What's New in VirusScan for Windows 95 v3.1.2 (3009a)
    Copyright 1994-1997 by McAfee Associates, Inc.
              All Rights Reserved.

                
Thank you for using McAfee's VirusScan for Windows 95. 
This What's New file contains important information 
regarding the current version of this product. It is 
highly recommended that you read the entire document.

McAfee welcomes your comments and suggestions. Please 
use the information provided in this file to contact us.

___________________
WHAT'S IN THIS FILE

- New Features
- Known Issues
- Installation
- Documentation
- Frequently Asked Questions
- Contact McAfee

____________
NEW FEATURES 

1.  VirusScan detects unknown macro viruses by using 
    heuristic scanning technology. It reports any unknown 
    macro virus it detects as a "PROBABLE MACRO VIRUS."

2.  VirusScan can detect and clean macro virus infections
    in password-protected Microsoft Excel 95 files without 
    removing or compromising the password protection.

3.  VirusScan can now detect macro viruses in password-
    protected German, French, Dutch, Italian, and 
    Japanese (as well as English) Microsoft Office 
    (Word 7.0) files. 

    VirusScan scans nearly all password-protected files. 
    If it is not able to scan a password-protected file 
    (for example, if the file is in a language VirusScan 
    doesn't recognize), it displays an alert message on
    the Virus Found page and marks the file "Not scanned" 
    in the Infected Items Found list.

4.  VirusScan is designed to respect users' passwords 
    and leave them intact as often as possible. Viruses 
    that infect Microsoft Word files, however, sometimes 
    plant their own passwords. When VirusScan is 
    instructed to clean a password-protected Word file,
    it will take one of two actions:

      A. If the macro virus cannot plant its own password: 
         VirusScan notes the infection but will not clean 
         it, because the infection is encrypted by the 
         password protection. 

      B. If the macro virus can plant its own password: 
         VirusScan cleans the file, removing the password 
         along with the virus.


* NEW VIRUSES DETECTED *

The 3000 series DATs included with this version of VirusScan
do not work with VirusScan v2.x. Do not use 3000 series DATs 
with VirusScan v2.x products.

This DAT file detects the following 293 new viruses.
Locations that have experienced particular problems 
with specific viruses are also identified.

