What's New in VShield v3.0.0 (3000) Copyright 1994-1997 by McAfee, Inc. All Rights Reserved. Thank you for using McAfee's VShield. This What's New file contains important information regarding the current version of this product. It is highly recommended that you read the entire document. McAfee welcomes your comments and suggestions. Please use the information provided in this file to contact us. ___________________ WHAT'S IN THIS FILE - New Features - Known Issues - Installation - Documentation - Frequently Asked Questions - Contact McAfee ____________ NEW FEATURES 1. VShield now provides the exceptional virus detection rates and fast scanning performance of the 3.0 engine series. VShield version 3.0.0 offers users maximum defense against the newest threats to data. VShield 3.0.0 detects boot-sector infections and file infections. 2. VShield version 3.0.0 is compatible with the 3000 DAT series. ____________ KNOWN ISSUES 1. The new 3000 series DATs contained in VShield v3.0.0 are not backward compatible with previous VShield versions. The 3000 DATs should not be used with VShield v2.x products. ____________ INSTALLATION * PRIMARY PROGRAM FILES FOR VSHIELD * Files located in the Install directory: ======================================= VSHINST.EXE = VShield messenger installation program VSHLDWIN.EXE = VShield messenger program VSHEML.EXE = VShield polymorphic emulation program VALIDATE.EXE = Authenticity validation program NAMES.DAT = Virus definition data SCAN.DAT = Virus definition data CHKVSHLD.EXE = VShield TSR checker command line utility README.1ST = McAfee information PACKING.LST = Packing list VSHIELD.EXE = VShield TSR program WHATSNEW.TXT = What's New document VSHLDCRC.EXE = VShield CRC checking program * INSTALLING THE PRODUCT * To install, create a directory and copy the files to it. On-access scanning will protect your system from boot sector infections, which are transmitted upon drive and/or file access. To enable on-access scanning, edit your AUTOEXEC.BAT file and add a line that calls the program VSHIELD.EXE from the directory in which you placed it, for example: C:\MCAFEE\VIRUSCAN\VSHIELD.EXE /ANYACCESS After the AUTOEXEC.BAT file has been modified, restart your computer to load VShield into memory and fully enable on-access scanning. * TESTING YOUR INSTALLATION * The Eicar Standard AntiVirus Test File is a combined effort by anti-virus vendors throughout the world to come up with one standard by which customers can verify their anti-virus installations. To test your installation, copy the following line into its own file and name it EICAR.COM. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* When done, you will have a 69 or 70 byte file. When VirusScan is applied to this file, VShield will report finding the EICAR-STANDARD-AV-TEST-FILE virus. It is important to know that THIS IS NOT A VIRUS. However, users often have the need to test that their installations function correctly. The anti-virus industry, through the European Institute for Computer Antivirus Research, has adopted this standard to facilitate this need. Please delete the file when installation testing is completed so unsuspecting users are not unnecessarily alarmed. * UNINSTALLING THE PRODUCT * 1. Execute VSHIELD/REMOVE to remove VShield from memory, then remove the files from your hard drive and remove any lines in your AUTOEXEC.BAT file that call VShield. If an error message is displayed indicating that VShield could not be removed from memory, take the following step. 2. Edit your AUTOEXEC.BAT file and remove the line that calls VShield, then reboot your system. Upon restarting your system, VShield will not be loaded into memory and you can remove the files from your hard drive. Note: If the files are removed from your hard drive prior to removing VShield from memory, an error message will be displayed until you remove VShield from memory or restart your system. _____________ DOCUMENTATION For more information, refer to the User's Guide, included on the CD-ROM versions of this program or available from McAfee's BBS and FTP site. This file is in Adobe Acrobat Portable Document Format (.PDF) and can be viewed using Adobe Acrobat Reader. This form of electronic documentation includes hypertext links and easy navigation to assist you in finding answers to questions about your McAfee product. Adobe Acrobat Reader is available on CD-ROM in the ACROREAD subdirectory. Adobe Acrobat Reader also can be downloaded from the World Wide Web at: http://www.adobe.com/Acrobat/readstep.html Documentation can be downloaded from McAfee's BBS or the World Wide Web at: http://www.McAfee.com or 205.227.129.97 __________________________ FREQUENTLY ASKED