![]() |
![]() |
![]() |
![]() |
![]() |
||
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() |
![]() |
![]() README FIRST! Command AntiVirus for NT Workstation
README FIRST! Command AntiVirus for Windows NT(r) Workstation Command Software is proud to introduce Command AntiVirus Version 4.64.0 with HoloCheck(tm) scanning technology. Our HoloCheck scanning technology detects tens of thousands of viruses and includes improved polymorphic virus detection. NOTE: After installing Command AntiVirus, we recommend that you perform a manual scan of your local drives to ensure that your system is virus-free. This is especially important if you have not been running anti-virus software prior to this installation. For a list of international distributors of Command AntiVirus, see the DISTRIB.TXT file. The file called FILEINFO.TXT is a list of file descriptions and files that have changed since the previous release. Please read the Multi-Platform Quick Start Guide that is included with the installation files. It provides installation instructions and an overview of Command AntiVirus for all platforms. The MQCKST.PDF file contains the Multi-Platform Quick Start Guide. This file can be read with the Adobe(r) Acrobat(r) Reader that is included on the Command AntiVirus CD. For instructions on how to install Acrobat Reader, see the README.TXT file that is located in the ADOBE folder on the CD. Acrobat Reader is not included with the downloadable versions of Command AntiVirus. You can download Acrobat Reader from Adobe Systems Incorporated through our web site at http://www.commandsoftware.com/service/tc-viewutil.html. A Release Notes section is provided for each release. It contains the following topics: * Special Notes - contains important pre- and post-installation information that pertains to the release. * Product Enhancements - contains information about new virus signatures, scan engine improvements, and new features. * Fixes - contains updated information on previously reported problems that have been fixed. _______________________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.64.0 13 November 2001 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.64.0 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.64.0 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.64.0, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. PRODUCT ENHANCEMENTS * Dynamic Virus Protection (DVP) reporting has been improved. When a virus is found through DVP, the system displays a scrollable DVP reporting dialog box. This dialog box contains the location and name of the infected file, the type of the infection found, and the action that was taken. Information continues to be added to the log as additional viruses are found. This information remains logged even after you close the dialog box by clicking the OK button. To clear the log, you MUST click the CLEAR button. NOTE: We highly recommend that you occasionally clear this log. When the log reaches approximately 32 KB the logging of new information stops. * New virus signatures have been added in this release. FIXES * Some customers reported that when Dynamic Virus Protection (DVP) is enabled, they get a Blue Screen of Death (BSOD) during disinfection of the Sircam virus. This has been fixed. * Some customers reported that when Dynamic Virus Protection (DVP) is enabled, they get a Blue Screen of Death (BSOD) when they access Terminal Servers. This has been fixed. * Some customers reported that when MS Windows NetWare(r)Client is installed, temporary files are created repeatedly when saving a MS-Office application file from Windows NT to a NetWare server. This has been fixed. * Some customers reported high CPU consumption when Command AntiVirus is installed with Dynamic Virus Protection (DVP)enabled on a system running a non-English version of Windows. This has been fixed. CPU consumption has been returned to normal. ___________________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.62.4 03 October 2001 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.4 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.4 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.62.4, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. * All viruses previously referred to as W95/x are now named W32/x. For example, W95/[email protected] is now called W32/[email protected]. NOTE: x represents a name variable. PRODUCT ENHANCEMENTS * Scan engine enhancements have been added to this release. It is now possible to disinfect some script viruses, for example, HTML files modified by the Nimda virus. * New virus signatures have been added in this release. FIXES * Particular types of VBS files caused the scan engine to false positive. The number of false positives has been decreased in this release. _________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.62.3 28 September 2001 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.3 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.3 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.62.3, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. PRODUCT ENHANCEMENTS * None for this release. FIXES * Some customers reported getting a Blue Screen of Death (BSOD) when Dynamic Virus Protection (DVP) is turned on and they manually map NetWare drives. This has been fixed. * Some customers reported that the DOS box hangs when they execute 16-bit applications. This has been fixed. _________________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.62.2 21 September 2001 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.2 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.2 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.62.2, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: Before you manually map NetWare drives, be sure to turn off Dynamic Virus Protection (DVP). When the mapping is complete be sure to turn DVP back on. If you do not turn DVP off, you may get a Blue Screen of Death (BSOD). This will be fixed in a future commercial release. To turn off DVP, in the Command AntiVirus MAIN dialog box, click PREFERENCES, click ACTIVE PROTECTION, then clear the ENABLE DVP check box. