      What's New in Dr Solomon's VirusScan Command Line
                        v4.0.1 (4001)
     Copyright (c) 1992-1998 by Network Associates, Inc.,
      and its Affiliated Companies. All Rights Reserved.


Thank you for using Dr Solomon's VirusScan Command Line.
This What's New file contains important information
regarding the current version of this product. Network
Associates strongly recommends that you read the entire
document.

Network Associates welcomes your comments and suggestions.
Please use the information provided in this file to
contact Customer Care and technical support.

___________________
WHAT'S IN THIS FILE

- What Comes With VirusScan Command Line
- New Features
- Known Issues
- Installation
- Documentation
- Frequently Asked Questions
- Contacting Network Associates

______________________________________
WHAT COMES WITH VIRUSSCAN COMMAND LINE

VirusScan Command Line consists of a principal executable
file, FINDVIRU.EXE, and two modular files, SCANPM.EXE and
SCAN86.EXE, that allow VirusScan to adapt intelligently
and dynamically to the environment in which you run it.

To start VirusScan Command Line, you need only run
FINDVIRU.EXE, together with any options you wish to use to
configure your scan operation. As it starts, FINDVIRU.EXE
examines your environment to see what resources your
computer has available. If your computer is running in a
32-bit environment, FINDVIRU.EXE handles the scan operation
itself. If you are running in a 16-bit environment with
sufficient extended (XMS) memory, FINDVIRU.EXE hands the
scan task to SCANPM.EXE for execution. Otherwise,
FINDVIRU.EXE hands the scan operation to SCAN86.EXE for
execution. 

____________
NEW FEATURES

1.  This VirusScan version incorporates the Dr Solomon
    scanning engine. This engine, produced by what is
    now the largest anti-virus research organization in
    the world, gives VirusScan outstanding detection and
    cleaning rates.

2.  VirusScan detects and cleans files infected with the
    Win95/CIH and Win95/Marburg viruses. These viruses
    infect Windows 95 and Windows 98 portable executable
    (PE) files. A portable executable file is a Windows
    resource file that other executable files can share
    --examples include dynamic linking library (.DLL)
    files.

3.  SCANPM.EXE and FINDVIRU.EXE both detect viruses in the
    following compressed or archived file formats: .ARJ,
    .ARC, .LZH, .ZIP, .TD0, LZEXE, and PKLite. FINDVIRU.EXE
    will also scan Microsoft Compressed Application Binary
    (.CAB) files. SCAN86.EXE will not scan compressed or
    archived files.

4.  The new scanning engine also includes improved
    detection and cleaning capability for the W97M/Class,
    W97M/Groov, and XM/COMPAT.A viruses, along with a
    new strain of the XF/PAIX virus.

5.  VirusScan Command Line modules FINDVIRU.EXE and
    SCANPM.EXE detect macro viruses in Microsoft Access
    files. SCAN86.EXE does not detect viruses in Access files.
    
6.  When you start VirusScan Command Line with the /CLEAN and
    /MOVE options enabled, the program now copies infected
    files to the quarantine directory, or copies them in
    place with a new extension, before it tries to remove
    infecting viruses. If it cannot remove a virus from
    an original file, VirusScan will delete the file, but
    will retain the copy. If VirusScan can clean the
    original file, it will leave it in place. This allows
    you to keep copies of infected files in order to track
    them or forward them to McAfee Labs for evaluation.

    VirusScan will follow this same procedure when it finds
    viruses in files embedded within Microsoft Office files.
    If, for example, VirusScan detects a virus in an Excel
    spreadsheet file embedded in a Word document, it will
    move the entire file--the embedded file and its host
    file--to a quarantine directory or copy it in place
    with a new extension before it tries to remove the
    infecting virus.

7.  VirusScan Command Line now includes files for creating
    a boot disk that includes a command-line scanner. This
    disk allows you to boot into a virus-free environment,
    then scan your hard disk for boot-sector and file-
    infector viruses. To learn which files to use and how
    to create the boot disk, see the VirusScan Command
    Line User's Guide.


* NEW VIRUSES DETECTED *

              **** IMPORTANT NOTE ****

This release of VirusScan Command Line functions ONLY with
the 40xx .DAT file series, beginning with the 4001 .DAT
file included with this program package. You CANNOT use
VirusScan Command Line with earlier .DAT file versions,
nor may you use the .DAT files included in this release
with 2.x or 3.x versions of VirusScan Command Line.

                         ****

Because the previous VirusScan scanning engine and the
newly incorporated Dr Solomon scanning engine identify
and classify viruses in different ways, this release of
VirusScan Command Line does not include a list of viruses
detected or cleaned. Future releases will incorporate this
information, once McAfee Labs adopts a standard virus
naming convention.

