McAfee anti-virus software • Contact addresses and other information for submitting samples, and other data • Virus definition updates-this includes daily beta .DAT file updates, EXTRA.DAT files, updated Emergency property page User's Guide 75 - McAfee AVDCDE-AA-AA | User Guide - Page 76
do so, be sure to start your system in the apparently infected state-don't start your system from a clean floppy disk. Several methods sample to McAfee researchers for analysis. To submit a sample file, follow these steps: 1. If you must connect to your network or Internet Service Provider (ISP - McAfee AVDCDE-AA-AA | User Guide - Page 77
obligation to supply any information at all here. The Choose Files to Submit panel appears (Figure 3-14). Figure 3-14. Choose Files to Submit panel User's Guide 77 - McAfee AVDCDE-AA-AA | User Guide - Page 78
click Next> to continue. This tells the SENDVIR.EXE utility to strip everything out of the file except macros or executable code. The Choose E-Mail Service panel appears (Figure 3-16). Figure 3-16. Choose E-mail Service panel 78 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 79
system. To use this option, your e-mail system must support the Messaging Application Programming Interface (MAPI) standard. Examples of image to send via e-mail, or mail the floppy disk itself to McAfee anti-virus researchers. The researchers would also benefit from having samples of your Guide 79 - McAfee AVDCDE-AA-AA | User Guide - Page 80
any of your Microsoft Word, Excel, or PowerPoint files, send these files to McAfee anti-virus researchers, either with the SENDVIR.EXE utility, via e-mail as files, copy NORMAL.DOT and all files from the Microsoft Office Startup folder to the floppy disk. You'll find the Microsoft Office startup - McAfee AVDCDE-AA-AA | User Guide - Page 81
disk images To send the files now stored on any floppy disks you created, you can use a McAfee AVERT Labs tool called RWFLOPPY.EXE to make a floppy disk image that encapsulates the infection. The RWFLOPPY. dialog box appears. 5. Click Password to display the Password dialog box. User's Guide 81 - McAfee AVDCDE-AA-AA | User Guide - Page 82
Š NOTE: If you do not protect your samples with the password INFECTED, McAfee anti-virus scanners may detect and clean samples before they reach our researchers. for your samples, send them to McAfee researchers at one of these e-mail addresses: In the United States In the United Kingdom In Germany - McAfee AVDCDE-AA-AA | User Guide - Page 83
you created directly to McAfee anti-virus researchers. McAfee recommends that you create Use these mailing addresses: In the United States: Network Associates, Inc. Virus Research 20460 Gatwickstraat 25 1043 GL Amsterdam Netherlands Š NOTE: McAfee AVERT Labs does keep all submitted samples, but - McAfee AVDCDE-AA-AA | User Guide - Page 84
Removing Infections From Your System 84 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 85
Using the VShield Scanner 4 4 What does the VShield scanner do? McAfee desktop anti-virus products use two general methods to protect your system. The first method, background scanning that arrives via Simple Mail Transfer Protocol (SMTP) or Post Office Protocol (POP-3) sources. User's Guide 85 - McAfee AVDCDE-AA-AA | User Guide - Page 86
Internet sites. It can also block your browser from connecting to potentially dangerous Internet sites that harbor malicious software. Ë IMPORTANT: To use the E-Mail Scan, Download Scan or Internet Filter they attempt to execute from within infected files. 86 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 87
that it maintains, and blocks those that could cause problems. • Internet site filtering. The VShield scanner comes your system. Browser and e-mail client support The VShield scanner works seamlessly with to learn how to do the required setup. McAfee has tested these web browsers and verified that - McAfee AVDCDE-AA-AA | User Guide - Page 88
Lotus cc:Mail v6.x, v7.x, and v8.x (not MAPI-compliant) McAfee does not certify VShield software compatibility with client software not listed above. modules are active. To learn what each icon state means, see "Understanding the VShield system tray icon states" on page 92. At first, the scanner - McAfee AVDCDE-AA-AA | User Guide - Page 89
loads as a Windows NT service called McShield, which you can see in the Windows Services control panel. Š NOTE: McAfee recommends that you do not start or stop the McShield service from the Windows control panel. the Components property page. 5. Click OK to close the control panel. User's Guide 89 - McAfee AVDCDE-AA-AA | User Guide - Page 90
that point, its state will depend on whether states" on page 92. Method 2: Use the System Scan Status dialog box Follow these steps: 1. Double-click the VShield icon in the Windows system tray to open the System Scan Status dialog box (Figure 4-1). Figure 4-1. System Scan Status dialog box 90 McAfee - McAfee AVDCDE-AA-AA | User Guide - Page 91
of modules you enable, the VShield icon will display a different state. Method 3: Use the VShield Properties dialog box Follow these steps: on which combination of modules you enable, the VShield icon displays a different state. If you enable all of its modules, the scanner will display in - McAfee AVDCDE-AA-AA | User Guide - Page 92
scanner has disabled. Such modules do not scan files. The following table shows and describes each icon state: This icon means that the VShield scanner has started and all VShield modules are active This icon icon means that all VShield modules are inactive 92 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 93
wizard welcome panel (Figure 4-3). Figure 4-3. VShield configuration wizard - Welcome panel 3. Click Next> to display the System Scan configuration panel (see Figure 4-4 on page 94). User's Guide 93 - McAfee AVDCDE-AA-AA | User Guide - Page 94
whenever you read from or write to them, or when you shut down your computer. If it finds a virus, the module will sound an alert and prompt you for a response. The module will appear (Figure 4-5). Figure 4-5. VShield configuration wizard - E-mail Scan panel 94 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 95
NOTE: If you use both types of mail systems, select both checkboxes. Note that the E-Mail Scan module supports only one type of corporate e-mail system at a time, however. If you need to verify which e-mail system learn more about these programs, consult your Microsoft documentation. User's Guide 95 - McAfee AVDCDE-AA-AA | User Guide - Page 96
click Next> to continue. The next wizard panel sets options for the VShield Internet Filter module (Figure 4-7). Figure 4-7. VShield configuration wizard - Internet Filter panel 96 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 97
harmful objects and sites that it uses to check the sites you visit and the objects you encounter. If it finds a match, it can either block it automatically, or offer you the chance to allow or deny access. To with a password-choose your options in the VShield Properties dialog box. User's Guide 97 - McAfee AVDCDE-AA-AA | User Guide - Page 98
to a floppy disk. As an advanced option, you can activate heuristic scanning, which gives the scanner the capability to detect unidentified or unclassified viruses. 98 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 99
also set it to ask you what to do when it finds a virus. Elsewhere in this module, you can choose options that tell the VShield scanner to display a state icon in the Windows taskbar that tells you at a glance which of the Run, Copy, Create, and Rename checkboxes for full coverage. User's Guide 99 - McAfee AVDCDE-AA-AA | User Guide - Page 100
NOTE: If you have network drives mapped to your computer from which you copy files, or if other network users copy files from your computer, McAfee strongly recommends that you have the VShield scanner installed both on your computer and on the computer that "owns" the network drive. You should also - McAfee AVDCDE-AA-AA | User Guide - Page 101
System Scan module will examine, click Extensions to open the Program File Extensions dialog box (Figure 4-10). Figure 4-10. Program File Extensions dialog box User's Guide 101 - McAfee AVDCDE-AA-AA | User Guide - Page 102
Scan module at will. Select the System Scan can be disabled checkbox in order to have the option to disable this module. Note that McAfee recommends that you leave the System Scan module enabled for maximum protection. Clearing this checkbox removes the Exit and System Scan items from the VShield - McAfee AVDCDE-AA-AA | User Guide - Page 103
you have enabled. See "Understanding the VShield system tray icon states" on page 92 for details. Double-clicking the icon opens the Because the System Scan module looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give User's Guide 103 - McAfee AVDCDE-AA-AA | User Guide - Page 104
viruses. - Enable macro and program file heuristics scanning. Choose this option to have the module use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection. Š NOTE: The System Scan module will use heuristic scanning techniques only - McAfee AVDCDE-AA-AA | User Guide - Page 105
time. Use the Action property page to specify which response options you want the module to give you when it finds a virus, or which actions you want it to take on its own. Š NOTE: This property page will "Responding when the VShield scanner detects malicious software" on page 65. User's Guide 105 - McAfee AVDCDE-AA-AA | User Guide - Page 106
4-13). Here you can choose the method you want the System Scan module to use to alert you when it finds a virus. Figure 4-13. Prompt Type area Your choices are: - BIOS. Click this button to see a option tells the module to delete the infected file immediately. 106 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 107
To preserve files as virus samples, McAfee recommends moving infected files to a quarantine folder as soon as it finds them. By default, the module the infected file as soon as it finds it. If the module cannot remove the module delete every infected file it finds immediately. Be sure to enable the - McAfee AVDCDE-AA-AA | User Guide - Page 108
