README FIRST!
Command AntiVirus(tm) for Microsoft(r) Exchange
NOTE:  This version is for ONLY Microsoft(r) Exchange Version 5x 
       with Service Pack 2. A separate version is available for 
       Microsoft(r) Exchange Version 5.5 with Service Pack 3 or
       higher.
Please read the Command AntiVirus for Exchange Administrator's
Guide that is included with the installation files. It provides 
instructions on installing and using this product. 
The CMEADMIN.PDF file contains the Command AntiVirus for Exchange
Administrator's Guide. This file can be read with the Adobe(r) 
Acrobat(r) Reader that is included on the Command AntiVirus CD. 
For instructions on how to install Acrobat Reader, see the README.TXT 
file that is located in the ADOBE folder on the CD.
Acrobat Reader is not included with the downloadable versions 
of Command AntiVirus. You can download Acrobat Reader from 
Adobe Systems Incorporated through our web site at 
http://www.commandcom.com/service/tc-viewutil.html.
A Release Notes section is provided for each release. It contains 
the following topics:
*  Special Notes - contains important pre- and post-installation 
   information that pertains to the release.
*  Product Enhancements - contains information about new virus
   signatures, scan engine improvements, and new features.
*  Fixes - contains updated information on previously reported
   problems that have been fixed.  
===================================================================
Notes on Command AntiVirus for Exchange (CSAV) Version 2.37
19 October 2001
SPECIAL NOTES
*  This version is for ONLY Microsoft(r) Exchange Version 5x 
   with Service Pack 2. A separate version is available for 
   Microsoft(r) Exchange Version 5.5 with Service Pack 3 or 
   higher.
*  All viruses previously referred to as W95/x are now
   named W32/x. For example, W95/Nimda.A@mm is now 
   called W32/Nimda.A@mm.
   NOTE:  x represents a name variable.
PRODUCT ENHANCEMENTS
*  Scan engine enhancements have been added to this release.
   It is now possible to disinfect some script viruses, 
   for example, HTML files modified by the Nimda virus.   
*  New virus signatures have been added in this release.
FIXES
*  Particular types of VBS files caused the scan engine to
   false positive. The number of false positives has been
   decreased in this release.
*  You can now install Command AntiVirus for Microsoft Exchange 
   on the same computer as CSAV for Windows NT Server Version 4.61 
   and higher. Previously, doing so caused a conflict between the 
   two scanners. This condition resulted in an incorrect warning 
   message that displayed repeatedly and caused slowdowns. This 
   has been fixed.
__________________________________________
Notes on Command AntiVirus for Exchange (CSAV) Version 2.36
14 September 2001
SPECIAL NOTES
*  This version is for ONLY Microsoft(r) Exchange Version 5x 
   with Service Pack 2. A separate version is available for 
   Microsoft(r) Exchange Version 5.5 with Service Pack 3 or 
   higher.
*  WARNING:  CSAV for Exchange users
   We do NOT recommend installing CSAV for Exchange on the same computer 
   as CSAV for Windows NT Server Version 4.59 and higher. Doing so causes a 
   conflict between the two scanners that are trying to access the same file. 
   This condition results in an incorrect warning message that will display 
   repeatedly and cause slowdowns.
   This is a temporary condition and will be fixed in a future commercial
   release. Again, the products can coexist on the same network but NOT on
   the same computer.
PRODUCT ENHANCEMENTS
*  Scan engine enhancements have been added to this release, for 
   example, an ELF scanner has been added to cover Unix(r) viruses
   in native Unix file format.  
   The scan engine has also been enhanced to help detect some 
   corrupted (non-working) samples of the Magistr virus.  
*  New virus signatures have been added in this release.
FIXES
*  None for this release.   
____________________________________________________________
Notes on Command AntiVirus for Exchange (CSAV) Version 2.35 
03/28/01
SPECIAL NOTES
*  This version is for ONLY Microsoft(r) Exchange Version 5x 
   with Service Pack 2. A separate version is available for 
   Microsoft(r) Exchange Version 5.5 with Service Pack 3 or 
   higher.
*  WARNING:  CSAV for Exchange users
   We do NOT recommend installing CSAV for Exchange on the same computer 
   as CSAV for Windows NT Server Version 4.59 and higher. Doing so causes a 
   conflict between the two scanners that are trying to access the same file. 
