What's New in VirusScan for Windows 95 v2.0.6 (9609)
         Copyright 1994-1996 by McAfee, Inc.
                All Rights Reserved.

                
Thank you for using McAfee's VirusScan for Windows 95. 
This What's New file contains important information 
regarding the current version of this product. It is 
highly recommended that you read the entire document.

McAfee welcomes your comments and suggestions. Please 
use the information provided in this file to contact us.

___________________
WHAT'S IN THIS FILE

- New Features
- Known Issues
- Installation
- Documentation
- Frequently Asked Questions
- Additional Information
- Contact McAfee

____________
NEW FEATURES

* ENHANCEMENTS *

1.  The new Administrator Mode provides the ability
    to lock VirusScan95 configuration settings.
   
2.  VirusScan95 configuration files have been enhanced. 
    Right-clicking on a VirusScan configuration
    file (VSC) displays the file's properties and two
    new tabs: Options and Actions. One of the new
    properties is Start Automatically, located in the
    Options tab. Start Automatically is necessary for
    scheduled scanning from the optional System
    Agent and for Startup group on-demand scanning.


* NEW VIRUSES DETECTED *
  
This DAT file (9609) detects the following 68 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.


_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE
ARCV.255 
ARCV.679
ARCV.745
ASH.743
BEDA.1530
BEER.2620
BEER.3164.B
BEER.3192.B
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
BW-525
CASTELLO.3742           Spain
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DELWIN.1199
DIETZEL:DE (*)
DODGER
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
JERUSALEM.BUPT.1220
JERUSALEM.BUPT.1279
JERUSALEM.BUPT.1367
KABOUT.1804 (*)
KARNAVALI.1972          Europe
KDG
KITTY
LAMEGO.729              Portugal
LIBERTY.2857.D
LITTLEPEST.4243 (*)
MANNEQUIN
MANZON.1404             Europe
MENDOZA.3380            Spain
MSU.297
NECROS.1164.A
NECROS.1164.B
PHALCON.1117
PINDONGA.B
PS-MPC.578.C
PS-MPC.611.J
PS-MPC.753
PS-MPC.AOS
PULCE.1840 
RADYUM.509
RAHACK.936              Netherlands
RDA FIGHTER.5871
RIOT.ETERNITY.565
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SCREAMING_FIST.709
SIRIUS.ALIVE.4608
TANPRO.749
TEQUILA.2468
TURNER.3276
TV
V3.1765
VACSINA.1206.A
VERWOLF
VICTOR.2442.A
(*) Requires Scan95 2.0.6 or DOS/Win 2.5.2 engine

  
* NEW VIRUSES REMOVED *

This DAT file (9609) removes the following 38 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.

_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE                England
ARCV.255
ARCV.657
ARCV.679
ARCV.745
ASH.743
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DIETZEL:DE (*)
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
LAMEGO.729              Portugal
LITTLE_BROTHER          Germany
NO_FRILL.835            Australia
PS-MPC.611.J
PS-MPC.753
RAHACK.936              Netherlands
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SHELL.10634             Internet
TANPRO.524
TANPRO.749
TEQUILA.2468
TV
V3.1765
VICTOR.2442.A
ZYX                     Europe
(*) Requires Scan95 2.0.6 or DOS/Win 2.5.2 engine

____________
KNOWN ISSUES

1.  VirusScan95 appears to continue scanning after
    clicking STOP. If this occurs, move the VirusScan95 
    window to reveal the DynaZip UnZip Error window.
    Click OK and respond appropriately to the dialog
    box.
  
2.  Files with the "-" (dash) character in the filename that
    are compressed in Zipped files will not be scanned by
    the on-demand scanner.

3.  When a macro virus is detected in conjunction with
    other viruses, the macro virus remover will not work.
    If this occurs, remove the other virus first or work
    in a separate area.

4.  Windows 95 no longer requires MS-DOS memory managers. 
    Using MS-DOS memory managers may cause VirusScan95
    to falsely detect viruses in memory. To eliminate
    false warnings, remark (Rem) the memory manager lines
    from your CONFIG.SYS to deactivate them.

____________
INSTALLATION         

* INSTALLING THE PRODUCT *


If you would like to perform a "silent" installation
of VirusScan, requiring minimal user interaction and
using all default or "Typical" installation settings, add
-s (i.e. SETUP.EXE -s) to the setup command when you
install the product.