Report options" on page 110 for details), the program will record the names of any viruses it finds and the names of infected files so that you can delete them at your next opportunity. 4. Click Figure 4-14. System Scan Properties dialog box - Alert page 108 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 109
to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of Select the Sound audible alert checkbox to have the module beep when it finds an infected file. You can change the setting for this option only User's Guide 109 - McAfee AVDCDE-AA-AA | User Guide - Page 110
the Log to file checkbox. By default, the System Scan module writes log information to the file VSHLOG.TXT in the VirusScan program directory. 110 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 111
this information: • Virus Detection. Select this checkbox to have the log file record how many viruses the module finds during each scan session. Clear the checkbox to leave this information out of the log file. • Virus the actions that the module took during each scan session. User's Guide 111 - McAfee AVDCDE-AA-AA | User Guide - Page 112
target, and explains whether the application will exclude the item when it scans files, when it scans your hard disk boot sector, or both. 112 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 113
volumes to the exclusion list. Click Add to open the Add Exclude Item dialog box (Figure 4-17). Figure 4-17. Add Exclude Item dialog box User's Guide 113 - McAfee AVDCDE-AA-AA | User Guide - Page 114
in your hard disk's boot sector or master boot record. Use this option to exclude system files, such as COMMAND.COM, from scan operations. + WARNING: McAfee recommends that you do not exclude your system files during a scan session. e. Repeat Step a. through Step d. until you have listed all of the - McAfee AVDCDE-AA-AA | User Guide - Page 115
soon as it appears on your desktop, the module can intercept viruses before they have a chance to spread. When it finds a virus, the module can ask you what you want it to do, or it can take a variety of automatic tell the module which e-mail systems you use before it can activate. User's Guide 115 - McAfee AVDCDE-AA-AA | User Guide - Page 116
e-mail attachments checkbox. The options in the rest of the property page activate (Figure 4-18). Figure 4-18. E-mail Scan Properties dialog box - Detection page 116 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 117
usually do so through a gateway application. The E-mail Scan module supports two types of corporate e-mail systems: - Microsoft Exchange (MAPI). option if you work from home or through a dial-up Internet service provider with such software as Qualcomm's Eudora Pro, Microsoft's Outlook Guide 117 - McAfee AVDCDE-AA-AA | User Guide - Page 118
viruses in files attached to each e-mail message as it arrives in your MAPI mailbox or via other MAPI services. • If you chose Lotus cc:Mail as your corporate e-mail system, you'll need to tell the , see "Current list of compressed files scanned" on page 292. 118 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 119
Heuristic scanning technology enables the E-Mail Scan module to recognize new viruses based on their resemblance to similar viruses that the module already knows. User's Guide 119 - McAfee AVDCDE-AA-AA | User Guide - Page 120
Because the E-Mail Scan module looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give you this option to have the module use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection. Š - McAfee AVDCDE-AA-AA | User Guide - Page 121
time. Use the Action property page to specify which response options you want the module to give you when it finds a virus, or which actions you want it to take on its own. Š NOTE: The E-Mail Scan module (Figure 4-22). Figure 4-22. E-mail Scan Properties dialog box - Action page User's Guide 121 - McAfee AVDCDE-AA-AA | User Guide - Page 122
to ask you what to do when it finds a virus-the module will display an alert message that the module displays when it finds a virus. Selecting Delete file here, NOTE: The E-Mail Scan module does not support this option for Lotus cc:Mail v7.x and finds them. The module moves these files to - McAfee AVDCDE-AA-AA | User Guide - Page 123
"Choosing Report options" on page 127 for details), the program will record the names of any viruses it finds and the names of infected files so that you can delete them at your next opportunity. Use this option Cancel will not undo any changes you already saved by clicking Apply. User's Guide 123 - McAfee AVDCDE-AA-AA | User Guide - Page 124
remove viruses from your system automatically, as it finds them, with almost no further intervention. But if you want the module to send alert messages to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of methods to - McAfee AVDCDE-AA-AA | User Guide - Page 125
is a template-the module will send the message you compose automatically to each recipient you designate, so McAfee recommends that you enter a message that all recipients can read and understand. Apart from the steps you e-mail message, the To: button and text box are unavailable. User's Guide 125 - McAfee AVDCDE-AA-AA | User Guide - Page 126
from your mail system's user directory or address book. Š NOTE: To find an e-mail address in your mail system's user directory, you must store address Select the Sound audible alert checkbox to have the module beep when it finds an infected file. You can change the setting for this option only - McAfee AVDCDE-AA-AA | User Guide - Page 127
Display custom message checkbox to have the module add a custom message to the alert box it displays when it finds an infected file. As with the audible alert, you can change the setting for this option only if you to display the correct property page (see Figure 4-24 on page 128). User's Guide 127 - McAfee AVDCDE-AA-AA | User Guide - Page 128
. You can choose to record any of this information: • Virus Detection. Select this checkbox to have the log file record how many viruses the module finds during each scan session. Clear the checkbox to leave this information out of the log file. 128 - McAfee AVDCDE-AA-AA | User Guide - Page 129
scan session. Clear this checkbox to leave this information out. Š NOTE: The E-Mail Scan module does not support this option for Lotus cc:Mail v7.x and earlier e-mail systems. The option will not appear here if Cancel will not undo any changes you already saved by clicking Apply. User's Guide 129 - McAfee AVDCDE-AA-AA | User Guide - Page 130
the E-mail Scan module's Detection page. See "Choosing Detection options" on page 116 for details. When it finds a virus, the module can ask you what you want it to do, or it can take a variety Figure 4-25. Download Scan Properties dialog box - Detection page 130 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 131
any way. • Scan compressed files. Select the Compressed files checkbox to have the module look for viruses in compressed files or in file archives. User's Guide 131 - McAfee AVDCDE-AA-AA | User Guide - Page 132
or previously unidentified virus. Because the Download Scan module looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give you a false indication of the Download Scan module to use. Your choices are: 132 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 133
file heuristics scanning. Choose this option to have the module use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection. Š NOTE: The Download Scan Cancel will not undo any changes you already saved by clicking Apply. User's Guide 133 - McAfee AVDCDE-AA-AA | User Guide - Page 134
user action. Choose this response if you want the Download Scan module to ask you what to do when it finds a virus-the module will display an alert message and offer you a range of possible responses. Š NOTE: to prompt you with a message, a beep, or both. 134 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 135
message that the module displays when it finds a virus. Selecting Delete file here, for a quarantine folder as soon as it finds them. The module moves these files any action against the virus it finds. If you also activate the the names of any viruses it finds and the names of infected files so - McAfee AVDCDE-AA-AA | User Guide - Page 136
Scan module look for and remove viruses from your system automatically, as it finds them, with almost no further intervention. But if you want the module to tell you as soon as checkbox to have the module send alert messages to Alert Manager for distribution. 136 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 137
Scanner Alert Manager is a separate McAfee software component that collects alert messages and . 3. Select the Sound audible alert checkbox to have the module beep when it finds an infected file. You can change the setting for this option only if you select saved by clicking Apply. User's Guide 137 - McAfee AVDCDE-AA-AA | User Guide - Page 138
the Log to file checkbox. By default, the Download Scan module writes log information to the file WEBINET.TXT in the VirusScan program directory. 138 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 139
• Virus Detection. Select this checkbox to have the log file record how many viruses the module finds during each scan session. Clear the checkbox to leave this information out. • Infected file deletion. Select Scan module settings. Clear the checkbox to leave this information out. User's Guide 139 - McAfee AVDCDE-AA-AA | User Guide - Page 140
objects known to cause harm to screen Java classes and ActiveX controls you encounter as you browse. When it finds a virus, the module can ask you what you want it to do, or it can block the specified that you wanted to install the Internet Scan component. 140 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 141
