McAfee VirusScan Getting Started Guide Version 5.
COPYRIGHT Copyright © 2000 Network Associates, Inc. and its Affiliated Companies. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Network Associates, Inc.
Table of Contents Chapter 1. About VirusScan Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 How does VirusScan software work? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 What comes with VirusScan software? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 What’s new in this release? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10 Chapter 2. Installing VirusScan Software . . . . . . . . . . . . . . . . . . . . . . . .
Table of Contents Customer service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46 Technical support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46 Appendix B. Download Information (License ID #: VSF500R) . . . . . . . . 49 SecureCast™ (For Windows 95/98 Retail Version): . . . . . . . . . . . . . . . . . . . .49 Internet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 About VirusScan Software How does VirusScan software work? VirusScan software combines the anti-virus industry’s most capable scan engine with top-notch interface enhancements that give you complete access to that engine’s power. The VirusScan graphical user interface unifies its specialized program components, but without sacrificing the flexibility you need to fit the software into your computing environment.
About VirusScan Software Figure 1-1. McAfee VirusScan Central screen Through this user-friendly interface, you can access the main functions of McAfee VirusScan. Click the appropriate buttons as displayed to start performing a particular task within McAfee VirusScan (e.g., Scan, Schedule, Quarantine, etc). You can also click the Update button to start searching and downloading any available updates to McAfee VirusScan installed on your computer.
About VirusScan Software • The VShield scanner. This component gives you continuous anti-virus protection from viruses that arrive on floppy disks, from your network, or from various sources on the Internet. The VShield scanner starts when you start your computer, and stays in memory until you shut down. A flexible set of property pages lets you tell the scanner which parts of your system to examine, what to look for, which parts to leave alone, and how to respond to any infected files it finds.
About VirusScan Software • The E-Mail Scan extension. This component allows you to scan your Microsoft Exchange or Outlook mailbox, or public folders to which you have access, directly on the server. This invaluable “x-ray” peek into your mailbox means that VirusScan software can find potential infections before they make their way to your desktop, which can stop a Melissa-like virus in its tracks. See “Scanning Microsoft Exchange and Outlook mail” on page 253 of the VirusScan User’s Guide for details.
About VirusScan Software – SCAN.EXE, a scanner for 32-bit environments only. This is the primary command-line interface. When you run this file, it first checks its environment to see whether it can run by itself. If your computer is running in 16-bit or protected mode, it will transfer control to one of the other scanners. – SCANPM.EXE, a scanner for 16- and 32-bit environments. This scanner provides you with a full set of scanning options for 16- and 32-bit protected-mode DOS environments.
About VirusScan Software – An administrator’s guide saved on the VirusScan software CD-ROM or installed on your hard disk in Adobe Acrobat .PDF format. The VirusScan Administrator’s Guide describes in detail how to manage and configure VirusScan software. – An online help file. This file gives you quick access to a full range of topics that describe VirusScan software.
About VirusScan Software Installation and distribution features McAfee anti-virus products, including VirusScan software, now use the Microsoft Windows Installer (MSI), which comes with all Windows 2000 Professional systems. This Setup utility offers a wealth of custom installation and configuration features that make VirusScan software rollout across large organizations much easier and more intuitive.
About VirusScan Software • An updated randomization feature for scheduled tasks allows you to set a time for the task to run, then set a randomization “window.” The VirusScan Console then picks a random time within the window to actually start the task. • System Scan module action options now include a new Prompt Type configuration option for Windows 95 and Windows 98 systems. This option lets you determine how the Prompt for user action alert appears.
Installing VirusScan Software 2 2 Before you begin McAfee distributes VirusScan software in two ways: 1) as an archived file that you can download from the McAfee website; and 2) on CD-ROM. Although the method you use to transfer VirusScan files from an archive you download differs from the method you use to transfer files from a CD-ROM you place in your CD-ROM drive, the installation steps you follow after that are the same for both distribution types.
Installing VirusScan Software Preparing to install VirusScan software After inserting the McAfee VirusScan on your CD-ROM drive , you should see a VirusScan welcome image appear automatically. To install VirusScan software immediately, click Install VirusScan, then skip to Step 4 on page 16 to continue with Setup. If the welcome image does not appear, or if you are installing VirusScan software from files you downloaded, start with Step 2 on page 15.