Network Administrators can customize the silent
installation by following the steps below.

1.  Check in the Windows directory to ensure that a
    file named SETUP.ISS does not already exist. If it
    does, rename it, back it up, or delete it.

2.  Run SETUP.EXE with the -r switch, (i.e. SETUP.EXE -r).

3.  Select the components you would like to be installed
    during the silent installation.  All responses will
    be recorded.

4.  Finish the installation, and locate the file SETUP.ISS
    in the Windows directory.

5.  Open the file using any ASCII editor (e.g., NOTEPAD.EXE)
    and delete the section titled  APPLICATION.

6.  Rename, back up, or delete SETUP.ISS on the first
    installation disk (floppies only). For CD-ROM versions
    of the product, you must copy the installation files
    onto the hard drive before taking this step.

7.  Copy the new SETUP.ISS from the Windows directory
    to the location of the installation files.

8.  Run SETUP.EXE with the -s switch (i.e. SETUP.EXE -s).

    NOTE: If you do not specify a "recorded" answer for
    all dialog boxes during the initial installation, the
    silent installation will fail. Also, the file used
    for the silent installation, SETUP.ISS, may not work
    properly across different operating systems. For
    example, if the silent install is generated for
    Windows 95, it may not work properly in Windows 3.1x
    or Windows NT.

9.  When the silent installation is complete, you should
    reboot the machine manually.


* PRIMARY PROGRAM FILES FOR VIRUSSCAN95 *

Files located in the Install directory:
=======================================

1.  Installed for VShield/Scan95/DOS:

      README.1ST = McAfee information
        SCAN.DAT = Virus scan definition data
       NAMES.DAT = Virus names definition data
       CLEAN.DAT = Virus clean definition data
    VALIDATE.EXE = McAfee file validation program
    CHKVSH32.EXE = VShield virtual device driver
                   checking utility
     PACKING.LST = Packing list 
    UINSTALL.EXE = Uninstall program
    WHATSNEW.TXT = What's New document
     VSUINST.EXE = Uninstall assistant
      UPDATE.MSG = Update message file
      AGENTS.TXT = McAfee authorized agents 

2.  Installed for VShield/Scan95:

      DPMI16.DLL = 16-bit DOS protected mode
                   interface library
      DPMI32.DLL = 32-bit DOS protected mode
                   interface library
    MCKRNL95.DLL = Library files
    MCUTIL95.DLL = Library files
    MCSCAN32.DLL = Library files          

3.  Installed for VShield:

    VSHCFG32.EXE = VShield configuration manager
    VSHWIN32.EXE = Detection engine
     DEFAULT.VSH = Default VShield settings

4.  Installed for Scan95:

      SCAN95.EXE = VirusScan95 program
    SHUTIL95.DLL = Run-time support library   
      DZIP32.DLL = File compression library
    DUNZIP32.DLL = File decompression library
     DEFAULT.VSC = Default Scan95 settings 

5.  Installed for DOS:

        SCAN.EXE = MS-DOS scan program
  

Files located in WINDOWS\SYSTEM directory:
==========================================

1.  Installed for VShield/Scan95:

      MCKRNL.VXD = Detection virtual device driver
    MCSCAN32.VXD = Detection virtual device driver
      MCUTIL.VXD = Support virtual device driver

2.  Installed for VShield:

     VSHIELD.VXD = Detection virtual device driver

3.  Installed for Scan95:

      S95EXT.DLL = Shell extension


Files located in the WINDOWS\HELP directory:
============================================ 

1.  Installed for VShield:

    VSHLDCFG.HLP = VShield help

2.  Installed for Scan95:

     SCANEXT.HLP = Scan95 Extension help
    VIRUSCAN.HLP = VirusScan help
    VIRUSCAN.CNT = VirusScan context-sensitive help 

Note: WINDOWS refers to the directory to which Windows 95
is installed, not the Windows 3.1x directory.

         
* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined 
effort by anti-virus vendors throughout the world to 
come up with one standard by which customers can verify 
their anti-virus installations. To test your 
installation, copy the following line into its own 
file and name it EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

When done, you will have a 69- or 70-byte file.

When VirusScan is applied to this file, SCAN will report 
finding the EICAR-STANDARD-AV-TEST-FILE virus.