the objects you encounter as you visit Internet sites with an internal database that lists the characteristics of objects known to cause harm. When it finds a match, the module can alert you and let you decide what to do, or it can automatically keep the object from downloading. See "Choosing Action - McAfee AVDCDE-AA-AA | User Guide - Page 142
that users do not delete them. Each address consists of four numeric groups of one to three digits each, formatted in this manner: 123. series is the banned site's domain address-the number you use to find it on the Internet- and the second is a "subnet mask." McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 143
list in the text box on the left. Be sure to format the address with periods between each number group. b. Type the subnet mask associated with the IP address you want to add to the Banned IP Addresses Banned URLs dialog box (Figure 4-34). Figure 4-34. Banned URLs dialog box User's Guide 143 - McAfee AVDCDE-AA-AA | User Guide - Page 144
list so that it has all of the addresses you want to block, click OK to return to the Internet Filter Properties dialog box. 144 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 145
from the list, click the Alert tab to specify whether you want the Internet Filter module to prompt you with a message, a beep, or both. User's Guide 145 - McAfee AVDCDE-AA-AA | User Guide - Page 146
harmful objects or dangerous Internet sites away from your system automatically, as it finds them, with almost no further intervention. But if you want the module to tell you as soon as 4-37). Figure 4-37. Internet Filter Properties dialog box - Alert page 146 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 147
to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of Select the Sound audible alert checkbox to have the module beep when it finds an infected file. You can change the setting for this option only User's Guide 147 - McAfee AVDCDE-AA-AA | User Guide - Page 148
Report tab in the Internet Filter module to display the correct property page (Figure 4-38). Figure 4-38. Internet Filter Properties dialog box - Report page 148 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 149
(see Step 4 on page 102 for details), then protect that setting with a password, to can enforce a strict anti-virus security policy easily and effectively. User's Guide 149 - McAfee AVDCDE-AA-AA | User Guide - Page 150
which property pages in individual modules you want to lock. The other tabs in the Security Properties dialog box let you designate individual pages. 150 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 151
dialog box Enter the password you chose in the text box provided, then click OK to get access to the VShield Properties dialog box. User's Guide 151 - McAfee AVDCDE-AA-AA | User Guide - Page 152
close the dialog box without saving any changes, click Cancel. Š NOTE: Clicking Cancel will not undo any changes you already saved by clicking Apply. 152 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 153
shortcut menu The VShield scanner groups several of its common commands in active. To learn what each icon state means, see "Understanding the VShield system tray icon states" on page 92. You can stop of its modules enabled. In this state, the scanner still leaves an icon in the Windows system tray that - McAfee AVDCDE-AA-AA | User Guide - Page 154
its shortcut menu. 2. Choose Exit. The VShield scanner will stop and unload itself from memory. The VShield icon will disappear from the Windows taskbar. 154 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 155
menu. This will shut the Console down and unload it from memory. To run any tasks you have scheduled, the Console must be active. User's Guide 155 - McAfee AVDCDE-AA-AA | User Guide - Page 156
panel (Figure 4-43). to open it Figure 4-43. VirusScan control panel - Service page 3. Click Stop in the Service page. All active VirusScan components will stop, close all open windows or dialog boxes "Enabling or starting the VShield scanner" on page 88. 156 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 157
modules will read Enable. 3. Click Close to close the dialog box. Depending on which combination of modules you enable, the VShield icon will display a different state. To learn what each icon state means, see "Understanding the VShield system tray icon states" on page 92. User's Guide 157 - McAfee AVDCDE-AA-AA | User Guide - Page 158
on which modules you disable, the VShield icon will display a different state. If you disable all of its modules, the scanner will display in tray. Using this method to disable the module makes the disabled state the module's "default" state. If you later use the shortcut menu to enable the module, - McAfee AVDCDE-AA-AA | User Guide - Page 159
tab that corresponds to the program component you want to configure, then click Properties to open the VShield Properties dialog box for that module. User's Guide 159 - McAfee AVDCDE-AA-AA | User Guide - Page 160
Console icon in the Windows system tray to bring the Console window to the foreground (see Figure 4-42 on page 155). 2. Double-click the McAfee VShield task in the task list to display the Task Properties dialog box shown in Figure 4-46. Figure 4-46. VShield Task Properties dialog box 3. Click - McAfee AVDCDE-AA-AA | User Guide - Page 161
the VirusScan application? McAfee desktop anti-virus operation, which targets it examines, what it does when it finds a virus, or any other aspect of the scan operation. of desktop anti-virus program components described in this User's Guide, and to a particular component of that set: SCAN32 - McAfee AVDCDE-AA-AA | User Guide - Page 162
. Depending on the degree to which you swap as often as several times a day. Other good habits to cultivate down your computer each day. Use the VShield today, it takes only a moment to download a virus from a conflict has disabled background scanning for that moment, or if you have not configured - McAfee AVDCDE-AA-AA | User Guide - Page 163
running the application from the command line. The VirusScan Administrator's Guide lists the command-line options for this method. The next taskbar, point to Programs, then to Network Associates. Next, choose McAfee VirusScan. The VirusScan Classic main window appears (Figure 5-1). Figure 5-1. - McAfee AVDCDE-AA-AA | User Guide - Page 164
application activity log. Choose View Activity Log from the File menu to open the VSCLOG.TXT file in a Notepad window. Figure 5-2. VirusScan Activity Log 164 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 165
to run-Scan My Computer and Scan Drive 'C'. To learn more about configuring and running scan tasks, see "Creating new tasks" on page 200. User's Guide 165 - McAfee AVDCDE-AA-AA | User Guide - Page 166
saved from the VirusScan application window. This reopens the VirusScan application window and loads the configuration options you saved (Figure 5-4). Figure 5-4. VirusScan Advanced window 166 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 167
the settings file, then choosing Start from the shortcut menu that appears. Ordinarily, you'll find your settings files in the VirusScan program directory, but you can save your settings files anywhere these property pages, "Configuring VirusScan application options" on page 208. User's Guide 167 - McAfee AVDCDE-AA-AA | User Guide - Page 168
to use as it runs. For a complete list of available options, see the VirusScan Administrator's Guide. Precede each option with a /. Although the application will allow you to specify some options without can choose configuration options for a scan operation. 168 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 169
• what you want it to scan • what you want it to do if it finds a virus • how it should let you know when it finds a virus • whether you want it to keep track of its actions A series of property virus infection (Figure 5-6). Figure 5-6. VirusScan Classic window - Where & What page User's Guide 169 - McAfee AVDCDE-AA-AA | User Guide - Page 170
application will not scan files stored at the root level of the folder you designate. To scan those files, clear the Include subfolders checkbox. 170 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 171
scan all of the files on the target you specified, whatever their extensions. Š NOTE: McAfee recommends that you choose this option for your first scan operation, or periodically thereafter, to software to give you when it finds a virus, or which actions you want it to take on its own. User - McAfee AVDCDE-AA-AA | User Guide - Page 172
this response to tell the VirusScan application to remove the virus code from the infected file as soon as it finds it. If the application cannot remove the virus, it will note the incident in its log file. See file, it will note the incident in its log file. 172 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 173
Virus Found dialog box that appears when the application finds an infected file. This alert message can contain any information, from a simple warning to instructions about how to report the incident to a network page (Figure 5-9). Figure 5-9. VirusScan Classic window - Report page User's Guide 173 - McAfee AVDCDE-AA-AA | User Guide - Page 174
application 2. Choose the types of alert methods you want the VirusScan application to use when it finds a virus. You can have it: • Display a custom message. Select the Display message the ability to activate the application's heuristic detection capability. 174 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 175
it: • what you want it to scan • what you want it to do if it finds a virus • how it should let you know when it finds a virus • whether you want it to keep track of its actions • which items you virus infection (Figure 5-10). Figure 5-10. VirusScan Advanced window - Detection page User's Guide 175 - McAfee AVDCDE-AA-AA | User Guide - Page 176
logically mapped via Windows Explorer to a drive letter on your computer. b. When you've chosen your target, click OK to close the dialog box. 176 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 177