_1600
ABCD
AK.251
ALEX.A:TW(INTENDED)
ALEX.B:TW(INTENDED)
ALEX.C/D:TW(INTENDED)
ALEX.E:TW(INTENDED)
ALIEN.259
ALIEN.298
ALIEN.304
ALIEN.374
ALIEN.G
ANAK.B
ANAK.C
ANDRY.3791 (COM)
ANT.C:TW (*)
ANT.D:TW (*)
APPARITION.1248
APPARITION.700
APPDER.J
ARCHER.A
ARCHER.B
ARME.411
ARME.414
AWARE.1292
BANDUNG.AZ
BANDUNG.BA
BATTYBUG.187
BEDA.883
BEDA.1301
BLIN.1457
BMBB.766
CAP.K
CAP.M
CAP.Z
CAP.AA
CAP.AB
CAP.AC
CAP.AD
CAP.AE
CAP.AF
CAP.AG
CAP.AH
CAP.AI
CAP.AJ
CAP.AK
CAP.AL
CAP.AM
CAP.AN
CEASE.382
CHEAT.A
CHEAT.B
CHOLERA.2415
CLOCK.J:DE
CLOCK.K:DE
CLOCK.L:DE
COLORS.BO
COLORS.BP
COMPANION.5808
CONCEPT.BF
CONCEPT.BI
CONCEPT.BJ
CONCEPT.BK
CONCEPT.BK1
CONCEPT.BL
CONCEPT.BM
CONCEPT.BN
COUNT10.E
CRUZ.CMP.8262
DARK.E
DARK_ELF.2200
DBF.990
DENZUK-NAPOL
DISHONOR.A:DE (*)
DIVINA.I
DMV.F
DMV.G
DREPO.2493
DZT.D
DZT.G
EDDIE.565
EDDIE.1093
ELCON.374
ELCON.424
ELYTHNIA
ENVIRONM.6752
FACADE.B
FATTY.3012
FIRE.A:DE (*)
FLI2MOD (TROJAN)
FLOYD.1546		(Hong Kong)
FLU.1160
FORMATS.A (TROJAN) (*)
FOUR.A
FOUR.A (*)
FRIDAY.E:DE
GENESIS (TROJAN)
GETTO.2000
GLITTER.1462
GLUP.403
GLUP.404
GOODNIGHT.C
GROG.1349
GYRO.OW.512
HACKERZ.709
HAFENSTRASSE.1641
HEADACHE.269B
HEADER.A
HIAN
HIDEOUS.1024.A
HIDEOUS.1024.B
HIDEOUS.1024.C
HIDEOUS.1024.D
HITMAN.A
HLL.7336
HLL.CMP.16052 (*)
HLLO.17690.A
HLLP.5850.E
HLLP.5904
HLLP.FECI.6000
HONGKANG.1904
HYBRID.I
HYBRID.J
ISLAND.3551
IVP.VIVEK.924
JOHNNY.O
JOHNNY.O1
KEYB.298
KEYB.299
KHIZHNJAK.494
KHIZHNJAK.780A
KHIZHNJAK.780B
KOH-INSTALL
KOMPU.E (*)
KONKOOR
LAHYANI.1381
LAPIDARIO.766
LIBERTY.2857.D (EXE)
LICENTIOUS.1024
LILITH
LILO.1573
LOADER.TCS (TROJAN)
LOZ.684
LOZ.724
LPSK.OW.554
LUCY.B
LUNAR.A
MACARONI.B:DE
MALARIA.A:TW (*)
MANZON.1404.DR
MESS.A
MINIMAD.322
MINIMAD.340
MINIMAD.345
MINIMAD.346
MINIMAD.347
MINIMAD.349
MINIMAD.349B
MINIMAD.350
MINIMAD.352
MINIMAD.353
MINIMAD.361
MINIMAD.361B
MINIMAD.385
MINIMAD.386
MINIMAD.388
MINIMAD.407
MINIMAL.S
MKC_BOOT
MORPHINE.3500
MPC.LIATA.337
MUCK.I
MUCK.J
MUCK.K
MUCK.L
MUCK.M
MUCK.N
NAZI.8600
NICEDAY.N
NIKNAT.A
NJ-WMDLK1.G
NOIEMBRIE.610
NOP.M:DE (*)
NOP.N
NPAD.CT
NPAD.CU
NPAD.CV
NPAD.CW
NPAD.CX
NPAD.CY
NPAD.CZ
NPAD.DA
NUMIN.902
NUTCRACKER.AB2 (BOOT)
NUTCRACKER.MP.BOOT
OBAY.A
OBLOM.A
OBLOM.C
OBLOM.E
OMINOUS.1846
ORHEY.A
P0P.2694
PALMA
PAYCHECK.F
PAYCHECK.G
PERCENT.A:TW (*)
PESAN.B			(US)
PH33R.1418
PHILE.204
PIG.F:TW
PITER.529
POW
POWERPUMP.CMP.A
POXVAR.A
POXVAR.B
PREDATOR.1879
PYSK.2464
QBOOTDR76.VCS
RADYU.274
RADYU.278
RADYU.332
RADYU.333
RAZER.A (*)
REPLICATOR
RICKDOGG (TROJAN)
ROSEANNE.INTENDED.241
RSM.A
RUBIX.421
RUBIX.422A
SAILOR.B
SAM.B:TW
SCHUMANN.B (*)
SCHUMANN.C:DE
SCREW.A
SHIFTER.760
SHIN
SHY.1603
SHY.1608
SOCKS.A
SORPREN.1536		(Brasil)
SPY.A
STOOPID.353
SUN.8176
SUNSET (TROJAN)
SUPERSTITION.A
SVS.A
SWAT.A (TROJAN)
SWLABS.G (*)		(US Military)
TANGLE.378
TEAR.B
TEMPLE.A
TEMPLE.H
TMC.5036
TWNO.A:TW (Word97)	(Taiwan)
VAMPIRE.E:TW
VAMPIRE.F:TW
VAMPIRE.I:TW
VANITAS.2048		(Texas)
VD.253
VICISSIT.A
WALLY.1029
WANT.A:TW
WAZZU.CG
WAZZU.CH
WAZZU.CI
WAZZU.CM
WAZZU.CN
WAZZU.CO
WAZZU.CP
WAZZU.CQ
WAZZU.CR
WAZZU.CS
WAZZU.CT
WAZZU.CU
XAVIER.367
XM/DON.A (INTENDED)
XM/HIT.A
XM/HIT.B
XM/HIT.D
XM/LAROUX.H
XM/LAROUX.J
XM/LAROUX.K
XRCE.664
ZAHAK.960
ZANY.225
ZANY.253
ZANY.270
ZANY.292B
ZANY.298
ZANY.300
ZANY.793
ZANY.INTENDED.160
ZUCA.677

(*) Mistakenly included in the 3008a What's New list.


* NEW VIRUSES CLEANED *

This DAT file cleans the following 238 new viruses.
Locations that have experienced particular problems 
with specific viruses are also identified.