   This condition results in an incorrect warning message that will display 
   repeatedly and cause slowdowns.
   This is a temporary condition and will be fixed in a future commercial
   release. Again, the products can coexist on the same network but NOT on
   the same computer.
PRODUCT ENHANCEMENTS
*  New virus signatures have been added in this release.
*  This release contains the following scan engine enhancements:
   -  Scanning of encrypted VBS files is now supported.
   -  Scanning of Visio files is now supported. Heuristics scanning
      is now in place to help detect unknown Visio viruses. 
   -  Scanning of PIF files is now supported. PIF viruses can now 
      be listed.
   -  Scanning of PHP viruses is now supported.
   -  Heuristics scanning is now in place to help detect unknown VBS 
      viruses such as new variants of LoveLetter.
   -  Our HoloCheck technology has been improved to detect a few new 
      polymorphic viruses.
   -  Detection for the W95/MTX.9244 virus and X97M/Jini-A1 
      misdisinfected viruses.
*  The speed of scanning CAB files has been improved.
FIXES
*  The level of generated false positives for macro viruses has been 
   reduced.
*  Detection of the MTX virus has been improved. 
____________________________________________________________
RELEASE NOTES
Notes on Command AntiVirus for Exchange (CSAV) Version 2.33
07/10/00
SPECIAL NOTES
*  None for this release. 
PRODUCT ENHANCEMENTS
*  None for this release. 
FIXES
*  None for this release.
________
RELEASE NOTES
Notes on Command AntiVirus for Exchange (CSAV) Version 2.32
06/20/00
SPECIAL NOTES
*  A new dialog box has been added to the Command AntiVirus for
   Exchange installation. This dialog box asks if you want to 
   run Exchange Optimizer. We recommend that you select NO.
PRODUCT ENHANCEMENTS
*  None for this release.
FIXES
*  None for this release.
________
Notes on Command AntiVirus for Exchange (CSAV) Version 2.31
05/18/00
PRODUCT ENHANCEMENTS
New virus signatures have been added in this release.
The following improvements have been made to the scan engine:
- Improved HTML and ASCII scanning.
- CSAV now detects W95/Bolzano family viruses.
- Scanning of the following is now supported:
    - TAR archives
    - RAR archives
    - LHA archives
    - CAB archives (partially supported)
    - GNU GZIP (.GZ files)
    - Self-extracting RAR files
    - Self-extracting LHA files
FIXES
Some users reported a problem with some documents falsely 
being reported as "could be misdisinfected virus." This 
has been fixed.
SPECIAL NOTES
None for this release.
________
Notes on Command AntiVirus for Microsoft Exchange Version 2.30 
03/6/00
PRODUCT ENHANCEMENTS
None for this release.
FIXES
If there were more than the allowed MAPI limit of 248 mailboxes, 
the on-access service stopped and no active scanning took place. 
This has been fixed. Now, there is no limit to the number of 
mailboxes for active scanning to take place.
SPECIAL NOTES
None for this release.
_____________
Notes on Command AntiVirus for Microsoft Exchange Version 2.20 
01/19/00
PRODUCT ENHANCEMENTS
New virus signatures have been added in this release. This includes
signatures for detecting more than 200 new trojans. 
The following improvements have been made to the scan engine:
- CSAV now detects malicious or destructive Java code (Java Trojans).
- The handling of script viruses is improved. This includes VBScript 
  viruses and ASCII-based viruses.
- CSAV now scans file attachments in Rich Text Format (.RTF) files.
- CSAV now disinfects Office 2000 signed documents.
- Scanning of the following is now supported:
    - OLE1 embedding (embedded files in WordPad and Microsoft 
      Word 6)
    - WordPerfect 2000 (.WPD) files
    - Lotus worksheets (.WKS) files
    - LX (OS/2) files as well as the detection of all OS/2 viruses.
- PowerPoint scanning is improved and the disinfection process is revised. 
  However, as the Microsoft Corporation does not document its compression
  method, the disinfection of objects that are embedded in PowerPoint 
  documents is still not possible.
- CSAV features improved scanning in Windows 32-bit programs resulting
  in higher rates of detection and fewer false positives.
- Disinfection of infected .VBS files by deletion.