, then click OK to close the dialog box. • Remove scan targets. Select one of the listed scan targets, then click Remove to delete it. User's Guide 177 - McAfee AVDCDE-AA-AA | User Guide - Page 178
. Select the All Files checkbox to have the application scan all of the files on the target you specified, whatever their extensions. Š NOTE: McAfee recommends that you choose this option for your first scan operation, or periodically thereafter, to ensure that your system is virus-free. You can - McAfee AVDCDE-AA-AA | User Guide - Page 179
virus. Because the application looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely to have the application use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection User's Guide 179 - McAfee AVDCDE-AA-AA | User Guide - Page 180
response options you want VirusScan software to give you when it finds a virus, or which actions you want it to take disk-the program will display an alert message when it finds a virus and offer you a range of possible responses displays when it finds a virus. Selecting Delete file, here, for example, - McAfee AVDCDE-AA-AA | User Guide - Page 181
virus code from the infected file as soon as it finds it. If the application cannot remove the virus, it option to have the application delete every infected file it finds immediately. Be sure to enable the reporting feature so viruses it finds and the names of infected files so that you can - McAfee AVDCDE-AA-AA | User Guide - Page 182
system automatically, as it finds them, with almost no further intervention. To have the application tell you immediately when it finds a virus so that messages to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of - McAfee AVDCDE-AA-AA | User Guide - Page 183
Display custom message checkbox to have the application add a custom message to the alert box it displays when it finds an infected file. As with the audible alert, you can change the setting for this option only if you review from within the application or from your text editor. User's Guide 183 - McAfee AVDCDE-AA-AA | User Guide - Page 184
log exceeds the file size you set, the application erases the existing log and begins again from the point at which it left off. 184 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 185
system down: • Virus detection. Select this checkbox to have the log file record how many viruses the application finds during each scan operation. Clear the checkbox to leave this information out of the log file. • Virus this checkbox to leave this information out of the log file. User's Guide 185 - McAfee AVDCDE-AA-AA | User Guide - Page 186
exclude items text box. To learn more about how to use the VirusScan control panel, see "Understanding the VirusScan control panel" on page 277. 186 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 187
application to exclude. Š NOTE: If you have chosen to move infected files to a quarantine folder automatically, the application excludes that folder from scan operations. User's Guide 187 - McAfee AVDCDE-AA-AA | User Guide - Page 188
hard disk's boot sector or master boot record. Use this option to exclude system files, such as COMMAND.COM, from scan operations. + WARNING: McAfee recommends that you do not exclude your system files from scan operations. e. Repeat Step a. through Step d. until you have listed all of the files - McAfee AVDCDE-AA-AA | User Guide - Page 189
box below to confirm your choice. b. Click OK to close the Specify Password dialog box. 4. Click OK to return to the VirusScan Advanced window. User's Guide 189 - McAfee AVDCDE-AA-AA | User Guide - Page 190
Using the VirusScan application 190 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 191
on the number, type, size and other characteristics of any viruses it finds. • Supplement or replace on-access scanning. McAfee recommends that you use VShield software to scan continuously for viruses, but if your system reduces the likelihood that infected files remain undetected. User's Guide 191 - McAfee AVDCDE-AA-AA | User Guide - Page 192
start your computer, that scan all drives included in the My Computer group, that scan your C: drive, and that update VirusScan software data the VirusScan Console running in order to run any tasks you have scheduled. McAfee recommends that you set the Console to start automatically, as soon as you - McAfee AVDCDE-AA-AA | User Guide - Page 193
default tasks that come with the Console, pre-configured and ready to run. A "task" is a set of instructions to run a particular program, in a certain configuration, at a certain time. Along with a name for each task , click View, point to Toolbar, then choose Standard Buttons. User's Guide 193 - McAfee AVDCDE-AA-AA | User Guide - Page 194
active at the same time-a check mark beside the menu item indicates which view is active. You'll find most of the same toolbar commands in the menus at the top of the Console window, and in shortcut 't want to run. See "Enabling tasks" on page 204 for details. 194 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 195
or stopping the VShield scanner" on page 153. • Connect to the McAfee Virus Information Library. Choose Virus List from the View menu, or click information" on page 74 to learn more about what information you'll find in the library. Š NOTE: To connect to the Virus Information User's Guide 195 - McAfee AVDCDE-AA-AA | User Guide - Page 196
up the VShield properties dialog box to configure it. See "Setting VShield scanner properties" on page 97 to learn which options you have available. 196 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 197
server or File Transfer Protocol (FTP) site that you designate. The task comes configured to connect to a McAfee server, but you may also set it to download files internally. You must also schedule and activate the task , see "Configuring VirusScan application options" on page 208. User's Guide 197 - McAfee AVDCDE-AA-AA | User Guide - Page 198
to see these statistics. To learn how to display a real-time update for these statistics, see "Tracking VShield software status information" on page 159. 198 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 199
the Password protect this task checkbox, then click Password to open the Specify Password dialog box. b. Enter a unique password in the text box provided. User's Guide 199 - McAfee AVDCDE-AA-AA | User Guide - Page 200
copy the existing configuration options from the Scan My Computer and Scan Drive 'C' tasks for use as foundation settings for your own new tasks. 200 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 201
password in the text box provided. You may enter a maximum of 20 characters of any type. Be sure to choose a password you will remember. User's Guide 201 - McAfee AVDCDE-AA-AA | User Guide - Page 202
task. 4. Specify how you want the task interface to appear and the degree of control over the task you want to have as it runs. box active. The VirusScan application will still notify you when it finds a virus, if you have configured any local alerting options for McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 203
VirusScan application to quit automatically if it has not detected any viruses during this scan task. If the application does find a virus, it will remain open to display its scan results. If you run the task in normal scan appears. Click Scan Now in this window to run the task. User's Guide 203 - McAfee AVDCDE-AA-AA | User Guide - Page 204
pages for each of the scanner's modules. The Task Properties dialog boxes for the AutoUpdate and AutoUpgrade tasks, meanwhile, will not include status pages. 204 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 205
a month from the list to the right. Next, enter the date and the year in the text boxes provided. • Daily. This runs your task once at the time you specify on the days you indicate. Enter the time in the text box provided, then select the checkboxes in the Start At area - McAfee AVDCDE-AA-AA | User Guide - Page 206
each month on the day and at the time you specify. Enter the time in the leftmost text box, then enter the day of the month on to run. If, for example, you set this task to run daily at 15:00, then you selected Enable randomization and specified a time window McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 207
pages for all VShield modules. The Task Properties dialog box for AutoUpdate and AutoUpgrade will not include a status page. To learn more about how to find status information for the VShield scanner, see "Tracking VShield software status information" on page 159. User - McAfee AVDCDE-AA-AA | User Guide - Page 208
you can use to define your task. These property pages replicate many of the options you find in the VirusScan application main window, and add others that help you define a task you want 6-8). Figure 6-8. VirusScan Properties dialog box - Detection page 208 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 209
the application to scan all drives logically mapped via Windows Explorer to a drive letter on your computer. b. Click OK to close the dialog box. User's Guide 209 - McAfee AVDCDE-AA-AA | User Guide - Page 210
, then click OK to close the dialog box. • Remove scan targets. Select one of the listed scan targets, then click Remove to delete it. 210 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 211
application scan all of the files on the target you specified, whatever their extensions. Š NOTE: McAfee recommends that you choose this option for your first scan operation, or periodically thereafter, to ensure that box (Figure 6-11). Figure 6-11. Advanced Scan Settings dialog box User's Guide 211 - McAfee AVDCDE-AA-AA | User Guide - Page 212
virus. Because the application looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give option to have the application use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection. - McAfee AVDCDE-AA-AA | User Guide - Page 213
time. Use the Action property page to specify which response options you want VirusScan software to give you when it finds a virus, or which actions you want it to take on its own. Follow these steps: 1. To start to display the correct property page (see Figure 6-12 on page 214). User's Guide 213 - McAfee AVDCDE-AA-AA | User Guide - Page 214