___________
KNOWN ISSUES

1.  Legitimate programs that write to the Master Boot Record
    of a disk, such as some disk security programs, may be
    identified by VirusScan as a "probable unknown boot
    sector virus." If this problem is encountered, use the
    /NODDA command-line switch. This prevents VirusScan
    from scanning the Master Boot Record of the disk.

2.  VirusScan's delete and move operations are not currently
    supported for infected objects detected within Microsoft
    Office binder files.

3.  The Virus List appears with incorrectly formatted text if
    you run FINDVIRU.EXE with the /VIRLIST option.

4.  Because Windows NT includes security features that
    protect your system from unauthorized tampering,
    VirusScan Command Line cannot scan certain files on
    your system. These files include PAGEFILE.SYS, registry
    hive files, and user profiles. When VirusScan tries to
    scan these files, your system will beep and display
    a Read Access Denied error message. This message is
    not critical and does not affect how your system
    functions.

5.  VirusScan Command Line cannot scan the boot sectors
    or the Master Boot Record on Windows NT systems unless
    you have administrative rights. To use VirusScan to
    scan these areas, you must log in as a user that has
    administrative rights.

6.  This VirusScan Command Line release does not include
    support for the /PLAD option.

                              

* PRIMARY PROGRAM FILES FOR VIRUSSCAN COMMAND LINE *

Files located in the installation directory:
============================================

    FINDVIRU.EXE = VirusScan Command Line program for
                   32-bit environments
      SCANPM.EXE = VirusScan Command Line program for
                   protected mode environments
      SCAN86.EXE = VirusScan Command Line program for
                   real-mode environments
      README.1ST = Network Associates license document
     PACKING.LST = Packing list
    VALIDATE.EXE = Authenticity validation program
        SCAN.DAT = Virus detection data
     LICENSE.DAT = Virus definition data
    MCSCAN32.DLL = 32-bit scanning engine
    MESSAGES.DAT = Virus definition data
       NAMES.DAT = Virus names definition data
       CLEAN.DAT = Virus clean definition data
      EMSCAN.DAT = Virus definition data for boot disk
     EMNAMES.DAT = Virus definition data for boot disk
     EMCLEAN.DAT = Virus definition data for boot disk
    BOOTSCAN.EXE = Scanner for boot disk
    WHATSNEW.TXT = This document
    RESELLER.TXT = Network Associates authorized resellers
     RWABS16.DLL = VirusScan 32-bit/16-bit support file
     RWABS32.DLL = VirusScan 32-bit/16-bit support file
     VSHIELD.EXE = VirusScan on-access scan component
                   included with the installable version
                   of VirusScan Command Line


* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined
effort by anti-virus vendors throughout the world to
implement one standard by which customers can verify
their anti-virus installations.

To test your installation, copy the following line
into its own file, then save the file with the name
EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

The file size will be 69 or 70 bytes.

Next, start VirusScan and allow it to scan the
directory that contains EICAR.COM. When VirusScan
scans this file, it will report finding the
EICAR-STANDARD-AV-TEST-FILE virus.

Note that this file is NOT A VIRUS. Delete the file
when you have finished testing your installation to
avoid alarming unsuspecting users.


_____________
DOCUMENTATION

For more information, refer to the VirusScan Command
Line User's Guide included on the CD-ROM or available
from Network Associates electronic services. Each user's
guide is saved in Adobe Acrobat Portable Document Format
(.PDF). You can view and print this document with Adobe's
Acrobat Reader. PDF files can include hypertext links and
other navigation features to assist you in finding answers
to questions about your Network Associates product.

To download Adobe Acrobat Reader from the World Wide Web,
visit Adobe's website at:

http://www.adobe.com/prodindex/acrobat/readstep.html

To download Network Associates documentation, visit the
Network Associates website at:

http://www.nai.com

Additional contact information appears in the following
section.

Documentation feedback is welcome. Send e-mail to
tvd_documentation@nai.com.

__________________________
FREQUENTLY ASKED QUESTIONS 

Regularly updated lists of frequently asked questions 
about Network Associates products also are available on
the Network Associates website and on CompuServe and
America Online.
   
Q:  How do I enable the Centralized Alerting and Reporting
    option?

A:  VirusScan now supports Centralized Alerting and
    Reporting to remote NetWare or Windows NT servers
    running NetShield for Windows NT v2.5.3 and later
    or NetShield for NetWare v2.3.3 and later. To 
    configure this option on your VirusScan client,
    use the /ALERTPATH <directory> option, where the 
    <directory> is the path to the remote NetWare 
    volume or NT directory. From this directory, 
    NetShield can broadcast or compile the alerts 
    and reports according to its established
    configuration.

    NOTE: The client must have write access to this
    <directory> location and the directory must contain
    the NetShield-supplied CENTALRT.TXT file.