Installing VirusScan Software 2. Choose Run from the Start menu in the Windows taskbar. The Run dialog box will appear (Figure 2-1). Figure 2-1. Run dialog box 3. Type :\SETUP.EXE in the text box provided, then click OK. Here, represents the drive letter for your CD-ROM drive or the path to the folder that contains your extracted VirusScan files. To search for the correct files on your hard disk or CD-ROM, click Browse.
Installing VirusScan Software Figure 2-2. Setup welcome panel 4. This first panel tells you where to locate the README.TXT file, which describes product features, lists any known issues, and includes the latest available product information for this VirusScan version. When you have read the text, click Next> to continue. 5. The next wizard panel displays the VirusScan software end-user license agreement.
Installing VirusScan Software If your computer runs Windows NT Workstation v4.0 or Windows 2000 Professional, Setup will remove the previous VirusScan version, but will not preserve any previous VShield scanner settings. 6. Select Preserve On Access Settings, if the option is available, then click Next> to continue. If Setup finds incompatible software, it will display the Incompatible software panel wizard panel that gives you the option to remove the conflicting software.
Installing VirusScan Software NOTE: McAfee strongly recommends that you remove incompatible software. Because most anti-virus software operates at a very low level within your system, two anti-virus programs that compete for access to the same files or that perform critical operations can make your system very unstable. If your computer runs Windows NT Workstation v4.0 or Windows 2000 Professional, Setup next asks you which security mode you want to use to run VirusScan software on your system.
Installing VirusScan Software • Use Maximum Security. Select this option to require users to have Administrator rights to your computer in order to change any configuration options, to enable or disable any VirusScan component, or to configure and run scheduled tasks. Users who do not have administrative rights may still configure and run their own scan operations with the VirusScan application and save settings for those operations in a .
Installing VirusScan Software • Custom Installation. This option allows you to customized McAfee VirusScan by only selecting specific features of the product to be installed on your computer. 10. Choose the option you prefer, then click Next> to continue. If you chose Custom Setup, you’ll see the corresponding panel. Otherwise, skip to Step 13 on page 21 to continue with your installation. Figure 2-6. Custom Setup panel 11. Choose the VirusScan components you want to install.
Installing VirusScan Software NOTE: The VirusScan Setup utility does not support the other options shown in this menu. You may not install VirusScan components to run from a network, and VirusScan software has no components that you can install on an as-needed basis. You can also specify a different disk and destination directory for the installation. Click Change, then locate the drive or directory you want to use in the dialog box that appears.
Installing VirusScan Software Figure 2-8. VirusScan Configuration panel 14. From the VirusScan Configuration panel (Figure 2-8), you can skip configuration to finish your installation, or you can select to configure the available options displayed. • Scan boot record at startup. Select this checkbox to have Setup write these lines to your Windows AUTOEXEC.BAT file: C:\PROGRA~1\COMMON~1\NETWOR~1\VIRUSS~1\40~1.XX\SCAN .
Installing VirusScan Software 15. The next set of screens will display options that will allow you to run other components of McAfee VirusScan such as running the Safe & Sound utility, the VirusScan update, and the Rescue Disk (Figure 2-9). NOTE: Safe & Sound utility will not be available when installing in Windows NT or Windows 2000. Figure 2-9. Configuration panel Choose configuration options for your installation.
Installing VirusScan Software Figure 2-10. Successful Installation panel 17. After you click Finish, the McAfee VirusScan Installer Information dialog box is displayed where you will be prompted to restart your computer (Figure 2-11). Figure 2-11. McAfee VirusScan Installer Information dialog box NOTE: If you had a previous VirusScan version installed on your computer, you must restart your system in order to start the VShield scanner. Click Yes to restart your computer.
Using the VirusScan application 3 3 Starting the VirusScan application You can start the VirusScan application in its own window, or as part of a scheduled scan task. The method you choose depends on what sort of scan operation you want to run. When you first start it, the application window opens so that you can make changes to its configuration. You must click Scan Now or Run Now in a separate step to start an actual scan operation.
Using the VirusScan application From the McAfee VirusScan main window, you can: • Start scanning immediately. Click Scan to have the application scan your system with the last configuration options you set, or with default options. The following screen (Figure 3-2) allows you to select which area of your computer you want to scan. After selecting, click Scan Now. Following through the succeeding screens to complete the task. Figure 3-2.
Using the VirusScan application Figure 3-3. VirusScan Activity Log • Open the online help file. Choose Help Topics from the Help menu to see a list of VirusScan help topics. To see a context-sensitive description of buttons, lists and other items in the VirusScan window, choose What’s this? from the Help menu, then click an item with your left mouse button after your mouse cursor changes to . • Set options.
