Release Notes for McAfee Anti-Virus Engine for NetShield for NetWare Version 4.24.0 (c)1992-2003 Networks Associates Technology, Inc. All Rights Reserved =============================================== Product Release: April 2, 2003 - DAT Version: 4244 - Engine Version: 4240 =============================================== Thank you for using McAfee anti-virus software. This file contains important information regarding this release. We strongly recommend that you read the entire document. This release of the McAfee anti-virus scanning engine functions ONLY with 4244 and later DATs. You cannot use this engine with earlier DAT file versions. _______________________________________________ WHAT'S IN THIS FILE - New Features - System Requirements - Installation - Files Included With This Release - Testing Your Installation - Known Issues - Documentation - What is the Engine? - What are DAT Files? - Contacting McAfee and Network Associates - Copyright and Trademark Attributions - Trademarks - License Agreement _______________________________________________ NEW FEATURES The engine has the following new features: - Additional virus detection and cleaning capabilities. - Enhanced denial-of-service protection. _______________________________________________ SYSTEM REQUIREMENTS This software installs and runs on a computer equipped with these versions of NetWare: - Version 4.11 with the latest Service Pack. - Versions 4.2, 5.0 and 5.1 with McAfee Netshield for NetWare 4.5 and 4.6. - Version 6.0 with McAfee Netshield for NetWare 4.6 only. _______________________________________________ INSTALLATION 1. Download the NetWare .ZIP file from the Network Associates web site or from other electronic services. 2. Create a temporary folder on your hard disk, then extract the new files from their .ZIP archive. 3. Log on to the NetWare server that hosts the NetShield NLM you want to unload, either at the server itself, or from elsewhere on your network. 4. At the NetWare console prompt, enter the following command: unload netshld The NetShield software begins to shut down. 5. Copy the extracted files from the temporary directory to the NetShield directory on your NetWare server. If you installed the NetShield NetWare server application in its default location, copy the files to: SYS:MCAFEE\NETSHLD 6. Restart the NetShield NetWare server by entering the following command at the NetWare console prompt: netshld The NetShield NetWare application uses the new files immediately. FILES INCLUDED WITH THIS RELEASE The Engine and DAT file update package includes the following files, all of which should be installed into the NetShield NetWare installation directory on your NetWare server. MCSCAN32.NLM Scanning engine. CLEAN.DAT Virus definition file. SCAN.DAT Virus definition file. NAMES.DAT Virus definition file. README.TXT This file. CONTACT.TXT Contact information. LICENSE.TXT License information. SIGNLIC.TXT 3rd party license information. VALIDATE.EXE File checksum utility. PACKING.LST List of file checksums. TESTING YOUR INSTALLATION You can test the operation of the software by running the EICAR Standard AntiVirus Test File on any computer where you have installed the software. The EICAR Standard AntiVirus Test File is a combined effort by anti-virus vendors throughout the world to implement one standard by which customers can verify their anti-virus installations. To test your installation: 1. Copy the following line into its own file, then save the file with the name EICAR.COM. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* The file size will be 68 or 70 bytes. 2. Start your anti-virus software and allow it to scan the directory that contains EICAR.COM. When your software scans this file, it will report finding the EICAR test file. 3. Delete the file when you have finished testing your installation to avoid alarming unsuspecting users. IMPORTANT: Please note that this file is NOT A VIRUS. _______________________________________________ KNOWN ISSUES 1. Abends on NetWare 5.1 servers with Support Pack 3 Occasionally, NetWare 5.1 servers abend after NetWare 5.1 Support Pack 3 is applied. The problem in that support pack will be addressed in NetWare 5.1 Support Pack 4. The abend occurs in the tolower() function at LIBC.NLM + 00000464h. MOVZX ECX,byte ptr [EDX-2C4BDF97]=? For more details, see the thread "Bugs in NKS (NW 5.1+SP3)" in the novell.devsup.nks newsgroup at: news://developer-forums.novell.com 2. Module MCSCAN32.NLM cannot load NetWare 4.11 users might see the following error when attempting to load Netshield. Error : Loader cannot find public symbol: closedir_510 Error : Load file referenced undefined public variable. Module MCSCAN32.NLM NOT loaded. This can be fixed by loading CLIBAUX.NLM before the Engine NLM (mcscan32.nlm). To do this, add an extra line to netshld.ncf: 1. At the system console, type: load edit sys:\system\netshld.ncf 2. Add the following line before