Release Notes for McAfee(R) Anti-Virus Engine for NetShield(R) for NetWare Version 4.3.20 Copyright (C) 2003 Networks Associates Technology, Inc. All Rights Reserved ===================================================== - DAT Version: 4307 - Engine Version: 4320 ===================================================== Thank you for using McAfee anti-virus software. This file contains important information regarding this release. We strongly recommend that you read the entire document. This release of the McAfee anti-virus scanning engine functions ONLY with 4297 and later DATs. You cannot use this engine with earlier DAT file versions. IMPORTANT: McAfee Security does not support automatic upgrading of a pre-release version of the software. To upgrade to a production release of the software, you must first uninstall the existing version of the software. _____________________________________________________ WHAT'S IN THIS FILE - New Features - System Requirements - Installation - Files Included With This Release - Testing Your Installation - Known Issues - What is the Virus-Scanning Engine? - What are DAT Files? - Documentation - Participating in the Mcafee Security Beta Program - Contacting McAfee Security & Network Associates - Copyright and Trademark Attributions - Trademarks - License Agreement and Attributions _____________________________________________________ NEW FEATURES The engine has the following new features: - Support for Microsoft Office 2003 XML documents - Improved support for RAR formats - Updated support for latest .ZIP file formats - Improved support for corrupt .ZIP files _______________________________________________ SYSTEM REQUIREMENTS This software installs and runs on a computer equipped with these versions of NetWare: - Version 4.11 with the latest Service Pack. - Versions 4.2, 5.0 and 5.1 with McAfee Netshield for NetWare 4.5 and 4.6. - Version 6.0 with McAfee Netshield for NetWare 4.6 only. _______________________________________________ INSTALLATION 1. Download the NetWare .ZIP file from the Network Associates web site or from other electronic services. 2. Create a temporary folder on your hard disk, then extract the new files from their .ZIP archive. 3. Log on to the NetWare server that hosts the NetShield NLM you want to unload, either at the server itself, or from elsewhere on your network. 4. At the NetWare console prompt, enter the following command: unload netshld The NetShield software begins to shut down. 5. Copy the extracted files from the temporary directory to the NetShield directory on your NetWare server. If you installed the NetShield NetWare server application in its default location, copy the files to: SYS:MCAFEE\NETSHLD 6. Restart the NetShield NetWare server by entering the following command at the NetWare console prompt: netshld The NetShield NetWare application uses the new files immediately. FILES INCLUDED WITH THIS RELEASE The Engine and DAT file update package includes the following files, all of which should be installed into the NetShield NetWare installation directory on your NetWare server. MCSCAN32.NLM Scanning engine. CLEAN.DAT Virus definition file. NAMES.DAT Virus definition file. SCAN.DAT Virus definition file. CONTACT.TXT Contact information. LICENSE.TXT License information. README.TXT This file. SIGNLIC.TXT Third-party license information. PACKING.LST List of file checksums. VALIDATE.EXE File checksum utility. TESTING YOUR INSTALLATION You can test the operation of the software by running the EICAR Standard AntiVirus Test File on any computer where you have installed the software. The EICAR Standard AntiVirus Test File is a combined effort by anti-virus vendors throughout the world to implement one standard by which customers can verify their anti-virus installations. To test your installation: 1. Copy the following line into its own file, then save the file with the name EICAR.COM. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* The file size will be 68 or 70 bytes. 2. Start your anti-virus software and allow it to scan the directory that contains EICAR.COM. When your software scans this file, it will report finding the EICAR test file. 3. Delete the file when you have finished testing your installation to avoid alarming unsuspecting users. IMPORTANT: Please note that this file is NOT A VIRUS. _____________________________________________________ KNOWN ISSUES 1. Abends on NetWare 5.1 servers with Support Pack 3 Occasionally, NetWare 5.1 servers abend after NetWare 5.1 Support Pack 3 is applied. The problem in that support pack will be addressed in NetWare 5.1 Support Pack 4. The abend occurs in the tolower() function at LIBC.NLM + 00000464h. MOVZX ECX,byte ptr [EDX-2C4BDF97]=? For more details, see the thread "Bugs in NKS (NW 5.1+SP3)" in the novell.devsup.nks newsgroup at: news://developer-forums.novell.com 2. Module MCSCAN32.NLM