Release Notes for McAfee(R) Virex(R) 7.6

=============================================

- DAT Version: 4463

- Engine Version: 4.4.00

=============================================

Thank you for using Virex(R) software. This file contains important information regarding this release. We strongly recommend that you read the entire document.

_____________________________________________

WHAT'S IN THIS FILE

- About this Release

- New Feature

- Installation & System Requirements

- Virex

- Non-Windows Agent for Macintosh

- Known Issues

- Known issues with Virex

- Known Issues with Non-Windows Agent for Macintosh

- Known Issues with ePolicy Orchestrator

- ePolicy Orchestrator server features not supported by Virex

- Documentation

- Participating in the McAfee Beta Program

- Contact Information

- Copyright & Trademark Attributions

- License & Patent Information

_____________________________________________

ABOUT THIS RELEASE

Virex 7.6 is an anti-virus application that helps you keep your Apple computer free of viruses, Trojan horses and other malicious code. It scans volumes, files, and folders and provides detailed reports of what it finds. Virex 7.6 features on-demand scanning, scan and update scheduling, online help and "drag and drop" scanning. This release integrates Virex 7.6 with McAfee ePolicy Orchestrator 3.0.2 and above to provide you with a single point of control for your systems running Virex 7.6 software. In addition, you are only one click away from the comprehensive online McAfee Virus Information Library, which will keep you informed of all new virus threats. The Virex 7.6 design is based on Cocoa, the specialized Mac OS X application environment.

New FEATURE

Virex 7.6 incorporates its previous powerful features with new safeguards and tools for you to protect your computer system:

- ePolicy Orchestrator Manageability

A new feature that integrates Virex 7.6 with ePolicy Orchestrator 3.0.2 and above, enabling you to manage anti-virus policies, view reports, anti-virus events or virus activities in an enterprise environment. Using ePolicy Orchestrator you can configure Virex 7.6 on the target systems across your network; you do not need to configure them individually from the Virex Preference window.

NOTE:

You will be able to use ePolicy Orchestrator related functionality only if you have ePolicy Orchestrator server installed and configured to manage Virex 7.6. The use of ePolicy Orchestrator is optional and you can use all the functionality of Virex 7.6 as a standalone product.

_____________________________________________

INSTALLATION AND SYSTEM REQUIREMENTS

Virex

See the Virex Product Guide for complete information regarding installation and system requirements.

NOTE:

Virex 7.6 installs on released version of Mac OS X v10.2.6 or later. Virex 7.6 does not support any versions Mac OS X 10.4.

Before you install Virex, make sure your operating system is up-to-date and the previous version of Virex is uninstalled. If you have a previous Virex version installed on you computer, the Virex 7.6 Installer displays a message and aborts its installation.

To uninstall the previous version of Virex, use that version’s uninstaller. Do not uninstall Virex using another Virex version’s uninstaller.

Virex 7.6 requires the BSD subsystem to be installed in order to function correctly. The BSD subsystem is installed by default as part of Mac OS X, but you can choose not to install it. If you have installed Mac OS X without the BSD subsystem, insert the Mac OS X CD and install the BSD subsystem before continuing.

Virex installation would halt if you had previously installed Norton or Sophos Anti-Virus product on your Mac OS X machine. Even after you have uninstalled Norton or Sophos, there may be some files existing on your system that could cause Virex installation problems.

In case you face the above problem, please remove the following files (if they exist) before proceeding with the Virex 7.6 installation:

a. SAVI.framework

(Path: /Library/Frameworks/SAVI.framework)

b. NAVLibX

(Path: /Library/Application Support/Norton Solutions Support/Norton Antivirus/Engine/NAVLibX)

c. NAVLibX.bundle

(Path: /Library/Application Support/Norton Solutions Support/Norton AntiVirus/Engine/NAVLibX.bundle)

Non-Windows Agent for Macintosh

The Non-Windows agent can be installed on Mac OS X v10.2.6 or later.

- See the Non Windows Agent ReadMe for information on installing the agent.