the line "load SYS:MCAFEE\NETSHLD\netshld.nlm": load clibaux.nlm 3. Save the file, and close edit. 4. At the system console, type: netshld 3. Some mail clients (such as PINE, Eudora, Netscape, and Pegasus Mail) use a file structure similar to concatenated MIME as their mailbox format. These clients also tend to access the files frequently. Some McAfee desktop products allow the user to enable the scanning of MIME files. Depending on the size of the mailbox, on-access scanning of these files could take a considerable time. Therefore we recommend that these files are excluded from on-access scanning, if applicable. _______________________________________________ DOCUMENTATION This product includes the following documentation set: 1. A LICENSE Agreement. This outlines the terms under which you may use the product. Read it carefully. If you install the product, you agree to the license terms. 2. This README file. 3. Third-party license information. 4. A CONTACT file. This file provides a list of phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world. It also includes contact information for services, such as technical support, customer service, onsite training, the beta program, and AVERT Anti-Virus Emergency Response Team. _______________________________________________ WHAT IS THE ENGINE? The anti-virus scanning engine included with this package is the component that actually detects viruses and cleans infected files. The engine is a self-contained program that you can "drop in" to each generation of McAfee anti-virus software to enhance detection and cleaning capabilities, much like you might replace parts of - or your entire - car engine. The rest of the anti-virus software allows you to direct and manage the detection and cleaning capabilities built into the engine. _______________________________________________ WHAT ARE DAT FILES? Virus definition, or DAT, files contain up-to-date virus signatures and other information that the anti-virus products use to protect your computer against the thousands of known computer viruses. We release new DAT files regularly to provide protection against the hundreds of new viruses that appear each month. To ensure that your anti-virus software can protect your system or network against the latest virus threats, download and install the latest DAT files. These are available from the web site: http://www.mcafeeb2b.com/naicommon/download/dats/find.asp _______________________________________________ CONTACTING MCAFEE AND NETWORK ASSOCIATES Technical Support http://knowledge.nai.com McAfee Beta Program Beta Web Site www.mcafeeb2b.com/beta/ E-mail avbeta@nai.com AVERT Anti-Virus Emergency Response Team www.mcafeeb2b.com/naicommon/avert/default.asp Download Site www.mcafeeb2b.com/naicommon/download/ ftp://ftp.nai.com/pub/antivirus/datfiles/4.x DAT File Updates www.mcafeeb2b.com/naicommon/download/dats/find.asp Product Upgrades www.mcafeeb2b.com/naicommon/download/upgrade/login.asp Valid grant number required. Contact Network Associates Customer Service On-Site Training Information www.mcafeeb2b.com/services/mcafee-training/default.asp Network Associates Customer Service US, Canada, and Latin America toll-free: Phone: +1-888-VIRUS NO or +1-888-847-8766 Monday - Friday, 8 a.m. - 8 p.m., Central Time E-mail: services_corporate_division@nai.com Web: www.nai.com www.mcafeeb2b.com For additional information on contacting Network Associates and McAfee – including toll-free numbers for other geographic areas – see the CONTACT file. _______________________________________________ COPYRIGHT AND TRADEMARK ATTRIBUTIONS (c) 2003 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 3965 Freedom Circle, Santa Clara, California 95054, or call +1-972-308-9960. TRADEMARKS Active Firewall, Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, CNX, CNX Certification Certified Network Expert and design, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label, Enterprise SecureCast, Enterprise SecureCast (in Katakana), Event Orchestrator, EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HomeGuard, Hunter, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, MultiMedia Cloaking, Net Tools, Net Tools (in Katakana), NetCrypto, NetScan, NetShield, NetStalker, Network Associates, NetXray, NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport, Recoverkey, Recoverkey - International, Registry Wizard, ReportMagic, Router PM, Safe & Sound, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), Stalker, SupportMagic, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, Who’s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners. This product includes or may include software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/) This product includes or may include cryptographic software written by Eric Young. (eay@cryptsoft.com) LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES, INC. OR THE PLACE OF PURCHASE FOR A FULL REFUND.