the Action page causes an option button to appear in an alert message that the application displays when it finds a virus. Selecting Delete file, here, for example, causes a Delete button to appear in the alert This is the only option not selected by default. 214 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 215
Choose this response to tell the application to remove the virus code from the infected file as soon as it finds it. If the application cannot remove the virus, it will note the incident in its log file. • Clicking Cancel will not undo any changes you already saved by clicking Apply. User's Guide 215 - McAfee AVDCDE-AA-AA | User Guide - Page 216
system automatically, as it finds them, with almost no further intervention. To have the application tell you immediately when it finds a virus so that messages to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of - McAfee AVDCDE-AA-AA | User Guide - Page 217
Display custom message checkbox to have the application add a custom message to the alert box it displays when it finds an infected file. As with the audible alert, you can change the setting for this option only if you later review from within the application or from a text editor. User's Guide 217 - McAfee AVDCDE-AA-AA | User Guide - Page 218
disk or on your network. You may use a different file, but the text file must already exist. The application will not create a new file. 218 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 219
• Virus detection. Select this checkbox to have the log file record how many viruses the application finds during each scan operation. Clear the checkbox to leave this information out of the log file. • files the application moved to a quarantine folder. - Your application settings. User's Guide 219 - McAfee AVDCDE-AA-AA | User Guide - Page 220
Bin because Windows will not run items stored there. This item, therefore, will appear in the exclusion list when you first open the window. 220 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 221
exclude. You can • Add files, folders or volumes to the exclusion list. Click Add to open the Add Exclude Item dialog box (Figure 6-16). User's Guide 221 - McAfee AVDCDE-AA-AA | User Guide - Page 222
in your hard disk's boot sector or master boot record. Use this option to exclude system files, such as COMMAND.COM, from scan operations. + WARNING: McAfee recommends that you do not exclude your system files from scan operations. 222 - McAfee AVDCDE-AA-AA | User Guide - Page 223
dialog box appears (see Figure 6-8 on page 208). Click the Security tab to display the correct property page. (see Figure 6-17 on page 224). User's Guide 223 - McAfee AVDCDE-AA-AA | User Guide - Page 224
any task you create by copying this task (see "Using the Console window" on page 194 for details), select the Inherit security options checkbox. 224 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 225
to the Console window without saving your changes, click Cancel. Š NOTE: Clicking Cancel will not undo any changes you already saved by clicking Apply. User's Guide 225 - McAfee AVDCDE-AA-AA | User Guide - Page 226
Creating and Configuring Scheduled Tasks 226 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 227
the scan engine? The Olympus scan engine is at the heart of McAfee anti-virus software. The engine contains the program logic necessary to scan particular points, process and pattern-match virus definitions with data it finds in your files, decrypt and run virus code in an emulated . User's Guide 227 - McAfee AVDCDE-AA-AA | User Guide - Page 228
alerts and other useful items to subscribers. McAfee recommends using a combination of this service and the mechanisms provided in VirusScan software to purpose-it can choose which route it must take based on what it finds on your system. To learn more about how iDAT files work, see Appendix D, - McAfee AVDCDE-AA-AA | User Guide - Page 229
package, on any supported Windows platform, without to automate updates to a significant degree. To learn how to combine the down any active scan operations, services, or other memory-resident software that changes with each .DAT file release. McAfee does not recommend this method to update Guide 229 - McAfee AVDCDE-AA-AA | User Guide - Page 230
the default configuration enabled, each network node tries to update its .DAT files at once. Instead, McAfee recommends that you use AutoUpdate in conjunction with its companion service, the Enterprise SecureCast channel, in an efficient "push-pull" arrangement. Once you install its client software - McAfee AVDCDE-AA-AA | User Guide - Page 231
Reduce the likelihood that you will need to wait to download new .DAT files. Traffic on McAfee servers increases dramatically on regular .DAT file publishing dates. Avoiding the competition for network bandwidth enables whether you want it to keep track of its actions in a log file User's Guide 231 - McAfee AVDCDE-AA-AA | User Guide - Page 232
. A site is disabled if you clear this checkbox. This designation does not change whether or not the AutoUpdate utility can connect with the site. 232 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 233
want to make, then click OK to save them and return to this dialog box. To see descriptions and instructions for configuring the available options, see "Configuring update options" on page 235. • Remove an existing site as lower in priority, select the site, then click Move Down. User's Guide 233 - McAfee AVDCDE-AA-AA | User Guide - Page 234
available. If you have the Force Update option selected, AutoUpdate will download any .DAT files it finds on the first site to which it can connect successfully. See "Configuring advanced update options" on page the task or when you shut your system down. 234 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 235
site, then click Edit. Either action will open the Automatic Update Properties dialog box (Figure 7-4). Figure 7-4. Automatic Update Properties dialog box Update Options page User's Guide 235 - McAfee AVDCDE-AA-AA | User Guide - Page 236
selecting the Use Logged In Account checkbox has slightly different effects. If you've scheduled your file update, the AutoUpdate utility will use its own service account to log on to the upgrade server and download new files. If you click Update now, the AutoUpdate utility will use the same account - McAfee AVDCDE-AA-AA | User Guide - Page 237
files on an FTP site you designate. To use this option, the target server must have an FTP service enabled. By default, the utility will download new files from the Network Associates FTP site, which accepts ZIP archives, then install them into the VirusScan program directory. User's Guide 237 - McAfee AVDCDE-AA-AA | User Guide - Page 238
save the .DAT file package, enter a path and folder name in the text box below this checkbox, or click Browse to locate a suitable folder. 238 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 239
Update. Select this checkbox to tell the AutoUpdate utility to download and install whichever .DAT file package it finds on the target server, whether that package is more recent than your existing .DAT files or not. You your .DAT files, you should also leave this checkbox clear. User's Guide 239 - McAfee AVDCDE-AA-AA | User Guide - Page 240
protect your configuration settings, if you wish • Configure the task to download new files from a specific location on your network, or on the Internet 240 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 241
does not come configured with any default upgrade site. Instead, McAfee recommends that you use other mechanisms, such as the Enterprise SecureCast service, to receive new SuperDAT or program files, then place those files it downloads-install them, save them for future use, or both User's Guide 241 - McAfee AVDCDE-AA-AA | User Guide - Page 242
tasks" on page 204. 2. Click Configure. The Automatic Upgrade dialog box appears with the Upgrade Sites property page selected (see Figure 7-7 on page 243). 242 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 243
each site in turn, starting from the top of the list, until it successfully downloads new files or determines that no new files exist. User's Guide 243 - McAfee AVDCDE-AA-AA | User Guide - Page 244
to make, then click OK to save them and return to this dialog box. To see descriptions and instructions for configuring the available options, see "Configuring upgrade options" on page 246. • Remove an existing site you chose for this task. Click Upgrade now. 244 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 245
a listed site after three tries, or if it does not find new program files, it will connect to each of the other sites listed until it finds the most current program files available. 4. Click the Log Activity 999KB. By default, the AutoUpgrade utility limits the file size to 100KB. User's Guide 245 - McAfee AVDCDE-AA-AA | User Guide - Page 246
: 1. Enter a descriptive name in the Site Name text box that clearly identifies the new site. An example might be Internal Program File Upgrade Site. 246 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 247
If you've scheduled your file update, the AutoUpgrade utility will use its own service account to log on to the upgrade server and download new files. If part of the Local Administrators group-to install new scan engine or any program files that replace existing VirusScan services. User's Guide 247 - McAfee AVDCDE-AA-AA | User Guide - Page 248
on an FTP site you designate. To use this option, the target server must have an FTP service enabled. The AutoUpgrade utility uses its own FTP implementation to connect to the server, but the timeout display the property page shown in Figure 7-5 on page 238. 248 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 249