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. PRODUCT ENHANCEMENTS * New virus signatures have been added in this release. FIXES * Some customers reported a slowdown when Command AntiVirus disinfects certain viruses. This problem occurred only during disinfection. This has been fixed. ____________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.62.0 13 September 2001 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.0 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.62.0 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.62.0, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. PRODUCT ENHANCEMENTS * Scan engine enhancements have been added to this release, for example, an ELF scanner has been added to cover Unix(r) viruses in native Unix file format. The scan engine has also been enhanced to help detect some corrupted (non-working) samples of the Magistr virus. * New virus signatures have been added in this release. FIXES * Some customers reported a problem with saving .xls files to NetWare drive with Novell Client32 installed on the workstation. This has been fixed. * It was reported that long lines caused the VBS scanner not to identify some viruses precisely. Viruses were detected, but the exact name of the virus was not given. This has been fixed. * If you are running Dynamic Virus Protection (DVP) on a Server that is accessed by remote machines, DVP may NOT prevent the spread of virus infections to the remote machines when files are accessed. This has been fixed. * When you set the Action On Infection in DVP to Rename, Delete or Quarantine, these settings MAY NOT work properly on any remote or local drive other than C: drive. In these instances, DVP MAY display an error message stating that the action cannot be completed. However, CSAV does block access to the infected file. This has been fixed. ____________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.61.5 06/21/01 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.5 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.5 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.61.5, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: If you are running Dynamic Virus Protection (DVP) on a Server that is accessed by remote machines, DVP may NOT prevent the spread of virus infections to the remote machines when files are accessed. We recommend that you enable the DVP on the remote machines to SCAN NETWORK DRIVES. This will be fixed in a future commercial release. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. * When you set the Action On Infection in DVP to Rename, Delete or Quarantine, DVP may display an erroneous error message stating that the action cannot be completed. This message is incorrect. We recommend that you confirm that a Quarantine folder does exist and that the path to this folder is specified in the Preferences/ Advanced/Quarantine Path dialog box. PRODUCT ENHANCEMENTS * New virus signatures have been added in this release. FIXES * Particular types of VBS files caused the scan engine to false positive. The number of false positives has been decreased in this release. * Some Windows Portable Executables (PE) SYS files caused the scan engine to false positive. This has been fixed. * If your AUTOMATIC UPDATE DIRECTORY is located on a machine that you are updating, you can now use Universal Naming Convention (UNC) paths to the automatic update directory. * Some customers reported that when they access locally mapped shared directories, the system freezes. This has been fixed. ____________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.61.4 05/16/01 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.4 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.4 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.61.4, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: If you are running Dynamic Virus Protection (DVP) on a Server that is accessed by remote machines, DVP may NOT prevent the spread of virus infections to the remote machines when files are accessed. We recommend that you enable the DVP on the remote machines to SCAN NETWORK DRIVES. This will be fixed in a future commercial release. * If a user is using Microsoft(r) Excel 2000 and Microsoft Client or Gateway for Novell(r) NetWare(r), Command AntiVirus will detect and disinfect infected .XLS files, but at this time, it will NOT rename or quarantine them. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. * If your AUTOMATIC UPDATE DIRECTORY is located on a machine that you are updating, do NOT use Universal Naming Convention (UNC) paths to the automatic update directory. Use ONLY local drive paths. PRODUCT ENHANCEMENTS * None for this release. FIXES * Some users reported excessive consumption of CPU time. This has been fixed. * Some users reported false positives on SYS files. This has been fixed. * Some users reported false positives on particular VBS files. This has been fixed. _______ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.61.2 03/15/01 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.2 over any Beta version of Command AntiVirus, you MUST first uninstall the Beta version. