Errata for VirusScan Version 2.2.7 (9510) Copyright 1994, 1995 by McAfee, Inc. All Rights Reserved. These release notes cover what is new in VirusScan 2.2.7 and the October DAT release (9510) of VirusScan for DOS, VirusScan for Windows, VirusScan for OS/2 and VShield. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! NOTE: OS/2 users. IF YOUR OS/2 SYSTEM IS CONNECTED TO OS/2 ! ! LANMANAGER, DO NOT RUN OS/2 SCAN FROM STARTUP.CMD. DOING SO ! ! COULD RESULT IN LOST DESKTOP OR OTHER UNDESIRABLE RESULTS. ! ! ! ! McAfee is working with IBM and with several large ! ! organizations, which rely heavily on OS/2, to alleviate the ! ! corruption problem. ! ! ! ! The temporary solution is to put VirusScan in a start up ! ! group. Not in the log in script or in the start up command ! ! file. ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Note for NT users: You must add the following line in your DEFAULT.CFG and PROFILE1.PRF file (or any other profile you have chosen to use), residing in the same directory as WSCAN.EXE. /NODDA If you are not familiar with profiles, please refer to VSCAN22.PDF or your printed manual. ------------------------------------------------------------------------ About VirusScan Documentation The VirusScan documentation is now available online. In addition to being environmentally friendly, the online documentation is easy to use and puts the information you need at your fingertips. It will be necessary to download the Acrobat Reader that you prefer for DOS (ACRODOS.ZIP) or for Windows (ACROWIN.ZIP) and the Manual itself (VS22DOC.ZIP). The following features help you access information quickly: - The hypertext links take you directly to the topic you want to see. When the cursor changes to a pointing hand, just click on the link to display the related topic. - The navigation features on the Acrobat Reader toolbar let you move around within the document. Use the following procedure to view your electronic documentation: 1. Unzip the downloaded files into a working drive on your PC. 2. Run the self-extracting Adobe Acrobat Reader program, ACROREAD.EXE for Windows. In DOS, type ACRODOS and hit [ENTER] while in the directory where you unzipped the files. 3. In DOS Run the Install program and follow the Acrobat installation instructions. 4. Launch the Adobe Acrobat Reader from the installation directory. The Open dialog box is displayed. 5. Locate the manual file, VSCAN22.PDF, in the directory where you unzipped the VirusScan files. 6. Choose OK. ------------------------------------------------------------------------ About Macro viruses... Included in this ZIP file is a self-extracting archive, MVTOOL10.EXE, being distributed by Microsoft. It is a way to protect yourself against the Concept virus, as well as to warn you against document files that contain macros without your knowledge. To make use of it, execute the program: MVTOOL10.EXE 40732 bytes It will create these files: README.DOC 36864 10-02-95 1:08p SCANPROT.DOT 49152 10-02-95 3:44p Enter Word and read the README.DOC to see if the package is suitable for your environment. ------------------------------------------------------ Detectors added or updated in the 9510 DAT file (227): _1917 3APA3A-B 3NOP ACHE.1007 ACID.674 ADIN.3026:TPE 1.4 AMAZON.468 AMAZON.479 AMAZON.500 ANTIPODE.1087 AP.F AP.H AP.NIGHTCITY APOCALYPSE.1685 APPARITION ARETHREE ASSASSIN.952 AUSTRALIAN PARASITE.254 AUSTRALIAN PARASITE.279.A AUSTRALIAN PARASITE.279.B AUSTRALIAN PARASITE.284 AUSTRALIAN PARASITE.320 AUSTRALIAN PARASITE.550 AUSTRALIAN