ABCD
AK.251
ALEX.A:TW(INTENDED)
ALEX.B:TW(INTENDED)
ALEX.C/D:TW(INTENDED)
ALEX.E:TW(INTENDED)
ALIEN.259
ALIEN.298
ALIEN.304
ALIEN.374
ALIEN.G
ANAK.B
ANAK.C
ANT.C:TW (*)
ANT.D:TW (*)
APPDER.J
ARCHER.A
ARCHER.B
ARME.411
ARME.414
AWARE.1292
BANDUNG.AZ
BANDUNG.BA
BATTYBUG.187
CAP.K
CAP.M
CAP.Z
CAP.AA
CAP.AB
CAP.AC
CAP.AD
CAP.AE
CAP.AF
CAP.AG
CAP.AH
CAP.AI
CAP.AJ
CAP.AK
CAP.AL
CAP.AM
CAP.AN
CHEAT.A
CHEAT.B
CLOCK.J:DE
CLOCK.K:DE
CLOCK.L:DE
COLORS.BO
COLORS.BP
COMPANION.5808
CONCEPT.BI
CONCEPT.BJ
CONCEPT.BK
CONCEPT.BK1
CONCEPT.BL
CONCEPT.BM
CONCEPT.BN
COUNT10.E
CRUZ.CMP.8262
DARK.E
DENZUK-NAPOL
DISHONOR.A:DE (*)
DIVINA.I
DMV.G
DZT.G
EDDIE.1093
EDDIE.565
ELCON.374
ELCON.424
ELYTHNIA
ENVIRONM.6752
FACADE.B
FIRE.A:DE (*)
FLOYD.1546		(Hong Kong)
FORMATS.A (TROJAN) (*)
FOUR.A (*)
FRIDAY.E:DE
GOODNIGHT.C
GLUP.403
GLUP.404
HAFENSTRASSE.1641
HEADACHE.269B
HEADER.A
HIAN
HIDEOUS.1024.A
HIDEOUS.1024.B
HIDEOUS.1024.C
HIDEOUS.1024.D
HITMAN.A
HLL.CMP.16052 (*)
HLLP.5850.E
HLLP.5850.E(PASS2)
HYBRID.I
HYBRID.J
HONGKANG.1904
JOHNNY.O
JOHNNY.O1
KEYB.298
KEYB.299
KHIZHNJAK.494
KHIZHNJAK.780A
KHIZHNJAK.780B
KOH-INSTALL
KOMPU.E (*)
LAHYANI.1381
LIBERTY.2857.D (EXE)
LICENTIOUS.1024
LILITH
LILO.1573
LOZ.684
LOZ.724
LUCY.B
LUNAR.A
MACARONI.B:DE
MALARIA.A:TW (*)
MESS.A
MINIMAD.322
MINIMAD.340
MINIMAD.345
MINIMAD.346
MINIMAD.347
MINIMAD.349
MINIMAD.349B
MINIMAD.350
MINIMAD.352
MINIMAD.353
MINIMAD.361
MINIMAD.361B
MINIMAD.385
MINIMAD.386
MINIMAD.388
MINIMAD.407
MINIMAL.S
MKC_BOOT
MPC.LIATA.337
MUCK.I
MUCK.J
MUCK.K
MUCK.L
MUCK.M
MUCK.N
NICEDAY.N
NIKNAT.A
NJ-WMDLK1.G
NOIEMBRIE.610
NOP.M:DE (*)
NOP.N
NPAD.CT
NPAD.CU
NPAD.CV
NPAD.CW
NPAD.CX
NPAD.CY
NPAD.CZ
NPAD.DA
NUMIN.902
NUTCRACKER.AB2 (BOOT)
OBAY.A
OBLOM.A
OBLOM.C
OBLOM.E
ORHEY.A
PAYCHECK.F
PAYCHECK.G
P0P.2694
PALMA
PERCENT.A:TW (*)
PESAN.B
PHILE.204
PIG.F:TW
POW
POXVAR.A
POXVAR.B
PREDATOR.1879
QBOOTDR76.VCS
RADYU.274
RADYU.278
RADYU.332
RADYU.333
(RAPI.AL2)
RAZER.A (*)
REPLICATOR
RSM.A
RUBIX.421
RUBIX.422A
SAILOR.B
SAM.B:TW
SCHUMANN.B (*)
SCHUMANN.C:DE
SCREW.A
SHIN
SOCKS.A
SORPREN.1536		(Brazil)
SPY.A
STOOPID.353
SUN.8176
SUPERSTITION.A
SVS.A
SWLABS.G (*)		(US Military)
TEAR.B
TMC.5036
TWNO.A:TW (Word97)	(Taiwan)
VAMPIRE.E:TW
VAMPIRE.F:TW
VAMPIRE.I:TW
VANITAS.2048		(Texas)
VD.253
VICISSIT.A
WALLY.1029
WANT.A:TW
WAZZU.CG
WAZZU.CH
WAZZU.CI
WAZZU.CM
WAZZU.CN
WAZZU.CO
WAZZU.CP
WAZZU.CQ
WAZZU.CR
WAZZU.CS
WAZZU.CT
WAZZU.CU
XAVIER.367
XM/DON.A (INTENDED)
XM/HIT.A
XM/HIT.B
XM/HIT.D
XM/LAROUX.H
XM/LAROUX.J
XM/LAROUX.K
XRCE.664
ZANY.225
ZANY.253
ZANY.270
ZANY.292B
ZANY.298
ZANY.300
ZANY.793
ZUCA.677

(*) Mistakenly included in the 3008a What's New list.

____________
KNOWN ISSUES
 
1.  If you uninstall ScreenScan, Windows changes your default
    screen saver to None. To choose a screen saver to use,
    right-click anywhere on your desktop, then choose Properties
    from the shortcut menu that appears. Next, click the Screen
    Saver tab in the Display Properties dialog box, then choose
    a new screen saver from the Screen Saver list. Click OK
    to use the screen saver you chose.

2.  Using MS-DOS memory managers might cause VirusScan for
    Windows 95 to falsely detect viruses in memory. Since
    Windows 95 no longer requires MS-DOS memory managers,
    you can eliminate false warnings by preceding each line
    in your CONFIG.SYS file that includes settings for an 
    MS-DOS memory manager with REM. This deactivates the 
    memory manager. To learn more about working with your 
    CONFIG.SYS file, see your MS-DOS or Windows documentation.