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61.2 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall Command AntiVirus for Windows NT Workstation Version 4.60 prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.61.2, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: If you are running Dynamic Virus Protection (DVP) on a Server that is accessed by remote machines, DVP may NOT prevent the spread of virus infections to the remote machines when files are accessed. We recommend that you enable the DVP on the remote machines to SCAN NETWORK DRIVES. This will be fixed in a future commercial release. * If a user is using Microsoft(r) Excel 2000 and Microsoft Client or Gateway for Novell(r) NetWare(r), Command AntiVirus will detect and disinfect infected .XLS files, but at this time, it will NOT rename or quarantine them. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. * If your AUTOMATIC UPDATE DIRECTORY is located on a machine that you are updating, do NOT use Universal Naming Convention (UNC) paths to the automatic update directory. Use ONLY local drive paths. PRODUCT ENHANCEMENTS * New virus signatures have been added in this release. * This release contains the following scan engine enhancements: - Scanning of Visio files is now supported. Heuristics scanning is now in place to help detect unknown Visio viruses. - Scanning of PIF files is now supported. PIF viruses can now be listed. - Scanning of PHP viruses is now supported. - Heuristics scanning is now in place to help detect unknown VBS viruses such as new variants of LoveLetter. - Our HoloCheck technology has been improved to detect a few new polymorphic viruses. * Increased cache. * Reduced CPU usage. FIXES * Some users experienced a problem with starting Command AntiVirus on slow computers. This has been fixed. * One customer reported a problem with running Community 2020(tm). This has been fixed. _____________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.61 02/02/01 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.61 over Command AntiVirus for Windows NT Workstation Version 4.60, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. The installation will continue after the restart. WARNING: If you choose to uninstall prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.61, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: If you are running Dynamic Virus Protection (DVP) on a Server that is accessed by remote machines, DVP may NOT prevent the spread of virus infections to the remote machines when files are accessed. We recommend that you enable the DVP on the remote machines to SCAN NETWORK DRIVES. This will be fixed in a future commercial release. * If a user is using Microsoft(r) Excel 2000 and Microsoft Client or Gateway for Novell(r) NetWare(r), Command AntiVirus will detect and disinfect infected .XLS files, but at this time, it will NOT rename or quarantine them. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. * If your AUTOMATIC UPDATE DIRECTORY is located on a machine that you are updating, do NOT use Universal Naming Convention (UNC) paths to the automatic update directory. Use ONLY local drive paths. PRODUCT ENHANCEMENTS * None for this release. FIXES * Some users reported a timeout during Automatic Update that resulted in a blue screen (BSOD). This has been fixed. * The problem of not being able to completely uninstall Command AntiVirus 4.60 has been fixed. * A problem with some corrupt RAR files causing General Protection Faults (GPFs) has been fixed. _______ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.60 01/05/01 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.60 over a previous version of Command AntiVirus, it is necessary for the installation program to perform an immediate restart of the computer. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. NOTE: If you are performing a Silent install, you will NOT be notified. The installation will continue after the restart. WARNING: If you choose to uninstall prior to running setup, we recommend that you perform the following steps. Failure to do so may result in a Blue Screen (BSOD). 1. Click the START button on the Windows task bar. 2. Select SETTINGS. 3. Click CONTROL PANEL. 4. Double-click DEVICES. 5. Select CSS DVP. 6. Click the STARTUP button. 7. Under START TYPE, select MANUAL or DISABLE. 8. Restart your computer. 9. Uninstall the previous version of Command AntiVirus. NOTE: It will take approximately three minutes to complete the uninstall. * WARNING: At the end of the installation of Version 4.60, you may be prompted to restart your computer. You MUST restart for Dynamic Virus Protection (DVP) to be upgraded properly. * WARNING: Dynamic Virus Protection (DVP) does NOT detect virus infections on remote drives. This will be fixed in a future commercial release. * If a user is using Microsoft(r) Excel 2000 and Microsoft Client or Gateway for Novell(r) NetWare(r), Command AntiVirus will detect and disinfect infected .XLS files, but at this time, it will NOT rename or quarantine them. * Command AntiVirus will NOT quarantine across different drive letters, but it will block access to the files. PRODUCT ENHANCEMENTS * This release contains scan engine enhancements that include detection for the W95/MTX.9244 virus and X97M/Jini-A1 misdisinfected viruses. * You can now use the /ARCHIVE switch to: - decode and scan messages in TNEF format - decode and scan UU-encoded messages - decompress and scan ACE files NOTE: If you are using the GUI to initiate a scan, in the PROPERTIES dialog box under FILE TYPES TO SCAN, select ZIP FILES. * The speed of scanning CAB files has been improved. * This release includes improved support for account management. * The Rescue Disk process has been updated. To create a Rescue Disk set now requires three (3) 3.5" high-density diskettes. The addition of the /LOADDEF switch allows you to perform a complete scan during recovery to detect and disinfect any virus-infected files. The rescue disk process involves two phases. The first phase focuses on recovery by detecting and removing any executable, boot sector, and MBR-infecting viruses that inhibit or prevent system startup. After successful recovery, the second phase focuses on scanning and disinfecting all remaining virus-infected files, for example, macro virus-infected files. To assure a successful rescue, you must perform both phases. To test the rescue disk set complete Steps 1 through 10 of Phase One. To use the rescue disk set, complete both Phase One and Phase Two. To perform Phase One, follow these steps: 1. Turn off your computer. 