The following file types are now scanned by default and they cannot
be deleted:
   EXE, COM, SYS, VXD, DLL, DRV, SCR, 386, OV?, CPL, FON, TSK, ACM, 
   ACV, TLB, TSP, OCX, VBX, VOM, VXE, OBJ, SHS, SMM, HLP, CLA, XL?,
   DOC, DOT, MDB, RTF, MPP, MPT, PPA, PPS, PPT, POT, WBK, PWZ, MSO, 
   OBD, OBT, OBZ, OFT, MSG, EML, TD0, BAT, BTM, INI, INF, HT?, VBS,
   GMS, CSC, WPD, WK?, DVB, WBT, and  CDR
NOTE: Self-extracting files are not scanned by default. However,  
      the .EXE portion of the self-extracting file is scanned 
      by default.
You can add up to 20 additional file extensions to the File Extensions
dialog box.
A new virus definition file, SIGN2.DEF, is now included with Command 
AntiVirus. This file provides virus signatures for a variety of 
scripting viruses and trojans.
The CSAV for Exchange Console, the program's system tray icon, all 
configuration options, and all property sheets now display in read-only 
mode for users who do not have sufficient access rights. 
If the CSAV for Exchange Console was started when (A) the Exchange
Directory service was not running or (B) when the user did not have
sufficient permission on the Exchange server, corresponding dialog 
boxes would display. This has been modified. Now, if the user starts 
the service or acquires sufficient permission on the Exchange server,
the changes will not be reflected in CSAV for Exchange Console until
it is restarted.
FIXES
The intermittent problem that occurred with on-access scanning has now
been fixed. This involves the on-access scans that take place when the
e-mail is delivered to your mailbox.
If there were more than the allowed MAPI limit of 248 mailboxes, the 
on-access service would crash. Now, if that limit is exceeded, the
on-access service simply stops and no active scanning takes place.
The on-access service could not handle Custom Recipients. As Custom
Recipients are not physical mailboxes on the Exchange server, the 
on-access service now ignores them.
The on-access service was reported to be using large amounts of memory. 
This service has been modified to use memory more efficiently.
Some notifications were being missed during on-access scans. This 
resulted in a discrepancy between the number of e-mails scanned and the 
number of notifications sent. This has been fixed.
In the Options dialog box, if the path to the quarantine folder ended with
one or more backslashes, the CSAV for Exchange Console would crash. This
also occurred if, during installation, a quarantine path that contained 
one or more backslashes was entered in the Options dialog box. Both of 
these problems have been fixed.
In Microsoft Exchange Administrator, if the Roles permission for the
quarantine folder was set to "None" and the Folder Visible option was not 
selected, CSAV for Exchange would crash. This has been fixed. Now, these
permission options cannot be selected for the quarantine folder.
If a pipe character ("|") existed in a folder's name, that folder would not
be scanned by on-demand scanning. This has been fixed.
Scheduled on-demand scans would crash if two or more tasks were running at
the same time on the same folder. This has been fixed.
The properties of an on-demand task were being displayed when the task's
name was double-clicked in the CSAV for Exchange Console task list. This 
has been fixed. Now, double-clicking the task's name launches a scan.
When running two or more on-demand scans with the on-access scan
enabled, the on-demand scans cause intermittent General Protection 
Faults (GPFs). This has been fixed.
There was a report that on-demand scans would briefly display the 
Statistics Dialog Box and then close back to the GUI. Nothing is
written to the on-demand log file, but Event Viewer shows that the 
scans had started but were never completed. This has been fixed.
SPECIAL NOTES
To install Command AntiVirus for Exchange you now must be logged on as:
   A. an administrator on the local domain
   B. an Exchange Server Administrator. This account should be the 
      one on which the Exchange services run.
Before installing CSAV for Exchange 2.1, we recommend that you uninstall
any earlier versions of the product. Then reboot your system and install 
CSAV for Exchange 2.1. NOTE: If you reinstall CSAV for Exchange 2.1, you
do not need to perform a system reboot.
If the location of the quarantine folder is changed while the on-access
service is running, the on-access service will need to be restarted in 
order for the change to take effect.
CSAV for Exchange scans only those e-mail messages that are located on the 
Exchange server. As outgoing SMTP e-mail uses a POP3 server instead of the 
Exchange server, CSAV for Exchange does not scan those outgoing messages.