3.  To create a VirusScan Emergency Disk, you must first format
    and create a bootable floppy disk that contains the Windows
    system files.

4.  If you protect VShield or any scan task with a password, you
    will be prompted to enter your password whenever you launch 
    an associated program. Use your mouse to click in the text 
    field provided in order to enter the password -- keyboard 
    shortcuts will not work. Microsoft acknowledges this issue 
    in its Knowledge Base Article ID #Q84133. To close the 
    password verification dialog box, click Cancel.

5.  The Status properties page for VShield Properties can
    only be updated by closing and reopening VShield's Task
    Properties window.

6.  If you run two or more instances of Scan32.EXE and both 
    instances scan two or more files compressed with LHA 
    simultaneously, Scan32.EXE will terminate with a page fault.

7.  ScreenScan's log file has a maximum size of 100KB. If
    the file reaches this size, the oldest data will be
    deleted. To retain logging data, edit the content to 
    keep the log file under 100K or save the oldest data 
    to another file.

8.  ScreenScan will stop scanning after it detects a 
    virus and prompt you to launch VirusScan. If you have
    additional viruses on your system, ScreenScan will not
    notify you until the next time it activates. McAfee
    recommends that you scan and clean your entire system
    with VirusScan whenever ScreenScan detects a virus.

9.  Disk defragmentation programs move files as they work to 
    maximize hard disk efficiency. If you have VShield, VirusScan
    or other applications active during a disk defragmentation 
    operation, your disk defragmentation program might tell you
    that it cannot find the active application files. This is normal
    and does not mean that the files do not exist. To avoid error
    messages like this, close all open applications and such memory-
    resident programs as VShield, then run your disk defragmentation
    operation again. 

10. If you unzip a virus-infected file in a directory on a Novell 
    server, VShield does not detect the infection as the file
    is created. For maximum security, use VirusScan to scan
    the Novell server after you have extracted the files 
    to the server.

11. If you press CTRL+ALT+DEL to shut down a Windows 95 system
    with VShield or any other VxD enabled, Windows does not 
    shut down. Instead, Windows disables VShield or the active
    VxD. To shut down your computer, you must press CTRL+ALT+DEL
    again. This is a known issue with Microsoft's Windows 95 
    operating system.   

____________
INSTALLATION         

* INSTALLING THE PRODUCT *

1.  Do one of the following:
    
    - If installing from diskette or compact disc, insert it 
      into your floppy disk drive or CD-ROM drive.

    - If installing from files downloaded from a BBS or the 
      McAfee website, decompress the zipped files into a 
      directory on the network or your local drive.

2   Choose Run from the Start menu.

3.  If installing from diskette, type x:\setup.exe where x 
    is the drive in which you placed the diskette. Click OK.

    If installing from compact disc, type x:\win95\setup.exe
    where x is the drive in which you placed the CD-ROM. 
    Click OK.

    If installing from downloaded files, type 
    x:\path\setup.exe  where x:\path is the location of the
    files (for example, C:\DOWNLOAD\SETUP.EXE). Click OK.

4.  Follow the on-screen installation instructions to 
    complete VirusScan installation.


* PERFORMING A SILENT INSTALLATION *

To perform a "silent" installation of this product,
with minimal user interaction and with all default or 
"Typical" installation settings, add -s (i.e., SETUP.EXE -s)
to the setup command when you install the product.

Network administrators can customize the silent
installation feature by following these steps: 

1.  Check the Windows directory to ensure that a
    file named SETUP.ISS does not already exist. If 
    one does, rename it, back it up, or delete it.

2.  Run SETUP.EXE with the -r switch, (i.e., 
    SETUP.EXE -r).

3.  Select the components you want to install
    during the silent installation.  Your choices will
    be recorded.

4.  Finish the installation. 

    Result: A SETUP.ISS file is created in the Windows 
    directory that has your installation options recorded.
    Use this file to install all product files to the same 
    installation directory on every client machine.  

    The .ISS file specifies the installation directory under
    the [SdSetupType-0] header, szDir parameter, which was 
    recorded in step 3. This overrides the default
    installation directory on each client machine, which
    might vary according to operating system. Having the
    same directory name on every client helps to ease
    administration in the future; for example, you might
    assign all client machines the directory C:\ANTIVIRUS.

    Note:  If, however, you want to allow SETUP.EXE to 
    determine where to locate the installed files, modify
    the SETUP.ISS file so that the target machine will 
    disregard the szDir, as follows: 

    A.  Locate the section [SdSetupType-0] in the   
        SETUP.ISS file and go to the line:  Result = xxx.
        The actual value will most likely be  301,  302,
        or 303, depending on what options you selected
        durin the ISS file creation process.  

    B.  Add 100 to this number so that, for example, 301  
        becomes 401. This tells each target machine to 
        disregard the szDir and assign a directory according 
        to its own particular operating system. 

5.  Copy the installation files onto a local or mapped
    drive; then rename, back up, or delete the SETUP.ISS
    file.

    Note: You cannot perform a silent install from
    multiple media because the silent operation will be 
    compromised when the install prompts the user for 
    more media.