2. Place a virus-free, write-protected bootable diskette into drive A. 3. Turn on your computer. 4. If you are prompted to enter a new date and a new time, press Enter for each. 5. Remove the bootable diskette and insert Rescue Disk 1 into drive A. 6. At the A prompt, type the following: f-prot /hard /disinf /loaddef 7. Press Enter. The system prompts you to insert a diskette with SIGN.DEF. 8. Insert Rescue Disk 2 into drive A and press Enter. The system prompts you to insert a diskette with SIGN2.DEF. 9. Insert Rescue Disk 3 into drive A and press Enter. A scan of your hard drive begins immediately. If any viruses are detected, allow CSAV to disinfect them. 10. When the scan is complete, remove Rescue Disk 3 from drive A. 11. Proceed to Phase Two. To perform Phase Two, follow these steps: 1. Restart your computer as normal. 2. Use Command AntiVirus to perform a scan of your local hard drives. This scan detects and disinfects any remaining virus-infected files on your computer. After completing the Phase Two scan, you can now return to computing as normal. FIXES * The level of generated false positives for macro viruses has been reduced. * Dynamic Virus Protection was not quarantining all infected files. This has been fixed. * Viruses in Read Only files were detected by Dynamic Virus Protection (DVP). However, all other functions such as disinfect were not enabled in DVP for Read Only files. This has been fixed. * The General Protection Faults (GPF) that occasionally occurred when ACTION ON INFECTION for Dynamic Virus Protection was set to DELETE has been fixed. * Dynamic Virus Protection was not allowing access to infected files. For example, you could not delete an infected file using DELETE. This has been fixed. _____________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.59.4 07/18/00 SPECIAL NOTES * If you are installing Command AntiVirus for Windows NT Workstation Version 4.59.4 over a previous commercial version of CSAV of 4.58.3 or lower, it is necessary for the installation program to perform an immediate restart of the computer. You will NOT be given the option to restart at a later time. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. NOTE: If you are performing a Silent install, you will NOT be notified. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.59.4 over a previous 4.59 Beta version, you MUST first uninstall the previous 4.59 Beta version. * WARNING: Dynamic Virus Protection (DVP) does NOT detect virus infections on NetWare file servers. This will be fixed in a future commercial release. NOTE: If you are using Novell(r) Client for Windows NT/2000 Version 4.71, DVP MAY detect virus infections on NetWare file servers. * Dynamic Virus Protection does NOT Quarantine all infected files at this time. This will be fixed in a future commercial release. * Viruses in Read Only files will be detected by Dynamic Virus Protection (DVP). However, all other functions such as disinfect are NOT enabled in DVP for Read Only files at this time. These functions will be enabled in a future commercial release. * You MAY experience a General Protection Fault (GPF) if the ACTION ON INFECTION for Dynamic Virus Protection is set to DELETE. This will be fixed in a future commercial release. * Dynamic Virus Protection does NOT allow you to change attributes on an infected file at this time. This will be fixed in a future commercial release. PRODUCT ENHANCEMENTS * This release includes the 4.59.2.1 component update: - Dynamic Virus Protection (DVP) now scans for Master Boot Record (MRB) and Boot Sector viruses. - Enhancement to the Automatic Update process - Files that are downloaded are now monitored to verify that they are not corrupted. FIXES * None for this release. _____________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for Windows NT Workstation (CSAV) Version 4.59.2.1 component update. 07/10/00 PRODUCT ENHANCEMENTS Dynamic Virus Protection (DVP) now scans for Master Boot Record (MRB) and Boot Sector viruses. This component also contains an enhancement to the Automatic Update process - Files that are downloaded are now monitored to verify that they are not corrupted. FIXES None for this release. SPECIAL NOTES INSTALLATION This component update contains the following file: NTWcu2.EXE -- a self-extracting executable that contains the following files: - CSS-DVP.SYS - AUPDATE.DLL This component update can be installed in two ways: First, it can be installed so that it is deployed automatically to multiple computers on a network. Second, it can be manually installed on individual computers. NOTE: After installing this component update, you MUST restart the computer. NOTE: After installing the component update, we recommend that you update your Command AntiVirus virus definition files. The following sections provide instructions for each type of installation. INSTALLATION INSTRUCTIONS USING CSS CENTRAL 1. Download the component update file to the "staging directory." 