_____________________________________________

KNOWN ISSUES

Known issues with Virex

1. If you have (or had) the Virex 7.5.0 Beta 1 product installed on your system, you must remove the following files BEFORE you install the Virex 7.6:

/Library/Preferences/com.nai.virex75.prefs.plist

/Users/[username]/Library/Preferences/com.nai.virex75.plist

NOTE:

The first file stores your scanner settings and the second PLIST file stores the Virex application’s GUI settings.

2. When you scan mounted volumes, you are occasionally unable to eject the media. This is because the scan is accessing files on the media. To eject the media, first "Cancel" the scan in progress then eject the media.

3. Be aware that the action buttons in the Virex Reporter apply to ALL the listed items. There are occasions when the Virex Reporter may contain a number of items that have been found by different scanners, so if you click "Move To Trash", you might be deleting something accidentally. For example, if the Active Scanner is set to "Clean" and the Background Scanner is set to "Notify", the Virex Reporter could contain an assortment of items found by those scanners, which either have been cleaned or remain potentially infected.

4. The "Scan contents of archives and compressed files" option in the Preferences dialog box configures the selected scanner to scan into archives and other compressed files. This option is on by default for the Background and On-demand scanners. Virex 7.6 will NOT delete infected StuffIt archive files. This allows you to manually delete the infected file(s) from the StuffIt archive rather than allowing Virex 7.6 to delete the archive.

5. When you reboot your system after a new Virex 7.6 installation. You may experience a slow restart as Virex 7.6 configures itself up during reboot, this may take several minutes depending on your system resources.

6. The Virex Scheduler will launch the task only if the relevant user is in the foreground. Be aware that the task will not occur if the user is either in the background (fast-user switching in Panther) or logged out.

7. We recommend that you do not use Virex 7.6 in a Console user environment because it might cause a reduction in system performance.

8. You may run into compatibility issues with some third party applications, due to race condition between Active Scanner and the application.

The workaround for this situation:

- Exclude the temporary directory used by the third party application from scanning by including it in your “Exclusions”.

EXAMPLE:

If you run into compatibility issues with Adobe Distiller, exclude the directory /private/tmp.

- Disable Active Scanner when using the third party application. Enable the Active Scanner after using the third party application to ensure your system is under constant protection.

EXAMPLE:

If you run into compatibility issues with Content Barrier application with Active Scanner enabled when you try to connect to a VNC server through a VNC Viewer.

NOTE:

A race condition is an undesirable situation that occurs when different processes attempt to access a file at the same time.

9. Under some situations a kernel panic is reported when a Windows computer is connected to a Macintosh client computer using Samba Server Services.

10. Zinio downloader does not respond when Active Scanner is enabled.

11. Virex eUpdate does not connect through a proxy server.

12. When Virex is running with Active Scanning enabled, you may experience some problems with NFS.

13. Scan tasks deployed from the ePolicy Orchestrator Server would fail to complete under the following conditions:

a. Scanning a folder that contains Japanese characters in the file path of an infected StuffIt archive.

b. If the scan path of the ePolicy Orchestrator scan task setting contains a percentage "%" character.

Known issues with Non-Windows Agent for Macintosh

1. If you install Non-Windows Agent using the Command Line (Silent installation), restart your system to ensure Non-Windows Agent work properly.

Known issues with EPOlicy orchestrator

1. Scan Mounted Volume/Active/Background scanner may report multiple events to the ePolicy Orchestrator server for the same infected file scanned. Hence the ePolicy Orchestrator report may show incorrect number of virus infections detected by Virex 7.6.

2. When you delete the Virex node from the ePolicy Orchestrator console tree, do not select "Uninstall agent from all connected computers" in the "Delete confirmation" message box. Virex node will not appear again in ePolicy Orchestrator console tree, if you delete a Virex node with "Uninstall agent from all connected computers" checked.

3. In ePolicy Orchestrator version 3.0.2, you must manually register VIREX.DLL to store configuration information in the Windows Registry after you check in the Virex 7.6 NAP files. To register VIREX.DLL run the following command:

regsvr32 /v "C:\Program Files\Network Associates\ePO\3.0.1\DB\Data\VIREX___7600\virex.dll"

4. When you check-in the NAP file on the existing NAP installation, events generated are stopped from being stored on the ePolicy server.