: • Reboot system, if needed, after a successful update. Select this checkbox to have the AutoUpgrade utility restart your system after it installs new program files. User's Guide 249 - McAfee AVDCDE-AA-AA | User Guide - Page 250
as part of the file name. 2. Download the file AUTOUPG.ZIP, which you will find on the Network Associates FTP site in this location: ftp://:@ftp.nai.com/licensed anti-virus software expects to find a lower-case filename: pkgdesc.ini. 250 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 251
the file name you specify and in the location you specify. By default, the SuperDAT utility creates a log file in the current working directory. User's Guide 251 - McAfee AVDCDE-AA-AA | User Guide - Page 252
download and install the new files from this package. To learn more about how the SuperDAT utility works, download the SuperDAT User's Guide from the McAfee website at: http://www.nai.com/asp_set/download/upgrade/login.asp Otherwise, consult the README.TXT file that comes with each weekly SuperDAT - McAfee AVDCDE-AA-AA | User Guide - Page 253
in old e-mail messages stored on your server or in e-mail messages that arrive during periods you are logged off from your e-mail system. User's Guide 253 - McAfee AVDCDE-AA-AA | User Guide - Page 254
fast e-mail connections between powerful, web-enabled, scripted client software, it takes only a moment to get infected, sometimes even before you open your mail. Regular scan operations can often or Outlook mailbox for viruses (see Figure 8-1 on page 255). 254 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 255
To resume the operation, click . Figure 8-1. E-Mail Scan extension at work If it finds an infected file, the E-Mail Scan extension will ask you how to respond to the want it to do if it finds a virus • how it should let you know when it finds a virus • whether you want it to keep track of - McAfee AVDCDE-AA-AA | User Guide - Page 256
, or click in the client application toolbar. The E-Mail Scan Properties dialog box will appear (Figure 8-2). Figure 8-2. E-Mail Scan Properties dialog box - Detection page 256 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 257
HTML) tags, and VBScript applets, all of which can in turn harbor specialized viruses, worms, or Trojan horse programs. Š NOTE: The extension after you have installed and used your mail system for some time, McAfee recommends that you perform at least one such scan operation to ensure that Guide 257 - McAfee AVDCDE-AA-AA | User Guide - Page 258
the All Files checkbox to have the E-Mail Scan extension scan all file types in your mailbox, whatever their file name extensions. Š NOTE: McAfee recommends that you choose this option for your first scan operation, or periodically thereafter, to ensure that your mailbox is virus-free. You can then - McAfee AVDCDE-AA-AA | User Guide - Page 259
virus. Because the extension looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give to have the extension use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection . User's Guide 259 - McAfee AVDCDE-AA-AA | User Guide - Page 260
Use the Action property page to specify which response options you want the extension to give you when it finds a virus, or which actions you want it to take on its own. Follow these steps: 1. Click will change to show you additional options for each response. 260 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 261
mailbox-the program will display an alert message when it finds a virus and offer you a range of possible in an alert message that the extension displays when it finds a virus. Selecting Delete file, here, for example, Exchange server as soon as it finds them. The extension moves these files to - McAfee AVDCDE-AA-AA | User Guide - Page 262
infected attachment as soon as it finds it. If the extension cannot infected e-mail attachment it finds immediately. Be sure to names of any viruses it finds and the names of infected files finds them, with almost no further intervention. To have the extension tell you immediately when it finds - McAfee AVDCDE-AA-AA | User Guide - Page 263
E-Mail Scan extension send alert messages to Alert Manager for distribution. Alert Manager is a separate McAfee software component that collects alert messages and uses a variety of methods to send them to recipients recipient in your organization, or any number of other recipients. User's Guide 263 - McAfee AVDCDE-AA-AA | User Guide - Page 264
the message you compose automatically to each recipient you designate, so McAfee recommends that you enter a message that all recipients can read from your mail system's user directory or address book. Š NOTE: To find an e-mail address in your mail system's user directory, you must store address - McAfee AVDCDE-AA-AA | User Guide - Page 265
you entered for this message. 4. Select the Sound audible alert checkbox to have the extension beep when it finds an infected file. You can change the setting for this option only if you select Prompt for user action text box provided. You can enter a maximum of 250 characters here. User's Guide 265 - McAfee AVDCDE-AA-AA | User Guide - Page 266
Report tab in the E-Mail Scan Properties dialog box to display the correct property page (Figure 8-6). Figure 8-6. E-Mail Scan Properties dialog box - Report page 266 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 267
down: • Virus detection. Select this checkbox to have the log file record how many viruses the extension finds during each scan operation. Clear the checkbox to leave this information out of the log file. • Virus cleaning checkbox to leave this information out of the log file. User's Guide 267 - McAfee AVDCDE-AA-AA | User Guide - Page 268
close the dialog box without saving your changes, click Cancel. Š NOTE: Clicking Cancel will not undo any changes you already saved by clicking Apply. 268 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 269
v8.0. The cc:Mail clients use a proprietary e-mail system that the E-Mail Scan extension does not support directly. Instead, VirusScan software includes a specialized cc:Mail extensions that plugs into VShield software, logs on and report options that you want ScreenScan to use. User's Guide 269 - McAfee AVDCDE-AA-AA | User Guide - Page 270
to examine for viruses. You can • Add scan targets. Click Add to open the Add Scan Item dialog box (see Figure 8-8 on page 271). 270 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 271
, then click OK to close the dialog box. • Remove scan targets. Select one of the listed scan targets, then click Remove to delete it. User's Guide 271 - McAfee AVDCDE-AA-AA | User Guide - Page 272
All Files checkbox to have the utility scan all of the files in the mailbox or public folder you specified, whatever their extensions. Š NOTE: McAfee recommends that you choose this option for your first scan operation, or periodically thereafter, to ensure that your system is virus-free. You can - McAfee AVDCDE-AA-AA | User Guide - Page 273
a new or previously unidentified virus. Because the utility looks simultaneously for file characteristics that rule out the possibility of virus infection, it will rarely give you a false indication of files with a sufficient number of these characteristics as potential viruses. User's Guide 273 - McAfee AVDCDE-AA-AA | User Guide - Page 274
Scanning Tools - Enable macro and program file heuristics scanning. Choose this option to have the utility use both types of heuristics scanning. McAfee recommends that you use this option for complete anti-virus protection. Š NOTE: The utility will use heuristic scanning techniques only on the - McAfee AVDCDE-AA-AA | User Guide - Page 275
utility will run the next time your current screen saver does. If you change screen savers, you should reconfigure your ScreenScan utility options also. User's Guide 275 - McAfee AVDCDE-AA-AA | User Guide - Page 276
Using Specialized Scanning Tools 276 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 277
choose whether you want to have the VirusScan management service load itself when your computer starts. Š NOTE: McAfee strongly recommends that you set the VirusScan management service to load at startup. If you do not, control panel itself (see Figure 9-1 on page 278). to open User's Guide 277 - McAfee AVDCDE-AA-AA | User Guide - Page 278
) as soon as you start your computer. The management service oversees all communications between VirusScan program components, determines which components must load to accomplish program tasks, and allows you to start or stop all program components at once. 278 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 279
. If your computer runs Windows 95 or Windows 98, this service is not directly accessible. Š NOTE: McAfee strongly recommends that you set the VirusScan management service to load at startup. If you do not, you might not any scan task you configure from within the VirusScan Console. User's Guide 279 - McAfee AVDCDE-AA-AA | User Guide - Page 280
OK to save your changes and close the control panel. Click Cancel to close the control panel without saving your changes. Š NOTE: The VirusScan management service must restart itself and all active VirusScan components in order to implement any changes you make. 280 - McAfee AVDCDE-AA-AA | User Guide - Page 281
utility All McAfee anti-virus any workstation detects an infected file. McAfee provides Alert Manager server software for server now comes as an independent package bundled with McAfee NetShield anti-virus software. You can install this statistics and problem areas. To learn how to install - McAfee AVDCDE-AA-AA | User Guide - Page 282
ALR files, and distributing the alert messages from any it finds. Š NOTE: McAfee recommends that you send alert events directly to an Alert alert messages into the Network Associates Magic HelpDesk application for trouble-ticket generation and other features. Alert Manager messages also contain - McAfee AVDCDE-AA-AA | User Guide - Page 283
