      What's New in VirusScan for DOS v2.5.2 (9609)
         Copyright 1994-1996 by McAfee, Inc.
                All Rights Reserved.


Thank you for using McAfee's VirusScan for DOS.
This What's New file contains important information 
regarding the current version of this product. 
It is highly recommended that you read the 
entire document.

McAfee welcomes your comments and suggestions. 
Please use the information provided in this file 
to contact us.

___________________
WHAT'S IN THIS FILE

- New Features
- Known Issues
- Installation
- Documentation
- Frequently Asked Questions
- Contact McAfee

____________
NEW FEATURES

* ENHANCEMENTS *

1.  VirusScan is now able to decrypt execute-only macros.
    As a result, macro viruses that are distributed in
    source form and recompiled can be detected.

2.  More polymorphic detectors have been added and
    polymorphic detection has been refined.

3.  VirusScan 2.5.2 includes increased detection capability 
    for finding viruses in memory. 

4.  VirusScan 2.5.2 provides more information about sporatic
    false identification.


* NEW VIRUSES DETECTED *
  
This DAT file (9609) detects the following 68 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.

_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE
ARCV.255 
ARCV.679
ARCV.745
ASH.743
BEDA.1530
BEER.2620
BEER.3164.B
BEER.3192.B
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
BW-525
CASTELLO.3742           Spain
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DELWIN.1199
DIETZEL:DE (*)
DODGER
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
JERUSALEM.BUPT.1220
JERUSALEM.BUPT.1279
JERUSALEM.BUPT.1367
KABOUT.1804 (*)
KARNAVALI.1972          Europe
KDG
KITTY
LAMEGO.729              Portugal
LIBERTY.2857.D
LITTLEPEST.4243 (*)
MANNEQUIN
MANZON.1404             Europe
MENDOZA.3380            Spain
MSU.297
NECROS.1164.A
NECROS.1164.B
PHALCON.1117
PINDONGA.B
PS-MPC.578.C
PS-MPC.611.J
PS-MPC.753
PS-MPC.AOS
PULCE.1840 
RADYUM.509
RAHACK.936              Netherlands
RDA FIGHTER.5871
RIOT.ETERNITY.565
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SCREAMING_FIST.709
SIRIUS.ALIVE.4608
TANPRO.749
TEQUILA.2468
TURNER.3276
TV
V3.1765
VACSINA.1206.A
VERWOLF
VICTOR.2442.A
(*) Requires DOS/Win 2.5.2 engine

  
* NEW VIRUSES REMOVED *

This DAT file (9609) removes the following 38 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.

_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE                England
ARCV.255
ARCV.657
ARCV.679
ARCV.745
ASH.743
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DIETZEL:DE (*)
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
LAMEGO.729              Portugal
LITTLE_BROTHER          Germany
NO_FRILL.835            Australia
PS-MPC.611.J
PS-MPC.753
RAHACK.936              Netherlands
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SHELL.10634             Internet
TANPRO.524
TANPRO.749
TEQUILA.2468
TV
V3.1765
VICTOR.2442.A
ZYX                     Europe
(*) Requires DOS/Win 2.5.2 engine

____________
KNOWN ISSUES

When a macro virus is detected in conjuction with 
other viruses, the macro virus remover will not work. 
If this occurs, remove the other virus first or work
in a separate area.

____________
INSTALLATION

* INSTALLING THE PRODUCT *

Perform one of the following installation procedures
depending on which version of VirusScan for DOS you
want to install.

1.  For the installable version of VirusScan for DOS,
    take the following steps:

    a.  Execute the INSTALL.BAT program.
    b.  Follow the on-screen instructions.

    By default, McAfee's installation program makes 
    a directory on the hard disk drive named
    C:\MCAFEE\VIRUSCAN and copies the program files
    to that directory.

    The installation script adds the directory
    to the path statement in your AUTOEXEC.BAT file
    and adds two lines that call and recall the
    VShield program to provide on-access virus
    prevention. For the most complete virus protection,
    McAfee recommends using the /ANYACCESS switch.

    or  

2.  For the non-installable version of VirusScan for
    DOS, take the following steps:

    a.  Make a directory on your hard disk drive.
    b.  Copy the files to that directory.
    c.  Add that directory to the path statement in
        your AUTOEXEC.BAT file.
                              
If you would like to perform a "silent" installation
of VirusScan for DOS, requiring no user interaction
and using all default settings, add -s (i.e. SETUP.EXE -s)
to the setup command when you install the product. 