The workaround for this situation:

a. Restart all the ePolicy Orchestrator server services.

b. Delete old Virex.dll from the server side.

(Path: C:\Program Files\Network Associates\ePO\3.0.1\DB\Data\VIREX___7600\

virex.dll)

c. Check-in the NAP files again.

5. The removed exclusions continue to remain under the Virex 7.6 Properties tab. These get refreshed when you create new exclusions.

6. Engine information in the Virex Properties tab of the ePolicy Orchestrator console may differ with that of the Virex application on the client computer.

To avoid Engine information mismatch:

- Create a scheduled recurring eUpdate task to ensure that the Engine information at the client and server is up-to-date.

- Close Virex application when not in use.

_____________________________________________

ePOLICY ORCHESTRATOR SERVER FEATURES NOT SUPPORTED BY VIREX

1. Task scheduler

The Scheduled Task Type options "At Logon", "when idle" and "run on dialup" are not supported by Virex.

In the Task Scheduler, the "Stop the task if it runs for <specified hours or mins>" scheduled settings option does not work.

2. Install/Uninstall using ePolicy Orchestrator server.

- You cannot deploy Virex 7.6 using the ePolicy Orchestrator server.

- You cannot uninstall Virex 7.6 ePolicy Orchestrator Agent using the ePolicy Orchestrator server.

3. Reports

- System compliance profiler reports are not supported.

4. You cannot use the ePolicy Orchestrator “Source Repository” to download DAT files from Virex eUpdate web site to update the client machines"

_____________________________________________

DOCUMENTATION

This product includes a documentation set that consists of manuals saved in Adobe Acrobat Portable Document Format (.PDF) and an online help system.

You can download a free copy of the latest version of Acrobat Reader from the Adobe web site:

www.adobe.com/prodindex/acrobat/readstep.html

This product includes the following documentation set:

- This ReadMe file. This file describes the product features, last-minute additions or changes to the documentation, lists any known behavior or other issues with the product release, and describes the installation process.

- Virex application online help. A help file, accessed from within the software application, provides quick access to concepts, definitions, and procedures for using the software.

- Virex Product Guide. Introduces the product, describes product features, and provides detailed instructions for installing and configuring the software, ongoing operation and maintenance.

- Virex Configuration Guide (for use with ePolicy Orchestrator). This file is available in ePolicy Orchestrator Server package. Introduces ePolicy Orchestrator manageability features for Virex, and provides detailed instructions for installing, configuring and managing Virex in an enterprise environment.

- Non Windows Agent ReadMe file for Macintosh. This file is available in the ePolicy Orchestrator Client package. This file describes the agent features, lists any known behavior or other issues with the product release, and describes the installation process.

- A LICENSE Agreement. This outlines the terms under which you may use the product. Read it carefully. If you install the product, you agree to the license terms.

__________________________________________________________

PARTICIPATING IN THE MCAFEE BETA PROGRAM

To download new beta software or to read about the latest beta information, visit the McAfee beta web site located at:

http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm

To submit beta feedback on Virex 7.6 product, send e-mail to:

virex_beta@mcafee.com

McAfee is devoted to providing solutions based on your input.

__________________________________________________________

CONTACT INFORMATION

Technical Support

Home Page

http://www.mcafeesecurity.com/us/support/

KnowledgeBase Search

https://knowledgemap.mcafeesecurity.com/phpclient/homepage.aspx

PrimeSupport Service Portal

https://mysupport.mcafeesecurity.com

Security Headquarters: AVERT

(Anti-Virus & Vulnerability Emergency Response Team)

Home Page

http://www.mcafeesecurity.com/us/security/home.asp

Virus Information Library

http://vil.mcafeesecurity.com/

AVERT WebImmune & Submit a Virus Sample

https://www.webimmune.net/default.asp

AVERT DAT Notification Service

http://vil.mcafeesecurity.com/vil/join-DAT-list.asp

Download Site

Home Page

http://www.mcafeesecurity.com/us/downloads/

DAT File and Engine Updates

http://www.mcafeesecurity.com/us/downloads/updates/

ftp://ftp.mcafeesecurity.com/pub/antivirus/datfiles/4.x

Product Upgrades

https://secure.nai.com/us/forms/downloads/upgrades/login.asp

Valid grant number required.