6.  Copy the new SETUP.ISS from the Windows directory
    to the location of the installation files. 

    Note:  The file used for the silent installation, 
    SETUP.ISS, is product-specific. For example, you 
    cannot use a SETUP.ISS file created by a 
    VirusScan for Windows 95 installation for a 
    VirusScan for Windows NT installation.

7.  Run SETUP.EXE with the -s switch (i.e.,    
    SETUP.EXE -s).

    Note: If you do not specify a "recorded" answer for
    all dialog boxes during the initial installation, the
    silent installation will fail.  

8.  When the silent installation is complete, the machine 
    reboots automatically. 


* PRIMARY PROGRAM FILES FOR VIRUSSCAN FOR WINDOWS 95 *

Note: Depending on the type of license you purchased, some 
of these files may not be installed.

Files located in the Install directory:
=======================================

1.  Installed for VShield/Scan32/DOS/ScreenScan:                              

                  README.1ST = License and registration
                               information
                   CLEAN.DAT = Virus clean definition data
                 MCALYZE.DAT = Virus definition data
                   NAMES.DAT = Virus names definition data
                    SCAN.DAT = Virus scan definition data

                  ADVGUI.DLL = Advanced interface library
                               file
                 MCGUI32.DLL = AV Console library file   
                  S95EXT.DLL = Library file
                CFGCOM32.DLL = Libarary file
                INETWH16.DLL = Internet library help file
                INETWH32.DLL = Internet library help file                

                AVCONSOL.EXE = VirusScan Console program
                               file
                  MCECOM.EXE = Electronic Commerce program
                               file
                  CHKVXD.EXE = VShield virtual device                
                CONFIG32.EXE = VirusScan configuration
                               program
                SETBROWS.EXE = Set browser program  
                VIRLST32.EXE = McAfee Virus List  
                VALIDATE.EXE = McAfee file validation
                               program
                 VSECOMR.EXE = Electronic Commerce program
                               file 
                   WCMDR.EXE = Windows Commander program
                               driver checking utility

                AVCONSOL.HLP = AV Console help file  
                  SCAN32.HLP = Scan32 help file  
               PHONELIST.INI = Electronic commerce file
                                         
                AVCONSOL.INI = AV Console initialization
                               file
                   WCMDR.INI = Windows Commander
                               configuration settings
                WCMDRSIL.INI = unInstallShield helper
                               configuration

                  DELSL?.ISU = Uninstall file

                 PACKING.LST = Packing list

                 FAXFORM.TXT = Fax registration form
                RESELLER.TXT = McAfee authorized resellers
                WHATSNEW.TXT = What's New document

                 
2.  Installed for VShield/Scan32:

                  DPMI16.DLL = 16-bit DOS protected mode
                               interface library
                  DPMI32.DLL = 32-bit DOS protected mode
                               interface library
                 MCALYZE.DLL = Library files
                 MCCOD32.DLL = Library files
                MCKRNL32.DLL = Library files
                MCSCAN32.DLL = Library files          
                MCUTIL32.DLL = Library files
                  VSECOM.DLL = Library files

3.  Installed for VShield:

                CONFIG32.EXE = VShield configuration 
                               program
                VSHWIN32.EXE = VShield engine
                 DEFAULT.VSH = Default VShield settings

4.  Installed for Scan32:

                  SHUTIL.DLL = Run-time support library
                  SCAN32.EXE = VirusScan for Windows 95
                               program
                 DEFAULT.VSC = Default Scan32 settings
                ALLDRIVE.VSC = Scan32 settings file
                  SCAN_C.VSC = Scan32 settings file

5.  Installed for Emergency Disk Creation Utility:

                    SCAN.EXE = MS-DOS scan program
                  SCANPM.EXE = Protected mode scanner
                   EDISK.EXE = Emergency Disk creation
                               utility
                GETREPLY.EXE = Emergency diskette program
                               component
                      EDAT.1 = Emergency Disk batch file
                      EDAT.2 = Emergency Disk program
                               information file
                      EDAT.3 = Emergency Disk file
                      EDAT.4 = Emergency Disk file
                      EDAT.5 = Emergency Disk file
                      EDAT.6 = Emergency Disk file
                   ESCAN.BAT = Emergency Disk file
                   EDISK.SCR = Emergency Disk script                            
                MCKRNL16.DLL = Emergency Disk library file   
                MCUTIL16.DLL = Emergency Disk library file  
                  EMSCAN.DAT = Virus scan definition data
                 EMCLEAN.DAT = Virus clean definition data
                 EMNAMES.DAT = Virus names definition data

6. Installed for ScreenScan:

                MCKRNL32.DLL = Library file
                MCUTIL32.DLL = Library file
                SCRSCANP.DLL = Library file
                SCRSCANR.DLL = Library file
                DUNZIP32.DLL = ScreenScan compression
                               library file
                  DZIP32.DLL = ScreenScan compression
                               library file
                 SCRSCAN.EXE = ScreenScan program file                 
                 SCRSCAN.HLP = ScreenScan help file

Files located in WINDOWS directory:
==========================================

                 SECCAST.ICO = Secure Cast icon


Files located in WINDOWS\SYSTEM directory:
==========================================