* PRIMARY PROGRAM FILES FOR VIRUSSCAN FOR DOS *

Files located in the Install directory:
=======================================

        SCAN.EXE = VirusScan for DOS program
      README.1ST = McAfee information
     PACKING.LST = Packing list
    VALIDATE.EXE = Authenticity validation program
        SCAN.DAT = Virus scan definition data
       NAMES.DAT = Virus names definition data
       CLEAN.DAT = Virus clean definition data
    WHATSNEW.TXT = What's New document
      AGENTS.TXT = McAfee Authorized Agents


* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined effort 
by anti-virus vendors throughout the world to come up 
with one standard by which customers can verify their 
anti-virus installations.

To test your installation, copy the following line into its
own file and name it EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

When done, you will have a 69- or 70-byte file.

When VirusScan is applied to this file, SCAN will report 
finding the EICAR-STANDARD-AV-TEST-FILE virus.

It is important to know that THIS IS NOT A VIRUS. However,
users often have the need to test that their installations 
function correctly. The anti-virus industry, through the 
European Institute for Computer Antivirus Research, has 
adopted this standard to facilitate this need.

Please delete the file when installation testing is 
completed so unsuspecting users are not unnecessarily 
alarmed.


* UNINSTALLING THE PRODUCT * 
 
1.  Execute VSHIELD/REMOVE to remove VShield from
    memory, then remove the files from your hard
    drive and remove any lines in your AUTOEXEC.BAT
    file that call VShield. If an error message is
    displayed indicating that VShield could not be
    removed from memory, take the following step. 
        
2.  Edit your AUTOEXEC.BAT file and remove the line
    that calls VShield, then reboot your system. On
    restarting your system, VShield will not be loaded
    into memory and you can remove the files from your
    hard drive.

    Note: If the files are removed from your hard drive
    prior to removing VShield from memory, an error
    message will be displayed until you remove
    VShield from memory or restart your system.

_____________
DOCUMENTATION

For more information, refer to the VirusScan User's Guide,
included on the CD-ROM versions of this program or
available from McAfee's BBS and FTP site. This file is
in Adobe Acrobat Portable Document Format (.PDF) and can
be viewed using Adobe Acrobat Reader. This form of
electronic documentation includes hypertext links and
easy navigation to assist you in finding answers to
questions about your McAfee product.

Adobe Acrobat Reader is available on CD-ROM in the ACROREAD
subdirectory. Adobe Acrobat Reader also can be downloaded 
from the World Wide Web at:

http://www.adobe.com/Acrobat/readstep.html

VirusScan documentation can be downloaded from McAfee's BBS
or the World Wide Web at:

http://www.McAfee.com or http://205.227.129.97

For more information on viruses and virus prevention,
see the McAfee Virus Information Library, included on the
CD-ROM version of this product or available from McAfee's
BBS and FTP site. A ViaGrafix Interactive Anti-virus
Training program also is available on the CD-ROM version,
or can be purchased from the McAfee Web Site. 

__________________________
FREQUENTLY ASKED QUESTIONS 

Regularly updated lists of frequently asked questions 
about McAfee products also are available on McAfee's 
BBS, website, and CompuServe and AOL forums.

Q:  How much conventional memory is required to run 
    VirusScan for DOS?

A:  A minimum of 490K of free coventional memory is
    recommended to run VirusScan for DOS.


Q:  What is the difference between the VShield DOS TSR
    and VirusScan for DOS?

A: #1  VShield installs itself in memory and stays
       resident in order to monitor your system for
       viral activity. If an infected program is
       executed or an infected boot sector is accessed,
       VShield will display a warning that a virus
       is present.

A: #2  VirusScan for DOS is an on-demand scanner that
       allows you to perform a complete or partial
       scan of your computer at any time. VirusScan
       for DOS can run customized scans through a
       large set of command line switches.

 
Q:  How can I run VirusScan for DOS from a Netware login
    script without running out of memory?

A:  If you are having memory problems when trying to
    run VirusScan for DOS from a NetWare login script,
    take these steps to resolve the issue:

    1.  Rename LOGIN.EXE to LOGIN1.EXE and remove
        any references to VirusScan.
    2.  Create a batch file named LOGIN.BAT.
    3.  On the first line of the batch file, run your
        scan with whatever switches you want to include.
    4.  On the second line of the batch file, run
        LOGIN1.EXE.
 
    By taking these steps, you eliminate the problem
    of having LOGIN.EXE and SCAN.EXE in memory at the
    same time. This allows VirusScan for DOS to run and
    your login script to be processed without problems.


Q:  Can I clean the Master Boot Record (MBR) of a
    Windows NT file system (NTFS) formatted hard drive?