2. Deploy the file to the component subdirectory of the "automatic update directory." 3. Allow Automatic Update to update the file at each login or, if the user is logged on, at a preconfigured time. For example, the default time is between 4 a.m. and 5 a.m. CAUTION: For the automatic update to work, the path to the remote setup (automatic update directory) must be set correctly at the client. This completes the CSS Central automatic installation of the component update. NOTE: After installing this component update, you MUST restart the computer. INSTALLATION INSTRUCTIONS USING AUTOMATIC UPDATE Before beginning the installation, you will need to know the following: - The location of the CSSFILES.INI file. This file is usually found in the root of the automatic update directory that you have previously set for use with Command AntiVirus' automatic update feature. - The directory path of the "BaseDir" key that is located in the [WINNT_W-AntiVir] section of the CSSFILES.INI file. - The subdirectory specified by the "Compont" key located in the [WINNT_W-AntiVir] section of the CSSFILES.INI file. If this subdirectory exists, it is always located within the directory specified by the "BaseDir" key. If a "Compont" key does not exist, you will need to manually create a directory called "Compont". You must create this directory under the BaseDir directory. Then, add the following line under the "BaseDir" listing in CSSFILES.INI: Compont=compont 1. Download the component update file to a temporary directory. 2. Go to the temporary directory containing the file. 3. Double-click the file to extract the file that is contained within it. 4. Copy the extracted file to the subdirectory referenced by the "Compont" key in the CSSFILES.INI file. 5. Allow Automatic Update to update the file at each login or if the user is logged on, at a preconfigured time. For example, the default time is between 4 a.m. and 5 a.m. CAUTION: For the automatic update to work, the path to the remote setup (automatic update directory) must be set correctly at the client. This completes the automatic installation of the component update. NOTE: After installing this component update, you MUST restart the computer. MANUAL INSTALLATION ON INDIVIDUAL COMPUTERS To install the component update on an individual computer, follow these instructions: 1. Download the component update file to a temporary directory. 2. Go to the temporary directory containing the component update file. 3. Double-click the file to extract the files that are contained within it. 4. In the system tray, right-click the yellow "C" icon and close F-Agent. 5. Close the Command AntiVirus Graphical User Interface (GUI). 6. Go to Control Panel/Services and stop CSS AV Scheduler and CSS Communication Agent. 7. Copy the extracted files from the temporary directory to your CSAV program folder, typically: C:\Program Files\Command Software\F-protNT\ Choose to overwrite the existing files. NOTE: You may want to store a copy of the original file elsewhere in case it is necessary to roll back the update. 8. Restart the computer. This completes the manual installation of the component update. _____________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for NT Workstation (CSAV) Version 4.59.2 06/20/00 SPECIAL NOTES * To install and operate Command AntiVirus for NT Workstation, you must now have at least Microsoft(r) Windows NT(r) 4.0 installed. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.59.2 over a previous commercial version of CSAV, for example, 4.58.3, it is necessary for the installation program to perform an immediate restart of the computer. You will NOT be given the option to restart at a later time. At the beginning of Setup, a dialog box displays giving you the option to cancel Setup. NOTE: If you are performing a Silent install, you will NOT be notified. * If you are installing Command AntiVirus for Windows NT Workstation Version 4.59.2 over a previous 4.59 Beta version, you MUST first uninstall the previous 4.59 Beta version. * WARNING: Dynamic Virus Protection (DVP) does NOT detect virus infections on NetWare file servers. This will be fixed in the next commercial release. * The Rename option when a virus is found through Dynamic Virus protection now renames the file with ".Infected" added to the original name. You can select the Rename option through the Preferences/Active Protection dialog box. * The Quarantine option when a virus is found through Dynamic Virus protection now renames the file with ".Quarantined" added to the original name. You can select the Quarantine option through the Preferences/Active Protection dialog box. * Command AntiVirus for Windows NT Workstation no longer supports Windows NT Version 3.51. * The viewing of scan results for scheduled scans and on-access scans is no longer available. Therefore, the Get Statistics item on the F-Agent shortcut menu has been removed. PRODUCT ENHANCEMENTS * New virus signatures have been added in this release. * The following improvements have been made to the scan engine: - Improved HTML and ASCII scanning. - CSAV now detects W95/Bolzano family viruses. - Scanning of the following is now supported: - TAR archives - RAR archives - LHA archives - CAB archives (partially supported) - GNU GZIP (.GZ files) - Self-extracting RAR files - Self-extracting LHA files FIXES * The occasional problem of receiving a General Protection Fault (GPF) when the virus definition files are updated is fixed. * Some users reported a problem with some documents falsely being reported as "could be misdisinfected virus." This has been fixed. ________ RELEASE NOTES Notes on Command AntiVirus