) administrative software. By default, this checkbox is clear. McAfee recommends that you leave it clear so that the client sends alert messages out. Š NOTE: If you use McAfee ePolicy Orchestrator software in your network environment, VirusScan software will still send - McAfee AVDCDE-AA-AA | User Guide - Page 284
they are not connected to your network. If you have Active Directory Services installed on your computer, clicking Browse displays a list of logical to locate a published Alert Manager server if you have Active Directory Services installed on this computer and running on your network. To prevent - McAfee AVDCDE-AA-AA | User Guide - Page 285
, if it contains the CENTALRT.TXT file, so that it checks periodically for .ALR files. If it finds one, it extracts the contents of the alert message from the file, distributes the message via one of its Centralized Alerting directory to capture any other alert messages that arrive. User's Guide 285 - McAfee AVDCDE-AA-AA | User Guide - Page 286
entered a number, click OK to close the dialog box. 4. Click OK to save your changes and close the Alert Manager Client Configuration dialog box. 286 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 287
the Add Program File Extension dialog box. Type the three-character extension you want to add in the text box provided. Do not include the dot that normally precedes a file name extension. Next, click OK to return to the Program File Extensions dialog box. You can add as many unique extensions - McAfee AVDCDE-AA-AA | User Guide - Page 288
example, the software will use the .XL? wildcard to look for viruses in Microsoft Excel spreadsheet (.XLS) and template (.XLT) files. Š NOTE: McAfee recommends that you scan your system thoroughly during your first scan operation, or periodically thereafter, without limiting the scope of the scan - McAfee AVDCDE-AA-AA | User Guide - Page 289
Default Vulnerable and Compressed File Extensions Table 9-1. Vulnerable file name extensions Extension .COM .CSC .DL? .DOC .DOT .EXE .GMS .GZ? .HLP .HT? .ICE .IM? .INI .JS? .LZH File Type Program can contain virus code that acts directly on web browsers. LHARC compressed files User's Guide 289 - McAfee AVDCDE-AA-AA | User Guide - Page 290
object) files. These files can introduce commands that cause unwanted behavior on the host computer. Lotus AmiPro spreadsheet files. These files include macro capabilities. 290 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 291
. Although they are nominally plain text, these files can contain powerful scripting functions that act through browser software. WinZip and PKZip compressed archive files. User's Guide 291 - McAfee AVDCDE-AA-AA | User Guide - Page 292
target, or add the compressed file's extension to the Program Extensions dialog box, to have the scanner look for viruses in the compressed file. 292 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 293
Scans compressed files within archive • Scans archive • Scans compressed files within archive VShield scanner support? • Scans compressed file if listed in Program Extensions dialog box • Scans compressed file Extensions dialog box • Will not scan compressed files within archive User's Guide 293 - McAfee AVDCDE-AA-AA | User Guide - Page 294
file RAR compressed archive UNIX tape archive file PKZip or WinZip file VirusScan application support? • Scans compressed file if listed in Program Extensions dialog box • Scans compressed dialog box • Will not scan compressed files within archive 294 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 295
B Support Services B Adding value to your McAfee product Choosing McAfee anti-virus, Sniffer Technologies network management, and PGP security software helps to ensure that the critical technology you rely on functions smoothly and effectively. Taking advantage of a Network Associates support plan - McAfee AVDCDE-AA-AA | User Guide - Page 296
documents, including user's guides, FAQ lists, and release notes • Online data file updates and product upgrades The PrimeSupport Connect plan The PrimeSupport Connect plan gives you telephone access to essential product assistance from experienced technical support staff members. With this plan - McAfee AVDCDE-AA-AA | User Guide - Page 297
Network Associates Support Services The PrimeSupport Priority plan The PrimeSupport Priority plan gives you round-the-clock telephone access to essential product assistance from experienced Network Associates technical support staff members. You can purchase the PrimeSupport Priority plan on an - McAfee AVDCDE-AA-AA | User Guide - Page 298
Associates Support Services By calling in advance, your PrimeSupport Enterprise representative can help to prevent problems before products and technology • Unrestricted, 24-hour-per-day online access to technical solutions from a searchable this guide. 298 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 299
one business day Calls answered in 3 minutes, response in one business day Within 1 hour find out more about PrimeSupport, Training and Consultancy options available outside North America, contact your regional sales office. Contact information appears near the front of this guide. User's Guide - McAfee AVDCDE-AA-AA | User Guide - Page 300
/asp_set/download/upgrade/login.asp • Free 24-hour-per-day, seven-days-per-week access to online or electronic support through the Network Associates voice and fax system, the Network Associates website, and through such other electronic services as America Online and CompuServe. To contact Network - McAfee AVDCDE-AA-AA | User Guide - Page 301
team within minutes. Your cost will be $35 per incident. All McAfee products (800) 950-1165 • Pay-Per-Minute Plan. This plan gives you support only when you need it. You get 900-number access to technical support staff members on a priority basis to minimize your hold time. Your first two minutes - McAfee AVDCDE-AA-AA | User Guide - Page 302
Network Associates Customer Service at (972) 855-7044 • In international locations, contact the Network Associates retail technical support center closest to your location for more information. Some support options may not be available in some locations. 302 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 303
with troubleshooting assistance or help in establishing baselines for network performance. Network Associates consultants also develop and deliver custom solutions to help accomplish your project goals-from lengthy, large-scale implementations to brief problem-solving assignments. Jumpstart Services - McAfee AVDCDE-AA-AA | User Guide - Page 304
network professionals through practical, hands-on instruction. The Total Education Services technology curriculum focuses on network fault and performance management and teaches problem-solving at all levels. Network Associates also offers modular product training so that you understand the features - McAfee AVDCDE-AA-AA | User Guide - Page 305
they become available, without your having to download them. The SecureCast service makes use of BackWeb "push" technology to send out new files to the appropriate address: [email protected] (United States) [email protected] (Europe) [email protected] ( .asp User's Guide 305 - McAfee AVDCDE-AA-AA | User Guide - Page 306
Service to Get New Data Files Why should I update my data files? Your software relies on information in its virus definition files (.DAT) files to identify viruses. More than 200 new viruses appear each month, however, and older .DAT files might not recognize them. To meet this challenge, McAfee - McAfee AVDCDE-AA-AA | User Guide - Page 307
client 2. Register to receive SecureCast service InfoPaks To get started with the SecureCast service, review the system requirements shown below your hard disk. If your product came on CD-ROM, select the SecureCast service from the choices on the installation CD-ROM, or locate the file ESC_501.EXE - McAfee AVDCDE-AA-AA | User Guide - Page 308
Using the SecureCast Service to Get New Data Files Figure C-1. BackWeb client welcome panel 3. Read the instructions and warnings on this panel, then click Next> to continue. 4. The BackWeb license agreement appears (Figure C-2). Figure C-2. BackWeb Software License Agreement panel 5. Click Yes to - McAfee AVDCDE-AA-AA | User Guide - Page 309
Using the SecureCast Service to Get New Data Files Figure C-3. Choose Destination Location panel 7. Enter a new location for Setup to install the client its progress. When it has finished, Setup displays the Connection Type panel (Figure C-4). Figure C-4. Connection Type panel User's Guide 309 - McAfee AVDCDE-AA-AA | User Guide - Page 310
Continue with Step 9. • Modem. Choose this option if you dial up to connect to an Internet service provider, or into your corporate network. Skip to Step 13. The Communication Method panel appears (Figure help at http://www.backweb.com/. Next, skip to Step 13. 310 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 311
Using the SecureCast Service to Get New Data Files 10. If you chose HTTP via proxy as your connection method, the HTTP Proxy Setup panel appears (Figure the text boxes provided a user name and password with sufficient rights to permit you to connect, then click Next> to continue. User's Guide 311 - McAfee AVDCDE-AA-AA | User Guide - Page 312
Using the SecureCast Service to Get New the Enterprise SecureCast service After you install the BackWeb client and start it, the SecureCast service immediately opens the channels to which you subscribe appear here. Choose which service information you want to see in this area. InfoPaks downloaded - McAfee AVDCDE-AA-AA | User Guide - Page 313
with Step 1. If you have a slower connection, or if there is unusually heavy traffic at the SecureCast service site or your site, the window might not list any InfoPaks. In that case, minimize or close the the information shown, then click Register Now at the bottom of the panel. User's Guide 313 - McAfee AVDCDE-AA-AA | User Guide - Page 314
number you received when you purchased your software, or that you received from Network Associates Customer Service. Š NOTE: If your company is not a subsidiary of another company, clear the Subsidiary Parent Company checkbox, continue with Step 6 on page 315. 314 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 315