Contact Customer Service

Training

On-Site Training

http://www.mcafeesecurity.com/us/services/security/home.htm

McAfee University

http://www.mcafeesecurity.com/us/services/education/mcafee/university.htm

Customer Service

US, Canada, and Latin America toll-free:

Phone: +1-888-VIRUS NO or +1-888-847-8766
Monday-Friday, 8am-8pm, Central Time

E-mail:

https://secure.mcafeesecurity.com/us/forms/support/request_form.asp

Web:

http://www.mcafee.com/us/default.asp

http://www.mcafeesecurity.com/us/support/default.asp

For additional contact information (including addresses and toll-free numbers for worldwide offices), see the CONTACT file that accompanied your original product release.

_____________________________________________________

Copyright (C) 2004-2005 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the McAfee department at: 5000 Headquarters Drive, Plano, Texas 75024, or call +1-972-963-8000.

TRADEMARKS

Active Firewall, Active Security, ActiveSecurity (and in Katakana), ActiveShield, AntiVirus Anyware and design, Clean-Up, Design (Stylized E), Design (Stylized N), Entercept, Enterprise SecureCast, Enterprise SecureCast (and in Katakana), ePolicy Orchestrator, First Aid, ForceField, GMT, GroupShield, GroupShield (and in Katakana), Guard Dog, HomeGuard, Hunter, IntruShield, Intrusion Prevention Through Innovation, M and Design, McAfee, McAfee (and in Katakana), McAfee and Design, McAfee.com, McAfee VirusScan, NA Network Associates, Net Tools, Net Tools (and in Katakana), NetCrypto, NetOctopus, NetScan, NetShield, Network Associates, Network Associates Colliseum, NetXray, NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport, RingFence, Router PM, SecureCast, SecureSelect, SpamKiller, Stalker, ThreatScan, TIS, TMEG, Total Virus Defense, Trusted Mail, Uninstaller, Virex, Virus Forum, Viruscan, Virusscan, Virusscan (And In Katakana), Webscan, Webshield, Webshield (And In Katakana), Webstalker, WebWall, What’s The State Of Your IDS?, Who’s Watching Your Network, Your E-Business Defender, Your Network. Our Business. are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. Red in connection with security is distinctive of McAfee(R) brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

_____________________________________________________

LICENSE & PATENT INFORMATION

License Agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.

License Attributions

This product includes or may include:

* Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). * Cryptographic software written by Eric A. Young and software written by Tim J. Hudson. * Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar Free Software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the source code. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the source code also be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that Network Associates provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein. * Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer. * Software originally written by Robert Nordier, Copyright (C) 1996-7 Robert Nordier. * Software written by Douglas W. Sauder. * Software developed by the Apache Software Foundation (http://www.apache.org/). A copy of the license agreement for this software can be found at www.apache.org/licenses/LICENSE-2.0.txt.
* International Components for Unicode (“ICU”) Copyright (C) 1995-2002 International Business Machines Corporation and others. * Software developed by CrystalClear Software, Inc., Copyright (C) 2000 CrystalClear Software, Inc. * FEAD(R) Optimizer(R) technology, Copyright Netopsystems AG, Berlin, Germany. * Outside In(R) Viewer Technology (C) 1992-2001 Stellent Chicago, Inc. and/or Outside In(R) HTML Export, (C) 2001 Stellent Chicago, Inc. * Software copyrighted by Thai Open Source Software Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000. * Software copyrighted by Expat maintainers. * Software copyrighted by The Regents of the University of California, (C) 1989. * Software copyrighted by Gunnar Ritter. * Software copyrighted by Sun Microsystems(R), Inc. (C) 2003. * Software copyrighted by Gisle Aas. (C) 1995-2003. * Software copyrighted by Michael A. Chase, (C) 1999-2000. * Software copyrighted by Neil Winton, (C) 1995-1996. * Software copyrighted by RSA Data Security, Inc., (C) 1990-1992. * Software copyrighted by Sean M. Burke, (C) 1999, 2000. * Software copyrighted by Martijn Koster, (C) 1995. * Software copyrighted by Brad Appleton, (C) 1996-1999. * Software copyrighted by Michael G. Schwern, (C) 2001. * Software copyrighted by Graham Barr, (C) 1998. * Software copyrighted by Larry Wall and Clark Cooper, (C) 1998-2000. * Software copyrighted by Frodo Looijaard, (C) 1997. * Software copyrighted by the Python Software Foundation, Copyright (C) 2001, 2002, 2003. A copy of the license agreement for this software can be found at www.python.org. * Software copyrighted by Beman Dawes, (C) 1994-1999, 2002. * Software written by Andrew Lumsdaine, Lie-Quan Lee, Jeremy G. Siek (C) 1997-2000 University of Notre Dame. * Software copyrighted by Simone Bordet & Marco Cravero, (C) 2002. * Software copyrighted by Stephen Purcell, (C) 2001. * Software developed by the Indiana University Extreme! Lab http://www.extreme.indiana.edu/). * Software copyrighted by International Business Machines Corporation and others, (C) 1995-2003. * Software developed by the University of California, Berkeley and its contributors. * Software developed by Ralf S. Engelschall <rse@engelschall.com> for use in the mod_ssl project (http://www.modssl.org/). * Software copyrighted by Kevlin Henney, (C) 2000-2002. * Software copyrighted by Peter Dimov and Multi Media Ltd. (C) 2001, 2002. * Software copyrighted by David Abrahams, (C) 2001, 2002. See http://www.boost.org/libs/bind/ bind.html for documentation. * Software copyrighted by Steve Cleary, Beman Dawes, Howard Hinnant & John Maddock, (C) 2000. * Software copyrighted by Boost.org, (C) 1999-2002. * Software copyrighted by Nicolai M. Josuttis, (C) 1999. * Software copyrighted by Jeremy Siek, (C) 1999-2001. * Software copyrighted by Daryle Walker, (C) 2001. * Software copyrighted by Chuck Allison and Jeremy Siek, (C) 2001, 2002. * Software copyrighted by Samuel Krempp, (C) 2001. See http://www.boost.org for updates, documentation, and revision history. * Software copyrighted by Doug Gregor (gregod@cs.rpi.edu), (C) 2001, 2002. * Software copyrighted by Cadenza New Zealand Ltd., (C) 2000. * Software copyrighted by Jens Maurer, (C) 2000, 2001. * Software copyrighted by Jaakko Järvi (jaakko.jarvi@cs.utu.fi), (C) 1999, 2000. * Software copyrighted by Ronald Garcia, (C) 2002. * Software copyrighted by David Abrahams, Jeremy Siek, and Daryle Walker, (C) 1999-2001. * Software copyrighted by Stephen Cleary (shammah@voyager.net), (C) 2000. * Software copyrighted by Housemarque Oy
<http:// www.housemarque.com>, (C) 2001. * Software copyrighted by Paul Moore, (C) 1999. * Software copyrighted by Dr. John Maddock, (C) 1998-2002. * Software copyrighted by Greg Colvin and Beman Dawes, (C) 1998, 1999. * Software copyrighted by Peter Dimov, (C) 2001, 2002. * Software copyrighted by Jeremy Siek and John R. Bandela, (C) 2001. * Software copyrighted by Joerg Walter and Mathias Koch, (C) 2000-2002.

PATENTS

Protected by US Patents 6,006,035; 6,029,256; 6,035,423; 6,151,643; 6,230,288; 6,266,811; 6,269,456; 6,457,076; 6,496,875; 6,542,943; 6,594,686; 6,611,925; 6,622,150; 6,668,289

DBN 005-EN

V3.1.1