1.  Installed for VShield/Scan32/DOS:

                MCAFECOM.DLL = McAfee Electronic
                               Commerce library file
     
2.  Installed for VShield/Scan32:

                  MCKRNL.VXD = Detection virtual device
                               driver
                MCSCAN32.VXD = Detection virtual device
                               driver
                  MCUTIL.VXD = Support virtual device
                               driver

3.  Installed for VShield:

                 VSHIELD.VXD = Detection virtual device
                               driver
                 VSHINIT.VXD = VShield virtual device driver
                                     
Files located in the WINDOWS\HELP directory:
============================================ 

1.  Installed for VShield:

                VSHLDCFG.HLP = VShield help

2.  Installed for Scan32:

                 SCANEXT.HLP = Scan32 Extension help
                         
* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined 
effort by anti-virus vendors throughout the world to 
come up with one standard by which customers can verify 
their anti-virus installations. To test your 
installation, copy the following line into its own 
file and name it EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

When done, you will have a 69- or 70-byte file.

When VirusScan is applied to this file, SCAN will report 
finding the EICAR-STANDARD-AV-TEST-FILE virus.

THIS IS NOT A VIRUS. However, users often have the need to
test that their installations function correctly. The anti-
virus industry, through the European Institute for Computer
Antivirus Research, has adopted this standard to
facilitate this need.

Please delete the file when installation testing is
completed so unsuspecting users are not unnecessarily
alarmed.

_________________________________
MANUALLY UNINSTALLING THE PRODUCT

McAfee recommends using VirusScan's uninstall program
provided. You can access the uninstaller from the Start menu
in Programs/McAfee VirusScan. If, however, UNINSTALLER.EXE
is not present on your system, follow the instructions
outlined below to manually uninstall VirusScan: 

1.  Remove VirusScan from the AUTOEXEC.BAT file:

    1.  Go to the System Configuration Editor window by
        typing SYSEDIT in the Start/Run dialog box and press
        Enter.
    2.  In the first file, the AUTOEXEC.BAT, delete the
        VirusScan entry and the @IF ERRORLEVEL 1 PAUSE line
        if present.
    3.  Save the changes and close the Configuration Editor 
        window.


2.  Remove VirusScan icons:

    The VirusScan icons can be removed from the Taskbar 
    properties page in Start/Settings/Taskbar. Follow the 
    instructions below to remove VirusScan icons.

    1.  From the Taskbar properties page, click Remove.
    2.  Highlight the McAfee VirusScan folder. 
    3.  Click the Remove button to remove the icons.
    4.  Click OK.


3.  Edit the Registry:

    1.  To get to the Registry, type REGEDIT in the 
        Start/Run dialog box and press Enter.
    2.  In HKEY_CLASSES_ROOT, delete the key "VirusScan" 
        from the following:	

	  comfile\\shell\\VirusScan
	  Directory\\shell\\VirusScan
	  Drive\\shell\\VirusScan
	  exefile\\shell\\VirusScan
	  Excel.Addin\\shell\\VirusScan
	  Excel.Chart.5\\shell\\VirusScan
	  Excel.Chart.8\\shell\\VirusScan
	  Excel.Macrosheet\\shell\\VirusScan
	  Excel.Sheet.5\\shell\\VirusScan
	  Excel.Sheet.8\\shell\\VirusScan
	  Excel.Template\\shell\\VirusScan
	  Excel.Workspace\\shell\\VirusScan
	  Excel.XLL\\shell\\VirusScan
	  WinZip\\shell\\VirusScan
	  Word.Document.6\\shell\\VirusScan
	  Word.Document.8\\shell\\VirusScan
	  Word.Template\\shell\\VirusScan

        Delete the key "VSConfigFile"
        Delete the key "VSHConfigFile"

    3.  In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
        CurrentVersion\Run, delete the name "Vshwin32EXE".
    4.  In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
        CurrentVersion\RunServices, delete the name 
        "Vshwin32EXE".
    5.  In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
        CurrentVersion\Uninstall, delete the key "VirusScan". 
    6.  Exit the Registry Editor by choosing the REGISTRY 
        option  from the File Menu and selecting the EXIT 
        option.


4.  Delete VirusScan files and directories.
    
    1.  Using CTRL+ALT+DEL, end the VSHWIN32.EXE task.
    2.  Delete the McAfee directory under Program Files.
    3.  From \Windows\system directory, remove the following
        files:
               MCKRNL.VXD
             MCSCAN32.VXD
               MCUTIL.VXD
              VSHIELD.VXD 

5.   VirusScan is uninstalled. Reboot your system for the 
     changes to take effect. 
   
_____________
DOCUMENTATION 

For more information, refer to the VirusScan User's Guides, 
included on the CD-ROM versions of this program or available 
from McAfee's BBS and FTP site. These files are in Adobe
Acrobat Portable Document Format (.PDF) and can be viewed
using Adobe Acrobat Reader. This form of electronic
documentation includes hypertext links and easy navigation
to assist you in finding answers to questions about your
McAfee products.