Using the VirusScan application Figure 3-4. Options drop-down menu 2. Choose X from the File menu to quit the application. NOTE: For more information on any of features, options and tools available via the main screen, refer to the online Help or access the PDF formatted file of the User’s Guide (i.e., vscan51_userguide.pdf) included in the McAfee VirusScan CD-ROM.
Removing Infections From Your System 4 4 If you suspect you have a virus... First of all, don’t panic! Although far from harmless, most viruses that infect your machine will not destroy data, play pranks, or render your computer unusable. Even the comparatively rare viruses that do carry a destructive payload usually produce their nasty effects in response to a trigger event.
Removing Infections From Your System If VirusScan software found an infection during installation, follow these steps carefully: 1. Quit Setup immediately, then shut down your computer. Be sure to turn the power to your system off completely. Do not press CTRL+ALT+DEL or reset your computer to restart your system—some viruses can remain intact during this type of “warm” reboot. 2.
Removing Infections From Your System BOOTSCAN.EXE, the command-line scanner that comes with the Emergency Disk, will make four scanning passes to examine your hard disk boot sectors, your Master Boot Record (MBR), your system directories, program files, and other likely points of infection on all of your local computer’s hard disks. NOTE: McAfee strongly recommends that you do not interrupt the BOOTSCAN.EXE scanner as it runs its scan operation.
Removing Infections From Your System As your next step, locate and delete the infected file or files. You will need to restore any files that you delete from backup files. Be sure to check your backup files for infections also. Be sure also to use the VirusScan application at your earliest opportunity to scan your system completely in order to ensure that your system is virus-free.
5 5 Using the VShield Scanner What does the VShield scanner do? McAfee desktop anti-virus products use two general methods to protect your system. The first method, background scanning, operates continuously, watching for viruses as you use your computer for everyday tasks. In the VirusScan product, the VShield scanner performs this function. A second method allows you to initiate your own scan operations. The VirusScan application generally handles these tasks.
Using the VShield Scanner • Security. This module provides password protection for the remaining VShield modules. You can protect any or all individual module property pages and set a password to prevent unauthorized changes. NOTE: Because the VShield scanner runs continuously, you should not install or run more than one VShield scanner on the same workstation. Doing so can cause the scanners to interfere with each others' operations.
Using the VShield Scanner Browser and e-mail client support The VShield scanner works seamlessly with many of the most popular web browsers and e-mail client software available for the Windows platform. To work with your browser, the scanner requires no setup beyond what you have already done to connect your computer to the Internet. You must configure the scanner, however, to work correctly with your e-mail client software.
Using the VShield Scanner When the VShield scanner first starts, it displays an icon in the Windows system tray that indicates which of its modules are active. To learn what each icon state means, see “Understanding the VShield system tray icon states” on page 39. At first, the scanner enables only its System Scan module, which scans viruses that arrive on your system from floppy disks and other removable media, from local-area network connections, and similar areas.
Using the VShield Scanner Figure 5-1. VirusScan control panel - Components page 4. Select the Load VShield on startup checkbox at the top of the Components property page. 5. Click OK to close the control panel. Enabling the VShield scanner and its modules Once you have all VShield components installed, you can use any of four methods to enable them, in various combinations. Three methods appear here. See the VirusScan User’s Guide to learn about the fourth.
Using the VShield Scanner Depending on which combination of modules you enable, the VShield icon will display a different state. To learn what the different icon states mean, see “Understanding the VShield system tray icon states” on page 39. Method 2: Use the System Scan Status dialog box Follow these steps: 1. Double-click the VShield icon in the Windows system tray to open the System Scan Status dialog box (Figure 5-1). Figure 5-1. System Scan Status dialog box 2.
Using the VShield Scanner Figure 5-2. VShield Properties dialog box 2. For each module that you want to enable, click the corresponding icon along the left side of the dialog box, then click the Detection tab. 3. Select the Enable checkbox at the top of each page. Understanding the VShield system tray icon states The VShield scanner displays four different icon states in the Windows system tray to indicate which, if any, of its modules are active.
Using the VShield Scanner Using the VShield configuration wizard After you install VirusScan software and restart your computer, the VShield scanner loads into memory immediately and begins working with a default set of options that give you basic anti-virus protection. Unless you disable it or one of its modules—or stop it entirely—you never have to worry about starting the scanner or scheduling scan tasks for it.