It is important to know that THIS IS NOT A VIRUS.
However, users often have the need to test that their 
installations function correctly. The anti-virus industry, 
through the European Institute for Computer Antivirus 
Research, has adopted this standard to facilitate this need.

Please delete the file when installation testing is completed
so unsuspecting users are not unnecessarily alarmed.

_____________
DOCUMENTATION

For more information, refer to the User's Guide, included 
on the CD-ROM versions of this program or available 
from McAfee's BBS and FTP site. This file is in Adobe Acrobat 
Portable Document Format (.PDF) and can be viewed using Adobe 
Acrobat Reader. This form of electronic documentation includes 
hypertext links and easy navigation to assist you in finding 
answers to questions about your McAfee product.

Adobe Acrobat Reader is available on CD-ROM in the ACROREAD
subdirectory. Adobe Acrobat Reader also can be downloaded 
from the World Wide Web at:

http://www.adobe.com/Acrobat/readstep.html

VirusScan documentation can be downloaded from McAfee's BBS
or the World Wide Web at:

http://www.McAfee.com or http://205.227.129.97

For more information on viruses and virus prevention,
see the McAfee Virus Information Library, MCAFEE.HLP,
included on the CD-ROM version of this product or
available from McAfee's BBS and FTP site. A ViaGraphix
Interactive Anti-virus Training program also is
available on the CD-ROM version, or can be purchased
from the McAfee Web Site.

__________________________
FREQUENTLY ASKED QUESTIONS 

Regularly updated lists of frequently asked questions 
about McAfee products also are available on McAfee's 
BBS, website, and CompuServe and AOL forums.

Q:  How do I scan multiple drives?

A: #1  VirusScan95 can scan many locations simultaneously.
       To do this, take these steps:
       1.  Launch Explorer.
       2.  Highlight the drives or folders you want to
           scan.
       3.  Right-click to reveal the Context Menu.
       4.  Select Scan for Viruses.
       5.  Click Scan Now to begin scans.

A: #2  Enter LocalDrives or NetworkDrives in the 
       Scan In text dialog on the Where & What property
       page. Click Scan Now and all LocalDrives or all
       NetworkDrives will be scanned.


Q:  I moved a VSC file to my Startup folder.
    Whenever I turn on my PC, it launches VirusScan95,
    but it does not begin scanning. How can I make it
    start scanning automatically?

A:  You need to customize your options. Take these
    steps:

    1.  Navigate to the location of the saved VSC file.
    2.  While pointing to the VSC file, right-click to
        reveal the Context Menu.
    3.  From the Context Menu, select Properties.  
    4.  Select the Options Tab on the property sheet. 
    5.  Check the Start Automatically box.

    By enabling this option, scanning will begin 
    automatically. If viruses are not detected, 
    VirusScan95 will automatically close and free up 
    system resources.


Q:  When VirusScan95 is launched, how does it determine
    the default settings?

A:  VirusScan95 default settings may be found in the 
    DEFAULT.VSC file located in the install directory. 


Q:  My executable files were set to shareable and read-only
    before I ran VirusScan95, now they are read-only. How
    can I retain the shareable attribute?

A:  Mark the files Execute Only. Then create a dummy account
    called SCAN on the server and grant only Read and
    Filescan rights to that account. Log in as SCAN before
    scanning your Novell volumes.


Q:  Can I update VirusScan's data files to detect
    new viruses?

A:  Yes. If your data files are dangerously out-of-date,
    VirusScan95 will prompted you to update them.
    If you have Internet access, you can download
    updated VirusScan data files from the McAfee Web 
    Site, BBS, or other online resources. To download 
    from the McAfee Web Site, follow these steps:
    
    1.  Go to the McAfee Web Site (http://www.mcafee.com
        or http://205.227.129.97).

    2.  Click on the Download McAfee button in the upper
        left hand column or frame.

    3.  Click Get that DAT! to update DAT files. 

    4.  View the information provided on new DAT files
        and downloading.

    5.  Click on Download this Month's DAT.
   
    6.  Data file updates are stored in a compressed form 
        to reduce transmission time. Unzip the files into
        a temporary directory, then copy the files to the
        appropriate directory, replacing your old files.    

    7.  Before performing any scans, shut down your
        computer, wait a few seconds, and turn it on again.

    If you need additional assistance with downloading, 
    contact McAfee Download Support at (408) 988-3832.