Adobe Acrobat Reader is available on CD-ROM in the ACROREAD
subdirectory. Adobe Acrobat Reader also can be downloaded 
from the World Wide Web at:

http://www.adobe.com/acrobat/readstep.html

VirusScan and ScreenScan documentation can be downloaded
from McAfee's BBS or the World Wide Web at:

http://www.mcafee.com

For more information on viruses and virus prevention,
see the McAfee Virus Information Library, MCAFEE.HLP,
included on the CD-ROM version of this product or
available from McAfee's BBS and FTP site. A ViaGraphix
Interactive Anti-virus Training program also is
available on the CD-ROM version, or can be purchased
from the McAfee website.

__________________________
FREQUENTLY ASKED QUESTIONS 

Regularly updated lists of frequently asked questions 
about McAfee products also are available on McAfee's 
BBS, website, and CompuServe and AOL forums.

Q:  When my screen saver starts, I suddenly see a lot 
    of activity on my hard disk. What's happening? How do
    I stop this activity?

A:  VirusScan's ScreenScan component is designed to scan your
    hard disk for viruses when your computer is idle. To
    do so, it starts a screen saver, then begins a scan 
    operation. The hard disk activity you see is ScreenScan
    examining your hard disk for viruses.

    To deactivate ScreenScan, follow these steps:

    1.  Move your cursor to the Windows 95 desktop, then
        click your right mouse button.

    2.  Choose Properties from the shortcut menu that 
        appears.

    3.  Click the Screen Saver tab in the Display Properties
        dialog box.

    4.  Choose a screen saver other than ScreenScan, or choose
        None in the Screen Saver list.

    5.  Click OK to save your settings and close the Display
        Properties dialog box.


Q:  Why are my scheduled scan tasks not performed?

A:  If you have configured a scheduled scan and it does
    not take place on schedule, you probably did not
    have the VirusScan Console open when the scan was to take
    place. The VirusScan Console must be open (it may be 
    minimized) in order for the scan to take place.


Q:  VirusScan detected a virus on my system, but it is not
    a document, spreadsheet, or executable file (.EXE, .COM,
    .DO?, .XL?). Therefore, I suspect it might be a false 
    detection. What can I do to verify a detected virus?

A:  If you suspect a false detection on a non-executable 
    file, run VirusScan's command line scanner, SCAN.EXE, 
    to verify an infection. If VirusScan for Windows 95 
    detects a virus and SCAN.EXE does not, please download
    the latest DAT files to upgrade your virus definition
    files and scan your system again. If VirusScan still
    detects a virus that you suspect to be a false 
    detection, please report the issue to McAfee technical
    support.


Q:  I would like to electronically purchase and download
    the latest version of VirusScan for Windows 95. I do
    not want to give my credit card information over the 
    Internet for security purposes. Can I purchase 
    VirusScan via modem and download the product via the 
    Internet?

A:  Yes. The first time you download VirusScan for
    Windows 95, the McAfee electronic Wizard will prompt
    you to select the transmission method you prefer to
    download and to transmit your encrypted credit card
    information.

    At the Transaction Connection Type dialog box, select
    Internet to download your order via the Internet.
    At the Security Connection Type dialog box, select
    Direct Dial Modem to transmit your credit card
    information via modem.


Q:  While downloading a licensed copy of VirusScan for
    Windows 95, the installation was interrupted and/or
    canceled. Where can I find my licensed VirusScan files
    and how do I proceed with the installation?

A:  The files are in the VSint folder located in the
    Windows \Temp directory. Double click on SETUP.EXE
    within the VSint folder to continue with the
    installation.


Q:  I have created my own Emergency diskette without using
    the Emergency Disk creation utility. How must I optimize
    my emergency disk's performance?

A:  To enable your own Emergency Disk, you must create a
    CONFIG.SYS file on the boot diskette and add the
    following lines:

       [CONFIG.SYS]
       DEVICE=HIMEM.SYS
       DOS=HIGH
    
    Add the HIMEM.SYS file from the DOS directory or if you
    are using Windows 95 system files, add HIMEM.SYS from
    the \WINDOWS\COMMAND directory to the boot diskette.

    Note: For detailed instructions on creating an Emergency
    diskette, refer to the instructions outlined in the
    electronic documentation (.PDF file) included in your
    VirusScan package.


Q:  I moved a .VSC file to my Startup folder.
    Whenever I turn on my PC, it launches VirusScan for
    Windows 95, but it does not begin scanning. How can I
    make it start scanning automatically?

A:  You need to customize your options. Take these
    steps:

    1.  Navigate to the location of the saved .VSC file.
    2.  Right-click on the .VSC file to reveal the 
        Context Menu.
    3.  From the Context Menu, select Properties.  
    4.  Select the Options Tab on the property sheet. 
    5.  Check the Start Automatically box.

    By enabling this option, scanning will begin 
    automatically. If it does not detect any viruses,
    VirusScan for Windows 95 will automatically close and 
    free up system resources.


Q:  When VirusScan for Windows 95 is launched, how does it
    determine the default settings?

A:  VirusScan for Windows 95 default settings may be
    found in the DEFAULT.VSC file located in the install
    directory.


Q:  What are the possible error codes returned by
    CHKVXD.EXE?