for NT Workstation (CSAV) Version 4.58.3.1 component update 3/23/00 PRODUCT ENHANCEMENTS Scan engine enhancements have been added to this component update. They include: - Improved handling of self-extracting files and ASCII-based viruses (i.e., BAT viruses, VBS viruses). - Improved detection of HLP viruses, HTA viruses (such as BubbleBoy), and some polymorphic viruses. FIXES Some users reported problems while disinfecting International Office 97 documents and particular Excel 4-based viruses. These have been fixed. The corrupt .ZIP file that caused the scan engine to produce a General Protection Fault (GPF) has been fixed. The problem that caused the scan engine to go into an infinite loop has been fixed. SPECIAL NOTES INSTALLATION This component update contains the following file: WNT4FDCU.EXE -- a self-extracting executable that contains the following three files: CSS3RDE.DLL -- scan engine and CSAV GUI interface file CSSCAN32.DLL -- scan engine enhancements file CSS-DVP.SYS -- updated active protection file This component update can be installed in two ways: First, it can be installed so that it is deployed automatically to multiple computers on a network. Second, it can be manually installed on individual computers. The following sections provide instructions for each type of installation. INSTALLATION INSTRUCTIONS USING CSS CENTRAL 1. Download the component update file to the "staging directory." 2. Deploy the file to the component subdirectory of the "automatic update directory." 3. Allow Automatic Update to update the files at each login or, if the user is logged on, between 4 a.m. and 5 a.m. CAUTION: For the automatic update to work, the path to the remote setup (automatic update directory) must be set correctly at the client. This completes the CSS Central automatic installation of the component update. INSTALLATION INSTRUCTIONS USING AUTOMATIC UPDATE Before beginning the installation, you will need to know the following: - The location of the CSSFILES.INI file. This file is usually found in the root of the automatic update directory that you have previously set for use with Command AntiVirus' automatic update feature. - The directory path of the "BaseDir" key that is located in the [NT40_W-AntiVir] section of the CSSFILES.INI file. - The subdirectory specified by the "Compont" key located in the [NT40_W-AntiVir] section of the CSSFILES.INI file. If this subdirectory exists, it is always located within the directory specified by the "BaseDir" key. If a "Compont" key does not exist, you will need to manually create a directory called "Compont". You must create this directory under the BaseDir directory. Then, add the following line under the "BaseDir" listing in CSSFILES.INI: Compont=compont 1. Download the component update file to a temporary directory. 2. Go to the temporary directory containing the file. 3. Double-click the file to extract the files contained within it. 4. Copy the extracted files to the subdirectory referenced by the "Compont" key in the CSSFILES.INI file. 5. Allow Automatic Update to update the files at each login or if the user is logged on, between 4 a.m. and 5 a.m. CAUTION: For the automatic update to work, the path to the remote setup (automatic update directory) must be set correctly at the client. This completes the automatic installation of the component update. MANUAL INSTALLATION ON INDIVIDUAL COMPUTERS To install the component update on an individual computer, follow these instructions: 1. Download the component update file to a temporary directory. 2. Go to the temporary directory containing the component update file. 3. Double-click the file to extract the files that are contained within it. 4. Go to Control Panel/Devices and stop CSS DVP. 5. Close F-Agent. 6. Close the Command AntiVirus Graphical User Interface (GUI). 7. Go to Control Panel/Services and stop CSS AV Scheduler. 8. Copy the extracted files from the temporary directory to your CSAV program folder, typically C:\Program Files\Command Software\F-protnt\ Choose to overwrite the existing files. NOTE: You may want to store a copy of the original files elsewhere in case it is necessary to roll back the update. 9. Verify that the dates of the new files are correct. 10. Go to Control Panel/Devices and start CSS DVP. 11. Go to Control Panel/Services and start CSS AV Scheduler. 12. Restart F-Agent. This completes the manual installation of the component update. ___________ RELEASE NOTES Command AntiVirus for NT Workstation (CSAV) version 4.58.3 12/29/99 PRODUCT ENHANCEMENTS Scan engine enhancements have been added to this component release. FIXES Performance issues were reported in relation to the default scanning of self-extracting files in Command AntiVirus 4.58. In CSAV 4.58.3, self-extracting files are no longer scanned by default. However, Dynamic Virus Protection (DVP) scans the contents of the self-extracting file when the files are extracted. In addition, the .EXE portion of the self-extracting file is scanned by default. NOTE: To scan the contents of self-extracting files in zipped form, we recommend that you perform an on-demand or scheduled scan of Packed Files during off-peak hours. To scan self-extracting and packed files select the Packed Files check box in the Properties dialog box. SPECIAL NOTES None for this release. ________ Notes on Command AntiVirus for NT Workstation (CSAV) Version 4.58.0 12/06/99 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. This includes signatures for detecting more than 200 new trojans. The following improvements have been made to the scan engine: - CSAV now detects malicious or destructive Java code (Java Trojans). - The handling of script viruses is improved. This