    To send a complete alert file that identifies the
    infected system and its user, establish the following
    environment variables or add them to the AUTOEXEC.BAT
    file.

      Set COMPUTERNAME=<name of computer>
      Set USERNAME=<user name>

    VirusScan sends an .alr text file to the server when
    it detects an infected file. When the server receives
    the alert file,  NetShield for Windows NT or NetShield
    for NetWare will send an alert message to an
    administrator and to other appropriate recipients.


Q:  How can I scan my Zip drive?

A:  If you experience complications when trying to scan your
    Zip drive, start VirusScan with the /NODDA switch. For
    example, enter FINDVIRU X: /NODDA (where X is the letter
    of your Zip drive). 

 
Q:  How can I run VirusScan Command Line from a NetWare login
    script without running out of memory?

A:  Follow these steps:

    1.  Rename LOGIN.EXE to LOGIN1.EXE, then remove
        any references to VirusScan from the file.
    2.  Create a batch file named LOGIN.BAT.
    3.  Use the first line of the batch file to run
        VirusScan with whatever options you want to
        include.
    4.  Use the second line of the batch file, to run
        LOGIN1.EXE.
 
    These steps prevent LOGIN.EXE and FINDVIRU.EXE from
    loading into memory at the same time, which allows
    VirusScan Command Line to run before your computer
    tries to get access to the network. Your login
    script should then run without complications.


Q:  Can I clean the Master Boot Record (MBR) on a hard disk
    formatted with the Windows NT file system (NTFS)?

A:  Yes. Follow these steps:

    a.  Start the computer that has the NTFS partition
        from a virus-free DOS boot disk.
    b.  Start VirusScan Command Line with these options:
        /BOOT /CLEAN. Be sure to run VirusScan from a 
        floppy disk you know is free from viruses.

    This cleans the NTFS Master Boot Record, but VirusScan
    Command Line cannot read the rest of the NTFS partition
    when you boot into a DOS environment. To scan the rest
    of the NTFS partition, reboot into Windows NT, then run
    VirusScan Command Line again. Consult the VirusScan
    Command Line User's Guide to learn how to create a boot
    disk with BOOTSCAN.EXE.


Q:  Can I update VirusScan data files so that it detects
    new viruses?

A:  Yes. If you have Internet access, you can download
    updated VirusScan data files from the Network Associates
    website or from other electronic services. To download 
    data files from the Network Associates website, follow
    these steps:
 
    1.  Use a web browser to connect to the Network Associates
        website at http://www.nai.com.

    2.  Click the Download tab.

    3.  Click Update Virus .DAT Files, then click Download
        Virus DAT File.

    4.  Follow the on-screen downloading instructions.

    5.  Data file updates are stored in a compressed form 
        to reduce transmission time. Unzip the files into
        a temporary directory, then copy the new files to
        your existing VirusScan directory, replacing your
        old files.    

    6.  Before performing any scans, shut down your
        computer, wait a few seconds, then turn it on again.

    If you need additional assistance with downloading, 
    contact Network Associates Download Support at
    (408) 988-3832.

_____________________________
CONTACTING NETWORK ASSOCIATES

On December 1, 1997, McAfee Associates merged with
Network General Corporation, Pretty Good Privacy, Inc.,
and Helix Software, Inc. to form Network Associates, Inc.
Network Associates then completed the acquisition of
Dr Solomon's Software in August, 1998. You may direct all
questions, comments and technical support requests to the
Network Associates Customer Care department at any of the
addresses or phone numbers listed below.

Contact the Network Associates Customer Care
department at: 

1.  Phone (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax (408) 970-9727
    24-hour, Group III Fax 

3.  Fax-back automated response system (408) 346-3414

 
Send correspondence to any of the following Network
Associates locations:
  
     Network Associates Corporate Headquarters  
     3965 Freedom Circle
     McCandless Towers   
     Santa Clara, CA 95054

     Phone numbers for corporate-licensed customers:
     Phone: (408) 988-3832
     Fax:   (408) 970-9727

     Phone numbers for retail-licensed customers:
     Phone: (972) 278-6100
     Fax:   (408) 970-9727

Network Associates offices outside the United States:

     Network Associates Australia
     Level 1, 500 Pacific Highway
     St. Leonards, NSW
     Sydney, Australia 2065
     Phone: 61-2-8425-4200
     Fax:   61-2-9439-5166 

     Network Associates Austria
     Pulvermuehlstrasse 17
     Linz, Austria
     Postal Code A-4040
     Phone: 43-732-757-244
     Fax:   43-732-757-244-20

     Network Associates Belgium
     Bessenveldtstraat 25a
     Diegem, Belgium - 1831
     Phone: 32-3-716-4070
     Fax:   61-2-716-4770