______________________
ADDITIONAL INFORMATION

The new Administrative Mode feature allows System
Administrators to lock VirusScan95 configurations on
users' systems. To use this feature, take the following
steps:

1.  Start VirusScan95 by double-clicking on the
    VirusScan icon.

2.  Press and hold the Ctrl+Shift+Alt keys and
    double-click the magnifying glass icon.

3.  Open the File menu.

4.  Select Administrator Mode.

    a.  Enter a new password.
    b.  Confirm your new password.
     
5.  Choose your configurations from the What & Where,
    Actions, and Reports tabs.        

6.  To retain these settings as an individual custom
    configuration file, save the file to the desktop
    or Program Menu for execution. Context-sensitive
    scanning (right-clicking) will draw upon the
    original DEFAULT.VSC configuration file and scan
    the selected item with the pre-established default
    settings.

7.  To establish your configuration as the default
    setting, save the new settings by overwriting
    C:\PROGRAM FILES\MCAFEE\VIRUSSCAN95\DEFAULT.VSC

8.  After saving your configuration and leaving
    Administator Mode or closing VirusScan95, the
    optional settings will be locked and cannot be
    altered without knowledge of the access keys,
    hotspot, and established password.
                 
9.  To view and confirm your changes, restart
    VirusScan95 from the shortcut if you overwrote the
    DEFAULT.VSC file or from your saved configuration
    file (VSC). To alter your configuration settings
    or make additional changes, repeat this process. 

______________
CONTACT McAFEE

* FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS *

Contact McAfee's Customer Care department: 

1.  Call (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax (408) 970-9727
    24-hour, Group III fax 
		
3.  Fax-back automated response system (408) 988-3034
    24-hour fax

Send correspondence to any of the following McAfee
locations.
    	
    McAfee Corporate Headquarters		
    2710 Walsh Avenue			
    Santa Clara, CA 95051-0963		
	
    McAfee East Coast Office					
    Jerral West Center
    766 Shrewsbury Avenue
    Tinton Falls, NJ 07724-3298

    McAfee Central Office			
    5944 Luther Lane, Suite 117		
    Dallas, TX 75225				
						
    McAfee Canada
    178 Main Street
    Unionville, Ontario
    Canada L2R 2G9

    McAfee Europe B.V.			
    Orlyplein 81 - Busitel 1		
    1043 DS Amsterdam				
    The Netherlands	 		

    McAfee (UK) Ltd.
    Hayley House, London Road
    Bracknell, Berkshire  RG12 2TH
    United Kingdom 

    McAfee France S.A.			
    50 rue de Londres				
    75008 Paris					
    France					
				
    McAfee Deutschland GmbH
    Industriestrasse 1
    D-82110 Germering
    Germany

Or, you can receive online assistance through any of the 
following resources:

1.  Bulletin Board System: (408) 988-4004
    24-hour US Robotics HST DS

2.  Internet e-mail: support@mcafee.com

3.  Internet FTP: ftp.mcafee.com or 205.227.129.134

4.  World Wide Web: http://www.mcafee.com
    or http://205.227.129.97

5.  America Online: keyword MCAFEE

6.  CompuServe: GO MCAFEE

7.  The Microsoft Network: GO MCAFEE

Before contacting McAfee, please make note of the following 
information. When sending correspondence, please include 
the same details.

- Program name and version number
- Type and brand of your computer, hard drive, and any 
  peripherals
- Operating system type and version
- Network name, operating system, and version
- Contents of your AUTOEXEC.BAT, CONFIG.SYS, and 
  system LOGIN script
- Microsoft service pack, where applicable
- Network card installed, where applicable
- Modem manufacturer, model, and baud, where 
  applicable
- Relevant browsers/applications and version number,
  where applicable

- Problem
- Specific scenario where problem occurs
- Conditions required to reproduce problem
- Statement of whether problem is reproducible on demand

- Your contact information: voice, fax, and e-mail

Other general feedback is also appreciated.


* FOR ON-SITE TRAINING INFORMATION *
 
Contact McAfee Customer Service at (800) 338-8754.


* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use McAfee's
products, we have established an Agents program to 
provide service, sales, and support for our products 
worldwide. For a listing of agents, see the file 
AGENTS.TXT, where applicable, or contact McAfee
Customer Service for agents near you.