includes VBScript viruses and ASCII-based viruses. - CSAV now scans file attachments in Rich Text Format (.RTF) files. In the Command AntiVirus GUI, select the "Zip Files" option in the "Properties" dialog box. If scanning from the command line, use the /ARCHIVE switch. - CSAV now disinfects Office 2000 signed documents. - Scanning of the following is now supported: - OLE1 embedding (embedded files in WordPad and Microsoft Word 6) - WordPerfect 2000 (.WPD) files - Lotus worksheets (.WKS) files - LX (OS/2) files as well as the detection of all OS/2 viruses. - Some boot sector related disinfection problems have been fixed. The most notable fixes involve disinfecting the Urkel and the Frankenstein viruses. - PowerPoint scanning is improved and the disinfection process is revised. However, the disinfection of objects embedded in PowerPoint documents is still not possible. - CSAV features improved scanning in Windows 32-bit programs resulting in higher rates of detection and fewer false positives. - Memory scanning is improved. - Disinfection of infected .VBS files by deletion is now supported. The following file types are now hard-coded into CSAV's virus scans and are scanned by default: EXE, COM, SYS, VXD, DLL, DRV, SCR, 386, OV?, CPL, FON, TSK, ACM, ACV, TLB, TSP, OCX, VBX, VOM, VXE, OBJ, SHS, SMM, HLP, CLA, XL?, DOC, DOT, MDB, RTF, MPP, MPT, PPA, PPS, PPT, POT, WBK, PWZ, MSO, OBD, OBT, OBZ, OFT, MSG, EML, TD0, BAT, BTM, INI, INF, HT?, VBS, GMS, CSC, WPD, WK?, DVB, WBT, and CDR These file types are displayed in the Files to Include dialog box and they cannot be deleted. You can exclude any file type from scans by entering its extension into the Files to Exclude dialog box. Although the extension still appears in the Files to Include dialog box, files with that extension will not be scanned. NOTE: You can now add up to 20 user-defined file types in CSAV's Files to Include dialog box. A new virus definition file, SIGN2.DEF, is now included with Command AntiVirus. This file provides virus signatures for a variety of scripting viruses and trojans. The retrieval of downloaded CSAV files through the automatic update process has been enhanced. If the BaseDir key in the CSSFILES.INI file already exists, CSAV will attempt to use the directory path that is specified. However, if the BaseDir key does not exist, CSAV will no longer create one. If the subdirectory specified by the BaseDir key in the previous CSSFILES.INI file exists, the files are deployed to that location. If it does not exist, CSAV creates and uses the following hard-coded platform-based directories: CSAV for Windows(r) NT(r) Server 3.51 0000 CSAV for Windows NT Workstation 3.51 0100 CSAV for Windows NT Server 4.0 0200 CSAV for Windows NT Workstation 4.0 0300 CSAV for Windows 3x 0400 CSAV for Windows 95 0500 CSAV also creates separate subdirectories for the virus definition files, the update component files, and the full-product update. The definition files subdirectory ends in .0, the component files subdirectory ends in .1, and the full-product subdirectory ends in .2. The file names are generated randomly by CSAV. The following is an example of the path names to the automatic update directory and its program-generated subdirectories for a full-product update of CSAV for Windows NT Workstation 4.0: \\SERVER\SHARE\UPDATE\0300\CSS43E.2 FIXES Scheduled scans were stopping when they encountered a corrupted zip file. This sometimes produced an error message. Now, the error message is logged into Windows NT's Event Viewer and the scheduled scan continues. Some users reported that starting Command AntiVirus from the Windows system tray resulted in a message stating that the product's evaluation period had timed out. This has been fixed. The automatic update feature now updates the CSSFTP.EXE and F-AGENT.EXE files. CSAV now supports scheduled scanning when the user is logged off. Some command line scans using the /TODAY switch would not scan on the first boot of the following day. This was caused by CSAV's use of Greenwich Mean Time rather than local time. This has been fixed. SPECIAL NOTES If you are using the self-installing version of CSAV for NT Server to update the product on a Windows NT 3.51 system, you must first disable DVP. The self-extracting file called SE_EICAR.EXE is no longer included with the installation files. However, you can download this file from our web site at: http://www.commandcom.com/html/utils.html When you run this file, a test file, EICAR.COM (from European Institute for Computer Anti-Virus Research), is extracted from it. __________ Notes on Command AntiVirus for NT Workstation (CSAV) version 4.57.1 09/13/99 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. This includes the ability to detect and disinfect the Monopoly virus. A new file, NOMACRO.DEF, has been added to the installation files. This file is used in the creation of the Command AntiVirus rescue disks. NOMACRO.DEF will be updated when you download new virus definition files. FIXES The following issues regarding the NT Scheduler Service have been addressed: A. When a scheduled scan was performed, incorrect information was written to the Windows NT Event Log. This has been fixed. B. Scheduled scans would stop when a corrupt zip file was found. Now, the scan continues and the message about the corrupt file is logged in Event Viewer. C. Memory and handle leaks have been fixed. The problem of possibly deleting false positive and/or suspicious files during on-access scanning has been fixed. F-PROT32.EXE has been modified to check the installation directory and to use absolute paths. This allows F-AGENT to be launched from locations other than the Startup group. When using the Update