A:  The possible CHKVXD.EXE error level codes and their
    descriptions are listed below:

    65535(-1)= VShield not installed

    0 = VShield enabled

    1 = VShield disabled 


Q:  How can I tell that ScreenScan is working?

A:  ScreenScan does not alert you when it is scanning your
    system. However, if you enable the logging option during
    your configuration, all ScreenScan activity will be
    recorded in a log file in the Installation directory. 


Q:  How can I scan multiple or network drives with
    VirusScan?

A:  You can configure scans of multiple or network drives 
    from the Detection property page. To see the page, choose
    Advanced from the Tools menu in the VirusScan console. To 
    scan more than one drive or a network drive, follow these
    steps:

    1.  Click the Detections tab.
    2.  Click Add.
    2.  Do one of the following:
         - To add all network drives to the Detection list,
           click Select Item to Scan, then select All Network
           drives. 
         - To add drives to the Detection list, click Select
           Drive or Directory to Scan. Enter a drive letter
           or click Browse to locate the drive you want
           scanned.
    3.  Click OK. 
    4.  Repeat this procedure to add more drives to the 
        Detection list.    
    5.  Choose Save Settings from the File menu to save your
        settings.
 
    
Q:  Can I update McAfee's data files to detect new viruses?

A:  Yes. If your data files are out-of-date, VirusScan for
    Windows 95 will periodically prompt you to update them.
    If you have a modem or Internet connection, you can use
    VirusScan's new electronic update feature for easy data
    file updates, technical support, and registration. 
    
    Note: VirusScan's electronic update feature applies to
    retail copies and any copies bundled with your computer.
    If you own a corporate copy of VirusScan, please notify 
    your System Administrator to receive your data file
    updates.

    If you need additional assistance with downloading, 
    contact McAfee Download Support at (408) 988-3832.

Q:  Why are there two sets of data files available for 
    download from www.mcafee.com?

A:  One set, which has a filename beginning with 30, is 
    compatible with VirusScan versions 3.0.0 and later. 
    This is the file you will download to update your 
    installation of VirusScan. The second set, which has a 
    filename beginning with 97, is designed to support 
    older versions of VirusScan (before v3.0.0) and 
    should not be used with this version of VirusScan.

______________
CONTACT McAFEE

* FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS *

Contact McAfee's Customer Care department: 

1.  Corporate-licensed customers, call (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

    Retail-licensed customers, call (972) 278-6100
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax (408) 970-9727
    24-hour, Group III fax 
		
3.  Fax-back automated response system (408) 988-3034
    24-hour fax

Send correspondence to any of the following McAfee
locations.

    McAfee Corporate Headquarters
    2805 Bowers Ave.			
    Santa Clara, CA 95051-0963		
	
    McAfee East Coast Office					
    Jerral Center West
    766 Shrewsbury Avenue
    Tinton Falls, NJ 07724-3298

    McAfee Central Office			
    4099 McEwen
    Suites 500 and 700
    Dallas, TX 75244		
						
    McAfee Canada
    139 Main Street
    Suite 201
    Unionville, Ontario
    Canada L3R2G6

    McAfee Europe B.V.			
    Gatwickstraat 25	
    1043 GL Amsterdam				
    The Netherlands	 		

    McAfee (UK) Ltd.
    Hayley House, London Road
    Bracknell, Berkshire  RG12 2TH
    United Kingdom 

    McAfee France S.A.			
    50 rue de Londres				
    75008 Paris					
    France					
				
    McAfee Deutschland GmbH
    Industriestrasse 1
    D-82110 Germering
    Germany

    McAfee Japan KK
    4F Toranomon Mori bldg. 33
    3-8-21 Toranomon
    Minato-Ku
    Tokyo, 105
    Japan
    	
Or, you can receive online assistance through any of the 
following resources:

1.  Bulletin Board System: (408) 988-4004
    24-hour US Robotics HST DS

2.  Internet e-mail: support@mcafee.com

3.  Internet FTP: ftp.mcafee.com

4.  World Wide Web: http://www.mcafee.com

5.  America Online: keyword MCAFEE

6.  CompuServe: GO MCAFEE

Before contacting McAfee, please make note of the
following information. When sending correspondence,
please include the same details.

- Program name and version number
- Type and brand of your computer, hard drive, and any 
  peripherals
- Operating system type and version
- Network name, operating system, and version
- Contents of your AUTOEXEC.BAT, CONFIG.SYS, and 
  system LOGIN script
- Microsoft service pack, where applicable
- Network card installed, where applicable
- Modem manufacturer, model, and baud, where 
  applicable
- Relevant browsers/applications and version number,
  where applicable

- Problem
- Specific scenario where problem occurs
- Conditions required to reproduce problem
- Statement of whether problem is reproducible on demand

- Your contact information: voice, fax, and e-mail

Other general feedback is also appreciated.

Documentation feedback is welcome. Send e-mail to
documentation@cc.mcafee.com.


* FOR ON-SITE TRAINING INFORMATION *
 
Contact McAfee Customer Service at (800) 338-8754.


* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use McAfee's
products, we have established a Resellers program to 
provide service, sales, and support for our products 
worldwide. For a listing of McAfee resellers near you,
click Contact McAfee under the Information section on 
the McAfee website.