If two or more on-demand tasks are run on the same folder simultaneously, 
there is a chance that you could receive a "multiple edit conflict"
error message.
To test CSAV for Exchange, you can now download the self-extracting file
named SE_EICAR.EXE from our web site at: 
   http://www.commandcom.com/html/utils.html
When you run this file, a test file, EICAR.COM (from European Institute 
for Computer Anti-Virus Research), is extracted from it.
Changing the quarantine folder while the on-access service is running
requires that you restart the on-access service in order for the change to 
take effect.
Running two or more on-demand scan tasks simultaneously on the same 
folder may result in a "multiple edit conflict" error message. 
________
Notes on Command AntiVirus for Microsoft Exchange version 2.0
10/04/99
PRODUCT ENHANCEMENTS
The scan engine has been optimized to provide faster on-demand
and on-access scans.
New virus signatures have been added in this release.
CSAV for Exchange has been modified to better handle various 
error conditions. These conditions include scarce system resources,
improper passwords, and accessing unavailable servers.
FIXES
General Protection Faults occurred when CSAV disinfected user 
macros. This has been fixed.
Modifications have been made to the code behavior monitoring process.
These modifications fix a situation that produced false positives.
Two scheduled scan issues have been fixed. One problem consisted of 
scheduled scans not running at their specified time. The second 
problem consisted of scheduled scan settings not being transferred 
successfully from the CSAV console to the scheduler.
The Help buttons did not provide the requested on-line help. This 
has been fixed.
SPECIAL NOTES
None for this release.
_____________
Notes on Command AntiVirus for Microsoft Exchange version 1.1
07/12/99
PRODUCT ENHANCEMENTS
New virus signatures have been added in this release.
Command AntiVirus now includes expanded protection for the following:
   A. CorelDraw -- The newly discovered CorelDraw virus is now detected.
      The .CSC CorelDraw-related extension is now scanned by default.
   B. MacOffice -- Viruses in MacOffice documents can be detected and 
      disinfected. However, as the Macintosh(tm) operating system is 
      not directly supported by Command AntiVirus, detection is 
      possible only when the infected Macintosh Office documents 
      are scanned in a DOS or Windows-based environment. For example,
      if you have a floppy disk with infected MacOffice documents
      on it, you can disinfect these documents by using CSAV
      to scan the floppy disk.
   C. Microsoft Office 97 -- The .MPT, .WBK and .MSO extensions are now 
      scanned by default. 
   D. Office 2000 -- The heuristics scan engine has been modified so
      that it now detects some native Office 2000 viruses.
   E. PowerPoint 97 -- PowerPoint 97 viruses are now detected and 
      disinfected. The .PP?, .POT, and .PWZ PowerPoint 97 file types
      are now scanned by default.
An additional generic virus detector has been added. This detector 
allows Command AntiVirus to detect approximately 14,000 more 
"generic viruses." This brings the total number of viruses detected 
by Command AntiVirus to just over 39,500.
The CSAV scanners have been optimized to provide better protection
against "New Executable" file viruses and VxD viruses. Improvements
have also been made to reduce the occurrence of false positives.
If you open an infected Microsoft Office 97 document in Microsoft
Office 2000, our HoloCheck scan engine will detect the infection.
Documents converted to Office 2000 format from Office 97 format
can be disinfected. Currently, disinfecting an Office 2000 document
consists of removing all macros from the document.
Files that do not have a file name extension are now scanned by default.
FIXES
None for this release.
SPECIAL NOTES
None for this release.
Notes on Command AntiVirus for Microsoft Exchange version 1.00
Service Pack 2
05/25/99
SPECIAL NOTES
The instructions for insuring the proper starting of CSAV for Exchange
services has been updated. Please see 04/29/99 SPECIAL NOTES.
04/29/99
PRODUCT ENHANCEMENTS
New virus signatures were added in this release.
FIXES
None for this release.
SPECIAL NOTES
To update Command AntiVirus for Exchange with this service pack, you 
must run the service pack's SETUP.EXE program. Note that only the 
components that require updating will be modified.
To insure the proper starting of the CSAV for Exchange services, the
administrator who is installing the product must be:
A.  a local administrator or a domain administrator (with local 
    administrator rights) with the Logon as a service right on the 
    Exchanger Server system.