PARASITE.1014 AVALANCHE.2831 BANE.256 BARROTES.1463 BLAVA BUA.2263 - GENERATION 1 BUG.1497 BW.311 BYWAY.B CASCADE.ENIGMA CAUSTIC CECE.1998 CLM.1528 COLORS CORPLIFE COWABUNGA CREPATE.1944 DARKELF DRET.1710.B DRET.1710.C DRUID EM.1303 EQUUS EXEHEADER.440 FATHER_MAC.303 FATHER_MAC.789 FATHER_MAC.836 FATHER_MAC.1360 FAX FREE.1536 FAX FREE.1536.NEW.A FAX FREE.1536.NEW.C FITW (MBR) FIVE_EIGHTS.609 FOETUS FURTIVE.1901 GELIYOR GINGER.445 GODZILLA HAPPYBOX HNYSLOV HWF IMI.2304 IMMIGRANT INFECT.736 INTR.1336 INTR.1353 INT_AA IQ IVP.2 IVP.365 JAK.991 JERUSALEM.2267 JOHN JUDGE KA.863 KELA.1171 KHIZHNJAK.306 KHIZHNJAK.509 KHIZHNJAK.515 KHIZHNJAK.565 KHIZHNJAK.1011 KINGSIZE LADY.873 LENNON LIMPIA LOVECHILD_B3 MAC.2803.B MAC.2824.B MACEDONIA MAG.239 MAG.254 MARAUDER.855 MARBAS MARKY MATERIAL MIKE.252 MIKE.256 MIRAGE.1322 MISS_D MORRISON NATAS.4740 NATAS.4744 NATAS.4746 NATAS.4774 NATAS.4988 NEITHER NEO-TRIVAL NEW_MODEL NOVEMBER_17TH.522 NPOX.1726 NUCLEAR NYGUS.278 OIL.579 PANIC PENDULE.1066 PETER_II.RUNTIME PF PM.733 PMBS PMT.867 POLO.812 PS-MPC.1054 PS-MPC.1500 PS-MPC.MUTAGEN PSYCHOSIS.1195 PURE.439 PVW.1063 QUARK QUAVER QUOD RAJA.518.B RAJA.871 RATBOY.671 RM RUBB.1018 RUSSIAN TINY.352 RUSSIAN TINY.972 SANDRA.1356 SCREAMING_FIST.839 SCREAMING_FIST.846 SELECT.1112 SELECT.1258 SENECA SHADOW.1200 SHINEAWAY SIDEWINDER.B SILLYC.101 SILLYC.122 SILLYC.124 SILLYC.144 SILLYC.155 SILLYC.166 SILLYC.169 SILLYC.190.A SILLYC.190.B SILLYC.264 SILLYC.281 SILLYC.292 SILLYC.302 SILLYC.331 SILLYC.343 SILLYC.468 SILLYC.498 SILLYC.511 SILLYC.563 SILLYC.626 SILLYC.657 SILLYCER.266 SILLYCR.122 SILLYCR.357 SIR.975 SIR.1070 SKATER.819 SKIS-AD1 SMALL_COMP.101 SOCKS SOFIA-TERM.1369 STERCULIUS.428 STONED.EMPIRE.CANADIAN STONED.LZR STONED.WXYZ.B SVETA.309 TAI-PAN.438.C TERRA'X THEW.1448 TINY.245 TISO.846 TRIVIAL.50.B TRIVIAL.84 UNASHAMED UNHANDLE UNKNOWN1.0 UNKNOWN1.1 VAMPIRO.A VARIABLE WORM.913 VERB VICE.01.FIRECIDE VICE.01.SAMPLE VICE.02.ICEBURN.689 VICE.02.ICEMELT.676 VICE.03.ONE13TH VICE.05.CODE.4722.A VICE.05.CODE.4722.B VIENNA.VIOLATOR.969 VKIT (WIN EXE) VLAD.651 VLAD.655 VLAD.692 VLAD.696 VLAD.2042 WALLY WEIZEN.467 WEIZEN.471 WILDTIMES.555 X-BOOT XIV.2248 XUXA.1096 XUXA.1656 YAM.680 YANKEE DOODLE.2167 ZAP.1121 ZED ZEUS ZUZANA ---------------------------------------------------- Removers added or updated in the 9510 DAT file (38): _1917 3NOP BARROTES.1463 BLOODWAR CINDERELLA DRET.1710.B DRET.1710.C FICHV.2_1 FOETUS FURTIVE.1901 GINGER.445 GOLD BUG HAPPYBOX HASITA ICELANDIC.2706 INT_AA INVADER (MBR) LENNON LIMPIA LITTLE_RED.A NATAS.4740 NATAS.4744 NATAS.4746 NATAS.4774 NATAS.4988 NATAS.4988 (MBR) PETER_II.RUNTIME QUARK SMALL_COMP.101 STONED.WXYC SVC.2936.C TAI-PAN.438.C TELECOM.BOOT TERRA'X UNASHAMED VAMPIRO.A VICE.05.CODE.4722.A VICE.05.CODE.4722.B ----------------------- False Alarms fixed: PREDITOR.II.C SMEG virus or variant TRACEBACK.3066.A GENERATION - 1 VIROGEN.1294 X-1B ---------------------------------------------------- Top active viruses other than those presented above: AntiCmos (alias: Lixi) Byway (alias: Dir2.Byway) (*) Concept Da'Boys (**) Junkie MonkeyA MonkeyB Natas NYB (alias: B1) Ripper Sampo V-Sign (alias: Cansu) WelcomB (alias: BuptBoot) (*) Effective 9508, we adopted the CARO name of Byway. To remove this virus, boot up with the virus in memory. Copy all executable files to floppy, with a non-executable extension. Copy all the data files off. Format harddisk. Replace files. (**) To remove Da'Boys from a hard disk infection, one needs to boot from a clean corresponding DOS version and execute the command "SYS C:".