Deffiles feature, a subdirectory structure occasionally remained in the user's TEMP directory. This has been fixed. Macro viruses that were detected through heuristics were not being disinfected when the action was set to Disinfect-Query. This has been fixed. _Setup.lib has been updated to correct the problem that occurred while using created CSS-AMGR accounts. Scan engine General Protection Faults that occurred when CSAV disinfected user macros have been fixed. Modifications have been made to the code behavior monitoring process to correct occurrences of false positives. SPECIAL NOTES The Command AntiVirus rescue disk process now involves two phases. The first phase focuses on recovery by detecting and removing any executable, boot sector, and MBR-infecting viruses that inhibit or prevent system startup. After successful recovery, the second phase focuses on scanning and disinfecting all remaining virus-infected files, for example, macro virus-infected files. To assure a successful rescue, you MUST perform both phases. NOTE: This rescue disk process applies only to Windows NT computers using the FAT file system. To perform Phase One: 1. Turn off your computer for at least 15 seconds. 2. Place a virus-free, write-protected boot disk into drive A and reboot your computer. NOTE: If you are prompted to enter a new date and a new time, press ENTER for each one. 3. Replace the boot disk with CSAV Rescue Disk 1. 4. At the A prompt, type the following and press ENTER: f-prot /hard /disinf If any viruses are detected, allow CSAV to disinfect them. 5. Proceed to Phase Two. To perform Phase Two: 1. Remove CSAV Rescue Disk 1 from drive A. 2. Reboot your computer as normal. 3. Use Command AntiVirus to perform a scan of your local hard drives. This scan detects and disinfects any remaining virus-infected files on your computer. After completing the Phase Two scan, you can return to computing as normal. _________ RELEASE NOTES Notes on Command AntiVirus for NT Workstation (CSAV) Version 4.57 07/12/99 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. Command AntiVirus now includes expanded protection for the following: A. CorelDraw -- The newly discovered CorelDraw virus is now detected. The .CSC CorelDraw-related extension is now scanned by default. B. MacOffice -- Viruses in MacOffice documents can be detected and disinfected. However, as the Macintosh(tm) operating system is not directly supported by Command AntiVirus, detection is possible only when the infected Macintosh Office documents are scanned in a DOS or Windows-based environment. For example, if you have a floppy disk with infected MacOffice documents on it, you can disinfect these documents by using CSAV to scan the floppy disk. C. Microsoft Office 97 -- The .MPT, .WBK and .MSO extensions are now scanned by default. D. Office 2000 -- The heuristics scan engine has been modified so that it now detects some native Office 2000 viruses. E. PowerPoint 97 -- PowerPoint 97 viruses are now detected and disinfected. The .PP?, .POT, and .PWZ PowerPoint 97 file types are now scanned by default. An additional generic virus detector has been added. This detector allows Command AntiVirus to detect approximately 14,000 more "generic viruses." This brings the total number of viruses detected by Command AntiVirus to just over 39,500. The CSAV scanners have been optimized to provide better protection against "New Executable" file viruses and VxD viruses. Improvements have also been made to reduce the occurrence of false positives. If you open an infected Microsoft Office 97 document in Microsoft Office 2000, our HoloCheck scan engine will detect the infection. Documents converted to Office 2000 format from Office 97 format can be disinfected. Currently, disinfecting an Office 2000 document consists of removing all macros from the document. You can now create a Command AntiVirus rescue disk from within the CSAV main screen. For more information, see the Creating a Rescue Disk section in the Multi-Platform Quick Start Guide. Installations (including silent installations) no longer display the CSAV splash screen. The Virus Information list is now generated from the CSAV definition files on your system. This allows you to view the names of all computer viruses that are handled by Command AntiVirus. To always have the latest Virus Information list, be sure to keep your definition files up-to-date. The CSAV main screen now contains a button for updating your system with the latest SIGN.DEF and MACRO.DEF virus definition files. For more information, see the Definition Files Update Button section in the Multi-Platform Quick Start Guide. NOTE: CSS Central automatically creates the update directory structure that is necessary to add a local directory to the Directory Paths site list. You can use the CSS Central staging directory as a directory path for the Update Deffiles button. For more information, see the Update Definition Files Update Button section of the Network Administration chapter in the Multi-Platform Quick Start Guide. NOTE: If you need to obtain updates from our UK office, you can set the UK web and FTP sites as your primary update sites. Otherwise, CSAV first tries to connect to the U.S. web and FTP sites and then the U.K. FTP and web sites. This requires you to enter your user name and password several times before CSAV tries to connect to the U.K. sites. To set the U.K. update sites as your primary sites, follow these steps: 1. On the menu bar, click Preferences 2. Click Advanced 3. Click the Update Deffiles Now tab 4. Click the down arrow and select Internet Paths 5. Select the third site in the list 6. Click the Up button twice 7. Select the fourth site in the list 8.
|