B.  an administrator on the Exchange Server.
To enable the Log on as a service right, follow these steps:
1.  In the taskbar, click the Start button.
2.  Select Programs.
3.  Select Administrative Tools (Common).
4.  Click User Manager for Domains. The system displays the User Manager 
    dialog box.
5.  Select the administrator's name from the Username column.
6.  Click the Policies menu.
7.  Click the User Rights menu item. The system displays the User Rights 
    Policy dialog box.
8.  Select the Show Advanced User rights check box.
9.  In the Right drop-down list box, select Log on as a service.
10. Click the Add button. The system displays the Add Users and Groups 
    dialog box.
11. Click the Show Users button.
12. In the Names list box, select the administrator's name.
13. Click Add.
14. Click OK. The system returns to the User Rights Policy dialog box.
15. Click Ok to finish.
To be an administrator on the Exchange Server, follow these steps:
1.  In the taskbar, click the Start button.
    NOTE: If you are using Windows NT Server 3.51, double-click the 
          Microsoft Exchange group.
2.  Select Programs.
    NOTE: If you are using Windows NT Server 3.51, double-click the 
          Microsoft Exchange Administrator icon.
3.  Select Microsoft Exchange.
4.  Click Microsoft Exchange Administrator. The system displays the 
    Microsoft Exchange Administrator dialog box.
5.  Locate the name of your Microsoft Exchange server and click the plus 
    sign (+) located next to the server's name. The system displays the 
    Configuration icon and the Recipients icon below the server's name.
6.  Select the Configuration icon.
7.  On the menu bar, click File. The system displays the drop-down menu.
8.  Click Properties. The system displays the Configuration Properties 
    dialog box.
9.  Click the Permissions tab. The system displays the Permissions 
    dialog box.
10. Click Add.
11. Select the administrator's name from the Names list box.
12. Click Add.
13. Click OK. The system returns to the Configuration Properties 
    dialog box.
14. Click Apply.
15. Click OK to finish.
Notes on Command AntiVirus for Microsoft Exchange version 1.00
03/19/99
PRODUCT ENHANCEMENTS
None for this release.
FIXES
None for this release.
SPECIAL NOTES
In the "Reports" dialog box, the "Delete attachment if the specified 
action fails" item is enabled by default. For maximum protection 
against computer viruses, we recommend that you do NOT disable this 
item unless it is absolutely necessary to do so.
For detailed virus information, we suggest that you view the Joe Wells
Virus Encyclopedia that is included on the CD. You can open the 
encyclopedia by going to the "JoeWells" directory located in the 
"Manuals" directory. Then, double-click the file named INDEX.HTM 
to display the encyclopedia.
Scan tasks are not sorted when you click the column headers in the 
CSAV for Exchange console. This will be corrected in an 
upcoming release. 
The CSAV for Exchange documentation refers to the scanning of e-mail 
that is sent and received. Currently, sent e-mail is defined as 
mail that is sent between mailboxes and mail folders within the 
Exchange server's domain. The scanning of outgoing e-mail (mail that 
is sent to addresses outside the server's domain) is a planned 
future enhancement to CSAV for Exchange.
===================================================================
PRODUCT SUPPORT
Command Software Systems' technical support includes a variety of 
electronic services. You can contact us at:
Command Software Systems, Inc.
1061 E. Indiantown Rd., Suite 500
Jupiter, FL  33477
   Voice: 561/575-3200 8:00 a.m. to 8:00 p.m. Eastern Standard Time.
     Fax: 561/575-3026
Internet: [email protected]
     FTP: ftp.commandsoftware.com
     Web: http://www.commandsoftware.com
In Europe contact:
Command Software Systems, Inc.
UK Branch
Ground Floor
Millbank Tower
Millbank
London SW1P 4QP
If dialing from within the UK:
   Voice: 020 7 931-9301
     Fax: 020 7 931-9302 
If dialing from outside the UK:
   Voice: +44 20 7 931-9301
     Fax: +44 20 7 931-9302
Internet: [email protected]
          [email protected]
          [email protected] 
In Pacific Rim, contact:
Command Software Systems, PTY Pac Rim
Unit 5, 18-20 Floriston Road
Boronia, VIC 3155
Australia
   Voice: 1-300-65-0903 or 613-9762-2203
     Fax: 1-300-65-0904 
Internet: [email protected]
     Web: http://www.commandcom.com.au
====================================== END ========================================