cannot load NetWare 4.11 users might see the following error when attempting to load Netshield. Error : Loader cannot find public symbol: closedir_510 Error : Load file referenced undefined public variable. Module MCSCAN32.NLM NOT loaded. This can be fixed by loading CLIBAUX.NLM before the Engine NLM (mcscan32.nlm). To do this, add an extra line to netshld.ncf: 1. At the system console, type: load edit sys:\system\netshld.ncf 2. Add the following line before the line "load SYS:MCAFEE\NETSHLD\netshld.nlm": load clibaux.nlm 3. Save the file, and close edit. 4. At the system console, type: netshld 3. Some mail clients (such as PINE, Eudora, Netscape, and Pegasus Mail) use a file structure similar to concatenated MIME as their mailbox format. These clients also tend to access the files frequently. Some McAfee desktop products allow the user to enable the scanning of MIME files. Depending on the size of the mailbox, on-access scanning of these files could take a considerable time. Therefore we recommend that these files are excluded from on-access scanning, if applicable. _______________________________________________ WHAT IS THE VIRUS-SCANNING ENGINE? The virus-scanning engine included with this package is the component that actually detects viruses and cleans infected files. The engine is a self-contained program that you can "drop in" to each generation of McAfee anti-virus software to enhance detection and cleaning capabilities, much like you might replace parts of - or your entire - car engine. The rest of the anti-virus software allows you to direct and manage the detection and cleaning capabilities built into the engine. _______________________________________________ WHAT ARE DAT FILES? Virus definition, or DAT, files contain up-to-date virus signatures and other information that the anti-virus products use to protect your computer against the thousands of known computer viruses. We release new DAT files regularly to provide protection against the hundreds of new viruses that appear each month. To ensure that your anti-virus software can protect your system or network against the latest virus threats, download and install the latest DAT files. These are available from the download area on our web site. ___________________________________________________ DOCUMENTATION Documentation is included on the product CD and/or is available with a valid grant number from the McAfee Security download site: https://secure.nai.com/us/forms/downloads/upgrades/login.asp NOTE: Electronic copies of all product manuals are saved as Adobe Acrobat .PDF files. The product CD includes the latest version of Acrobat Reader, or you can download any version from the Adobe web site: www.adobe.com/prodindex/acrobat/readstep.html - A LICENSE Agreement. The terms under which you may use the product. Read it carefully. If you install the product, you agree to the license terms. - This README file. - A CONTACT file. Contact information for McAfee Security and Network Associates services and resources: technical support, customer service, AVERT, beta program, and training. It also includes a list of phone numbers, street addresses, web addresses, e-mail addresses, and fax numbers for Network Associates offices in the United States and around the world. _____________________________________________________ PARTICIPATING IN THE MCAFEE SECURITY BETA PROGRAM To download new beta software or to read about the latest beta information, visit the beta web site: http://www.networkassociates.com/us/downloads/beta/ To submit your feedback on any McAfee Security beta product, send e-mail to: avbeta@nai.com McAfee Security is devoted to providing solutions based on your input. __________________________________________________________ CONTACTING MCAFEE SECURITY & NETWORK ASSOCIATES Technical Support Home Page http://www.networkassociates.com/us/support/ KnowledgeBase Search https://knowledgemap.nai.com/phpclient/homepage.aspx PrimeSupport Service Portal http://mysupport.nai.com Login credentials required. McAfee Security Beta Program Beta Web Site http://www.networkassociates.com/us/downloads/beta/ E-mail avbeta@nai.com Security Headquarters -- AVERT (Anti-Virus Emergency Response Team) Home Page http://www.networkassociates.com/us/security/home.asp Virus Information Library http://vil.nai.com Submit a Virus Sample – AVERT WebImmune https://www.webimmune.net/default.asp AVERT DAT Notification Service http://vil.nai.com/vil/join-DAT-list.asp Download Site Home Page http://www.networkassociates.com/us/downloads/ DAT File and Engine Updates http://www.networkassociates.com/us/downloads/updates/ ftp://ftp.nai.com/pub/antivirus/datfiles/4.x Product Upgrades https://secure.nai.com/us/forms/downloads/upgrades/login.asp Valid grant number required. Contact Network Associates Customer Service Training McAfee Security University