QUESTIONS Regularly updated lists of frequently asked questions about McAfee products also are available on McAfee's BBS, website, and CompuServe and AOL forums. Q: How much conventional memory is required to run the VShield DOS TSR? A: Once VShield is running, it only requires about 110K of memory. This can include conventional, upper, EMS, or XMS. However, a minimum of 510K of free conventional memory is required for VShield to load its virus patterns and perform an initial scan of memory and system areas. Q: Why is my computer so slow after I install the VShield DOS TSR? A: The /ANYACCESS switch tells VShield to scan your drives whenever they are accessed, including the C: drive. Using the /ONLY A: B: switch will tell VShield to scan only the floppy drives whenever they are accessed. Once you have determined your computer to be free of viruses, you do not need to have VShield scanning the C: drive on any access. Q: What is the difference between the VShield DOS TSR and VirusScan for DOS. A: #1 VShield installs itself in memory and stays resident in order to monitor your system for viral activity. If an infected program is executed or if an infected boot sector is accessed, VShield will display a warning that a virus is present. A: #2 VirusScan for DOS is an on-demand scanner that allows you to perform a complete or partial scan of your computer at any time. VirusScan for DOS can run customized scans through a large set of command line switches. Q: I had VShield installed, but my hard drive still became infected with a boot sector virus. Why? A: VShield can monitor your system for viruses only after it has loaded. If an infected diskette is left in the A: drive when the PC is turned off, the next time you turn on the power, the computer will try to boot from that diskette. Since VShield has not been loaded yet, it cannot protect you. Q: Can the VShield DOS TSR clean viruses? A: No. VShield can only detect viruses. To remove a virus from your system, use VirusScan for DOS. VirusScan for DOS can be downloaded from our online services listed below. ______________ CONTACT McAFEE * FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS * Contact McAfee's Customer Care department: 1. Call (408) 988-3832 Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time 2. Fax (408) 970-9727 24-hour, Group III fax 3. Fax-back automated response system (408) 988-3034 24-hour fax Send correspondence to any of the following McAfee locations. McAfee Corporate Headquarters 2710 Walsh Avenue Santa Clara, CA 95051-0963 McAfee East Coast Office Jerral Center West 766 Shrewsbury Avenue Tinton Falls, NJ 07724-3298 McAfee Central Office 4099 McEwen Suites 500 and 700 Dallas, TX 75244 McAfee Canada 139 Main Street Suite 201 Unionville, Ontario Canada L3R2G6 McAfee Europe B.V. Gatwickstraat 25 1043 DL Amsterdam The Netherlands McAfee (UK) Ltd. Hayley House, London Road Bracknell, Berkshire RG12 2TH United Kingdom McAfee France S.A. 50 rue de Londres 75008 Paris France McAfee Deutschland GmbH Industriestrasse 1 D-82110 Germering Germany Or, you can receive online assistance through any of the following resources: 1. Bulletin Board System: (408) 988-4004 24-hour US Robotics HST DS 2. Internet e-mail: support@mcafee.com 3. Internet FTP: ftp.mcafee.com or 205.227.129.134 4. World Wide Web: http://www.mcafee.com or http://205.227.129.97 5. America Online: keyword MCAFEE 6. CompuServe: GO MCAFEE 7. The Microsoft Network: GO MCAFEE Before contacting McAfee, please make note of the following information. When sending correspondence, please include the same details. - Program name and version number - Type and brand of your computer, hard drive, and any peripherals - Network cards installed - Relevant browsers and version number, where applicable - Problem - Specific scenario where problem occurs - Conditions required to reproduce problem - Statement of whether problem is reproducible on demand - Your contact information: voice, fax, and e-mail Other general feedback is also appreciated. * FOR ON-SITE TRAINING INFORMATION * Contact McAfee Customer Service at (800) 338-8754. * FOR ON-SITE TRAINING INFORMATION * Contact McAfee Customer Service at (800) 338-8754. * FOR PRODUCT UPGRADES * To make it easier for you to receive and use McAfee's products, we have established an Agents program to provide service, sales, and support for our products worldwide. For a listing of agents, see the file AGENTS.TXT or contact McAfee Customer Service for agents near you. * MCAFEE BETA SITE * Get pre-release software, including DAT files, through http://beta.mcafee.com/public/datafiles. You will have access to Public Beta and External Test Areas. Your feedback CAN make a difference.