Using the SecureCast Service to Get New Data Files Figure C-13. SecureCast Parent Company Information form 6. If your company is the subsidiary of click Next>. The Online Activity Status panel appears displaying the progress of the registration process (Figure C-15 on page 316). User's Guide 315 - McAfee AVDCDE-AA-AA | User Guide - Page 316
that point, your web browser will connect to the Network Associates SecureCast service electronic customer care page. If you are a corporate user, the window this page to download product updates and upgrades, contact technical support, and get other information directly from Network Associates. The - McAfee AVDCDE-AA-AA | User Guide - Page 317
to Get New Data Files Troubleshooting the Enterprise SecureCast service Registration problems If you try to register during a busy time of day on the web, you may encounter a delay while the server tries to process your registration request. If you receive the error message "1105 Error" or " - McAfee AVDCDE-AA-AA | User Guide - Page 318
Using the SecureCast Service to Get New Data Files BackWeb client • For a comprehensive guide to BackWeb, including additional troubleshooting advice, see the online BackWeb User's Manual: http://www.backweb.com/ 318 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 319
run, and let the utility do its work. Ë IMPORTANT: Incremental updates apply only to .DAT files. McAfee does not provide incremental updates for scan engine files. To update your engine files, use the SuperDAT utility. .DAT files do not work with earlier product or engine versions. User's Guide 319 - McAfee AVDCDE-AA-AA | User Guide - Page 320
the virus definition files it needed to bring your existing .DAT files up to date. The utility finds the information it needs to determine which packages to download in the DELTA.INI file. • DELTA.INI virus definitions that the current .DAT file release does. 320 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 321
can download these files independently of the AutoUpdate utility for posting on your internal servers from the McAfee FTP site at: ftp://ftp.nai.com/licensed/antivirus/datfiles/4.x/ Ë IMPORTANT: To connect to file listing would be: 00_index.txt 40534054.UPD 40544055.UPD 40554056.UPD User's Guide 321 - McAfee AVDCDE-AA-AA | User Guide - Page 322
site to a central server on your network. If you start from the baseline state described in Step 1, you can simply download the most recent .UPD file posted on the McAfee FTP site. If you have not updated in a couple of weeks, open the DELTA.INI file online, and look at the entries - McAfee AVDCDE-AA-AA | User Guide - Page 323
files on your central server. If you configure your computers to download iDAT files directly from the McAfee website, be sure to schedule your updates for a time after the regular weekly .DAT file postings record its failure to download the remaining iDAT files in its activity log. User's Guide 323 - McAfee AVDCDE-AA-AA | User Guide - Page 324
the network load. To learn how this works, see "Enabling tasks" on page 204. Scheduling issues Q: How often should I check for updates? A: Normally, McAfee posts updated .DAT files on a weekly basis. You may, however, check more or less often as your network security needs require. Be aware that - McAfee AVDCDE-AA-AA | User Guide - Page 325
America Online, technical support via, 300 anonymous FTP, use of to log on to update and upgrade sites, 237, 248 anti-virus software code signatures, use of for virus detection, xi consequences of running multiple vendor versions, 64 reporting new viruses not detected by to McAfee, xix audible alert - McAfee AVDCDE-AA-AA | User Guide - Page 326
sector viruses, definition and behavior of, ix to x "Brain" virus, ix browsers supported in VShield, 87 options for, configuring, 230 to 250 use of in conjunction 31 CompuServe, technical support via, xvii, 300 computer problems, attributing to viruses, 59 326 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 327
title bar in, hiding and displaying, 194 toolbar in, hiding and displaying, 193 window, elements of, 193 consulting services, 303 using, 88, 93 to 97 contents of log file, 111, 128, 139, 185, 219, 267 Console to 280 opening, 277 to 278 understanding, 277 Copy in Edit menu, 194 User's Guide 327 - McAfee AVDCDE-AA-AA | User Guide - Page 328
when not attributable to viruses, 63 CTRL+ALT+DEL, ineffective use of to clear viruses, xi Customer Service contacting, xvi adding scan targets, 170, 176 to 178, 209 to 272 adding scan targets in ScreenScan (DMI) alerts, use of with Alert Manager server, 286 328 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 329
test installation, 55 electronic services, contacting for technical support, 300 e-mail addresses for reporting new viruses to McAfee, xix as agent for virus , 306 setting up, 317 support resources for, 317 system requirements for, 307 troubleshooting, 317 unsubscribing from, 317 User's Guide 329 - McAfee AVDCDE-AA-AA | User Guide - Page 330
260, 270 to 272 Excel files, as agents for virus transmission, xii Exchange as e-mail client supported in VShield, 88 exclusion options, choosing for System Scan module, 112 to 115 for VirusScan Advanced, Protocol) use of to obtain VirusScan upgrades, 248 330 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 331
95 in E-mail Scan Properties dialog box, 117 spread of viruses via, xii Internet Explorer as browser supported in VShield, 87 Internet Filter module configuring, 140 to 149 default response options for, 70 set up , 128, 139, 149, 174, 184, 219, 235, 245, 267 MAILSCAN.TXT as, 266 User's Guide 331 - McAfee AVDCDE-AA-AA | User Guide - Page 332
, x logging options. See report options McAfee Lotus cc:Mail contacting as e-mail client supported in VShield, 88 via America Online, xvii choosing correct options for via CompuServe, xvii in configuration wizard, 95 within the United States, - McAfee AVDCDE-AA-AA | User Guide - Page 333
States, xx educational services, 304 support services, 295 training, xviii, 303 website address for software updates and upgrades, 300 new scan task, creating, 194, 200 to 204 New Task in Task menu, 194, 201 new viruses, reporting to McAfee , 173 to 174 Where & What, 169 to 171 User's Guide 333 - McAfee AVDCDE-AA-AA | User Guide - Page 334
xiv Outlook and Outlook Express as e-mail clients supported in VShield, 88 distinguishing between, 95 overview, 301 Small Office/Home Office Annual Plan, 301 Professional Consulting Services description of, 303 program components, included with VirusScan, 27 334 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 335
to McAfee, xix response options choosing when Download Scan module finds a virus, 69 to 70 when E-mail Scan module finds a virus, 68 to 69 when Internet Filter module finds harmful objects, 70 when System Scan module finds a responses, default, when infected by viruses, 59 to 73 User's Guide 335 - McAfee AVDCDE-AA-AA | User Guide - Page 336
copying settings from one to another, 194 defaults included with VirusScan Console, 196 definition of, 193 deleting, 194 detection options 336 McAfee VirusScan Anti-Virus Software choosing for VirusScan in Console, 209 configuring in VirusScan Advanced, 175 to 180 disabling, 195 entering schedule - McAfee AVDCDE-AA-AA | User Guide - Page 337
Enterprise SecureCast, 305 setting up, 317 troubleshooting, 317 unsubscribing from, 317 features of, 306 support resources for, 317 system requirements, 307 dialog box, 117 software conflicts, as potential cause for computer problems, 63 software updates and upgrades, website address for obtaining, - McAfee AVDCDE-AA-AA | User Guide - Page 338
the AutoUpgrade utility, 250 to 252 T targets for scanning support corporate at a glance, 299 KnowledgeCenter, 295 ordering, 298 of availability, 300 resources for SecureCast, 317 via electronic services, 300 system crashes, attributing to viruses, 59 copying McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 339
Disable, 195 Enable, 195 New Task, 194, 201 Properties, 194 Start, 195 Stop, 195 technical support corporate at a glance, 299 KnowledgeCenter, 295 ordering, 298 PrimeSupport Connect, 296 PrimeSupport Enterprise, 297 phone numbers for, xvii PrimeSupport for home users ordering, 302 User's Guide 339 - McAfee AVDCDE-AA-AA | User Guide - Page 340
194 Total Education Services description of, 303 Total Service Solutions contacting, 303 training for Network Associates products Trojan horse, definition of, ix troubleshooting SecureCast firewall problems, 317 registration problems, 317 24-hour clock, using to McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 341
programs similar to Trojan horses, ix worms, viii recognizing when computer problems do not result from, 63 removing before installation, necessity of and steps for, 59 from infected files, 59 to 73 reporting new strains to McAfee, xix role of PCs in spread of, ix script language, xiv Guide 341 - McAfee AVDCDE-AA-AA | User Guide - Page 342
225 copying and pasting tasks in, 194 creating new tasks in, 194, 200, 204 default scan tasks included with, 196 deleting tasks from, 194 342 McAfee VirusScan Anti-Virus Software - McAfee AVDCDE-AA-AA | User Guide - Page 343
module configuring, 98 to 115 VShield default response options for, 65 to 67 browsers and e-mail clients supported in, 87 components included with VirusScan, 27 to 31 configuration wizard unloading from memory, 153 to 158 , 148 to 149 WEBINET.TXT, as VirusScan logging file, 138 User's Guide 343 - McAfee AVDCDE-AA-AA | User Guide - Page 344
Index website, Network Associates technical support via, 300 Where & What options choosing in VirusScan Classic, 169 to 171 why worry about viruses?, vii to , xii World Wide Web, as source of malicious software, xii to xiv worms, definition of, viii 344 McAfee VirusScan Anti-Virus Software
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
 |
 |
McAfee VirusScan
Anti-Virus Software
User’s Guide
Version 4.5