A:  Yes. Take these steps to clean the MBR. Boot the
    Windows NT computer from a virus-free DOS bootable
    (system) diskette. Then run VirusScan for DOS;
    SCAN C: /BOOT /CLEAN. This will clean the NTFS
    Master Boot Sector and allow Windows NT to
    successfully reboot from the hard disk drive.
    However, VirusScan for DOS will not be able to read
    the rest of the NTFS partition.

    After starting Windows NT, execute VirusScan for
    Windows NT to detect and clean Windows NT file
    infections.


Q:  Can I update VirusScan's data files to detect
    new viruses?

A:  Yes. If your data files are dangerously out-of-date,
    VirusScan for DOS will prompt you to update them.
    If you have Internet access, you can download
    updated VirusScan data files from the McAfee Web 
    Site, BBS, or other online resources. To download 
    from the McAfee Web Site, follow these steps:

    1.  Go to the McAfee Web Site (http://www.mcafee.com
        or http://205.227.129.97).

    2.  Click on the Download McAfee button in the upper
        left hand column or frame.

    3.  Click Get that DAT! to update DAT files. 

    4.  View the information provided on new DAT files
        and downloading.

    5.  Click on Download this Month's DAT.
   
    6.  Data file updates are stored in a compressed form 
        to reduce transmission time. Unzip the files into
        a temporary directory, then copy the files to the
        appropriate directory, replacing your old files.    

    7.  Before performing any scans, shut down your
        computer, wait a few seconds, and turn it on again.

    If you need additional assistance with downloading, 
    contact McAfee Download Support at (408) 988-3832.

______________
CONTACT McAFEE

* FOR QUESTIONS, ORDERS, PROBLEMS, or COMMENTS *

Contact McAfee's Customer Care department: 

1.  Call (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time              
						    
2.  Fax (408) 970-9727
    24-hour, Group III Fax 
		
3.  Fax-back automated response system (408) 988-3034
    24-hour fax

Send correspondence to any of the following McAfee locations:
	
    McAfee Corporate Headquarters		
    2710 Walsh Avenue			
    Santa Clara, CA 95051-0963		
	
    McAfee East Coast Office					
    Jerral West Center
    766 Shrewsbury Avenue
    Tinton Falls, NJ 07724-3298

    McAfee Central Office			
    5944 Luther Lane, Suite 117		
    Dallas, TX 75225				
						
    McAfee Canada
    178 Main Street
    Unionville, Ontario
    Canada L2R 2G9

    McAfee Europe B.V.			
    Orlyplein 81 - Busitel 1		
    1043 DS Amsterdam				
    The Netherlands

    McAfee (UK) Ltd.
    Hayley House, London Road
    Bracknell, Berkshire  RG12 2th 		
    United Kingdom

    McAfee France S.A.			
    50 rue de Londres				
    75008 Paris					
    France					
				
    McAfee Deutschland GmbH
    Industriestrasse 1
    D-82110 Germering
    Germany

Or, you can receive online assistance through any 
of the following resources:

1.  Bulletin Board System: (408) 988-4004  
    24-hour US Robotics HST DS

2.  Internet e-mail: support@mcafee.com

3.  Internet FTP: ftp.mcafee.com or 205.227.129.134

4.  World Wide Web: http://www.mcafee.com
    or http://205.227.129.97

5.  America Online: keyword MCAFEE

6.  CompuServe: GO MCAFEE

7.  The Microsoft Network: GO MCAFEE

Before contacting McAfee, please make note of the following 
information. When sending correspondence, please include 
the same details.

- Program name and version number
- Type and brand of your computer, hard drive, and any 
  peripherals
- Operating system type and version
- Network name, operating system, and version
- Contents of your AUTOEXEC.BAT, CONFIG.SYS, and 
  system LOGIN script
- Microsoft service pack, where applicable
- Network card installed, where applicable
- Modem manufacturer, model, and baud, where 
  applicable
- Relevant browsers/applications and version number,
  where applicable

- Problem
- Specific scenario where problem occurs
- Conditions required to reproduce problem
- Statement of whether problem is reproducible on demand

- Your contact information: voice, fax, and e-mail

Other general feedback is also appreciated.


* FOR ON-SITE TRAINING INFORMATION *

Contact McAfee Customer Service (800) 338-8754.


* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use McAfee's
products, we have established an Agents program to 
provide service, sales, and support for our products 
worldwide. For a listing of agents, see the file 
AGENTS.TXT, where applicable, or contact McAfee
Customer Service for agents near you.