http://www.networkassociates.com/us/services/education/mcafee/university.htm Network Associates Customer Service US, Canada, and Latin America toll-free: Phone: +1-888-VIRUS NO or +1-888-847-8766 Monday - Friday, 8 a.m. - 8 p.m., Central Time E-mail: services_corporate_division@nai.com Web: http://www.nai.com/us/index.asp http://www.networkassociates.com/us/index.asp For additional information on contacting Network Associates and McAfee Security – including toll-free numbers for other geographic areas -- see the CONTACT file that accompanied your original product release. _____________________________________________________ COPYRIGHT AND TRADEMARK ATTRIBUTIONS Copyright (C) 2003 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 5000 Headquarters Drive, Plano, Texas 75024, or call +1-972- 963-8000. TRADEMARKS Active Firewall, Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Appera, AVERT, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX Certification Certified Network Expert and design, Covert, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label, E and Design, Entercept, Enterprise SecureCast, Enterprise SecureCast (in Katakana), ePolicy Orchestrator, Event Orchestrator (in Katakana), EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HelpDesk IQ, HomeGuard, Hunter, Impermia, InfiniStream, Intrusion Prevention Through Innovation, IntruShield, IntruVert Networks, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, MultiMedia Cloaking, NA Network Associates, Net Tools, Net Tools (in Katakana), NetAsyst, NetCrypto, NetOctopus, NetScan, NetShield, NetStalker, Network Associates, Network Performance Orchestrator, NetXray, NotesGuard, nPO, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PortalShield, Powered by SpamAssassin, PrimeSupport, Recoverkey, Recoverkey – International, Registry Wizard, Remote Desktop, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic, SecureCast, SecureSelect, SecurityShield, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), SpamKiller, SpamAssassin, Stalker, SupportMagic, ThreatScan, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, VIDS, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, What's The State Of Your IDS?, Who’s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks or trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. Sniffer(R) brand products are made only by Network Associates, Inc. All other registered and unregistered trademarks herein are the sole property of their respective owners. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES, INC. OR THE PLACE OF PURCHASE FOR A FULL REFUND. Attributions This product includes or may include: - Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). - Cryptographic software written by Eric Young and software written by Tim J. Hudson. - Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar Free Software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the source code. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the source code also be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that Network Associates provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein. - Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer. - Software originally written by Robert Nordier, Copyright (C) 1996-7 Robert Nordier. All rights reserved. - Software written by Douglas W. Sauder. - Software developed by the Apache Software Foundation (http://www.apache.org/). - International Components for Unicode ("ICU") Copyright (C) 1995-2002 International Business Machines Corporation and others. All rights reserved. - Software developed by CrystalClear Software, Inc., Copyright (C) 2000 CrystalClear Software, Inc. - FEAD(R) Optimizer(R) technology, Copyright Netopsystems AG, Berlin, Germany. - Outside In(R) Viewer Technology (C) 1992-2001 Stellent Chicago, Inc. and/or Outside In(R) HTML Export, (C) 2001 Stellent Chicago, Inc. - Software copyrighted by Thai Open Source Software Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000. - Software copyrighted by Expat maintainers. - Software copyrighted by The Regents of the University of California, (C) 1989. - Software copyrighted by Gunnar Ritter. - Software copyrighted by Sun Microsystems(C), Inc. - Software copyrighted by Gisle Aas. All rights reserved, (C) 1995-2003. - Software copyrighted by Michael A. Chase, (C) 1999-2000. - Software copyrighted by Neil Winton, (C) 1995-1996. - Software copyrighted by RSA Data Security, Inc., (C) 1990-1992. - Software copyrighted by Sean M. Burke, (C) 1999, 2000. - Software copyrighted by Martijn Koster, (C) 1995. - Software copyrighted by Brad Appleton, (C) 1996-1999. - Software copyrighted by Michael G. Schwern, (C) 2001. - Software copyrighted by Graham Barr, (C) 1998. - Software copyrighted by Larry Wall and Clark Cooper, (C) 1998-2000. - Software copyrighted by Frodo Looijaard, (C) 1997. V2.3.1 DBN 325-EN