Using the VShield Scanner The System Scan module will also scan files stored on floppy disks whenever you read from or write to them, or when you shut down your computer. If it finds a virus, the module will sound an alert and prompt you for a response. The module will also record its actions and summarize its current settings in a log file that you can review later. 4. To enable these functions, click Yes, then click Next>. Otherwise, click No, then click Next> to continue.
Using the VShield Scanner – Lotus cc:Mail. Select this button if you use cc:Mail versions 6.x and later, which use a proprietary Lotus protocol for sending and receiving mail. – MAPI-compliant e-mail client. Select this button if you use Microsoft Exchange or Microsoft Outlook, as your corporate e-mail system. Specify which e-mail system you use, then click Next> to continue. NOTE: If you use both types of mail systems, select both checkboxes.
Using the VShield Scanner The module will look for viruses in those files most susceptible to infection and will scan compressed files as you receive them. Otherwise, select the No, do not enable download scanning checkbox, then click Next> to continue. The next wizard panel sets options for the VShield Internet Filter module (Figure 5-6). Figure 5-6. VShield configuration wizard - Internet Filter panel 7.
Using the VShield Scanner Figure 5-7. VShield configuration wizard - summary panel 8. If the summary list accurately reflects your choices, click Finish to save your changes and return to the VShield Properties dialog box. Otherwise, click
A A Product Support Updates You will receive one free year of updates on new virus signature files. Updating the virus signature files for McAfee VirusScan on a regular schedule is essential in ensuring that all new viruses are detected for a completely protected system. To update your signature files, simply click on the UPDATE button in the McAfee VirusScan home page. Make sure that your PC is connected to the Internet as VirusScan will automatically update the files for you.
Product Support Customer service To order products or obtain product information, contact the McAfee Customer Care department at (972) 308-9960 or write to the following address: Network Associates 3965 Freedom Circle Santa Clara, CA 95054 U.S.A. If you need further assistance or have specific questions about our products, send your questions via email to the appropriate address below: • For general questions about ordering software: mcafeestore@beyond.
Product Support Telephone support numbers 30-Day Free Telephone Support 972-855-7044 Per Minute Telephone Support 1-900-225-5624 Per Incident Telephone Support ($35) 1-800-950-1165 Disclaimer: Time and telephone numbers are subject to change without prior notice.
Product Support 48 McAfee VirusScan
Download Information (License ID #: VSF500R) B B As a valued McAfee customer, we are committed to keeping your system FREE from virus infection. To protect against the newest virus threats, keep your VirusScan installation up to date! Per your McAfee Software License Agreement, you are eligible for one (1) FREE Upgrade within ninety (90) days of purchase. This document explains the different ways you can access your FREE VirusScan upgrade.
Download Information (License ID #: VSF500R) 7. If previously registered, the thank you page is displayed. To begin download of product - click on the download button. 8. If not previously registered, the McAfee Product Registration page is displayed. You will be asked to enter your Last Name, First Name, Postal Code, Country, State and a password that you make up. Press submit. Once submitted a thank you page is displayed. An access URL will be emailed automatically to email address that you have entered.
Index A using, 35, 40 to 44 America Online corporate e-mail systems, choosing in configuration wizard, 41 mail client, supported in VShield, 35 B D background scan tasks, configuring descriptions, of VirusScan program components, 5 to 10 in configuration wizard, 40 BOOTSCAN.
Index F M files MAPI (Messaging Application Programming Interface) e-mail clients infected cleaning by yourself when VirusScan cannot, 31 choosing in configuration wizard, 42 menus, shortcut use of from system tray H for VShield, 44 Help Microsoft opening from VirusScan Classic and VirusScan Advanced, 27 Exchange, Outlook and Outlook Express, as e-mail clients supported in VShield, 35 Help Topics Internet Explorer in Help menu, 27 as browser supported in VShield, 35 I infected files cleanin
Index for VirusScan, 13 setting with configuration wizard, 35, 40 to 44 System Scan module set up Q using configuration wizard, 40 Qualcomm Eudora and Eudora Pro as e-mail clients supported in VShield, 35 quick start for VShield configuration, 35, 40 to 44 U uninfected computer, use of to create Emergency Disk, 30 V R reasons to run VShield, 34 rebooting, with the Emergency Disk, 30 remover actions available when VirusScan has none, 31 responses, default, when infected by viruses, 29 restarting with
Index Properties dialog box Wizard button in, 40 reasons to run, 34 what it does, 33 W Wizard, button in VShield Properties dialog box, 40 54 McAfee VirusScan