     Network Associates do Brasil
     Rua Geraldo Flausino Gomez 78
     Cj. - 51 Brooklin Novo - So Paulo
     SP - 04575-060 - Brasil
     Phone:  (55 11) 5505 1009
     Fax:    (55 11) 5505 1006

     Network Associates Canada
     139 Main Street, Suite 201
     Unionville, Ontario
     Canada L3R 2G6
     Phone: (905) 479-4189
     Fax:   (905) 479-4540

     Network Associates People's Republic of China
     New Century Office Tower, Room 1557
     No. 6 Southern Road Capitol Gym 
     Beijing
     People's Republic of China 100044
     Phone: 86 10 6849-2650
     Fax:   86 10 6849-2069

     NA Network Associates Oy
     Kielotie 14 B
     01300 Vantaa
     Finland
     Phone: 358 9 836 2620
     Fax:   358 9 836 26222 

     Network Associates France S.A.   
     50 Rue de Londres    
     75008 Paris     
     France
     Phone: 33 1 44 908 737
     Fax:   33 1 45 227 554  

     Network Associates Deutschland GmbH
     Industriestrasse 1
     D-82110 Germering
     Germany
     Phone: 49 8989 43 5600
     Fax:   49 8989 43 5699 

     Network Associates Hong Kong
     19/F, Matheson Centre
     3 Matheson Street
     Causeway Bay
     Hong Kong
     Phone: 852-2832-9525
     Fax:   852-2832-9530

     Network Associates Srl
     Centro Direzionale Summit     
     Palazzo D/1
     Via Brescia, 28
     20063 - Cernusco sul Naviglio (MI)
     ITALY  
     Phone: 39 (0)2 9214 1555   
     Fax:   39 (0)2 9214 1644

     Network Associates Japan, Inc.
     Toranomon 33 Mori Bldg.
     3-8-21 Toranomon Minato-ku
     Tokyo 105-0001 Japan
     Phone: 81 3 5408 0700
     Fax:   81 3 5408 0781

     Network Associates Latin America
     150 South Pine Island Road, Suite 205
     Plantation, Florida 33324
     United States
     Phone: (954) 452-1731
     Fax:   (954) 236-8031

     Network Associates de Mexico
     Andres Bello No. 10, 4 Piso
     4th Floor
     Col. Polanco
     Mexico City, Mexico D.F. 11560
     Phone: (525) 282-9180
     Fax:   (525) 282-9183

     Network Associates International B.V.   
     Gatwickstraat 25   
     1043 GL Amsterdam    
     The Netherlands    
     Phone: 31 20 586 6100
     Fax:   31 20 586 6101

     Network Associates Portugal
     Rua Gen. Ferreira Martins, 10-6c
     1495 Algs
     Portugal
     Phone:  351 1 412 1077
     Fax:    351 1 412 1488

     Net Tools Network Associates South Africa
     Bardev House, St. Andrews
     Meadowbrook Lane
     Epson Downs, P.O. Box 7062
     Bryanston, Johannesburg
     South Africa 2021
     Phone: 27 11 706-1629
     Fax:   27 11 706-1569

     Network Associates South East Asia
     7 Temasek Boulevard
     The Penthouse
     #44-01, Suntec Tower One
     Singapore 038987
     Phone: 65 430-6670
     Fax:   65 430-6671

     Network Associates Spain
     Orense 4, 4th Floor
     Edificio Trieste
     28020 Madrid
     Spain
     Phone: 34 91 598 18 00
     Fax:   34 91 556 14 01

     Network Associates Sweden
     Datavgen 3A
     Box 596
     S-175 26 Jrflla
     Sweden
     Phone: 46 (0) 8 580 100 00
     Fax:   46 (0) 8 580 100 05

     Network Associates AG
     Baeulerwisenstrasse 3
     8152 Glattbrugg
     Switzerland
     Phone: 0041 1 808 99 66
     Fax:   0041 1 808 99 77

     Network Associates International Ltd.
     Minton Place, Victoria Street
     Windsor, Berkshire
     SL4 1EF
     United Kingdom
     Phone: 44 (0)1753 827 500
     Fax:   44 (0)1753 827 520


Or, you can receive online assistance through any
of the following resources:

 1.  Internet E-mail: support@nai.com

 2.  Internet FTP: ftp.nai.com

 3.  World Wide Web: http://support.nai.com

 4.  America Online: keyword MCAFEE

 5.  CompuServe: GO NAI

To provide the answers you need quickly and efficiently,
the Network Associates technical support staff needs
some information about your computer and your software.
Please have this information ready when you call:
                          
 - Program name and version number
 - Computer brand and model
 - Any additional hardware or peripherals connected to
   your computer
 - Operating system type and version numbers
 - Network name, operating system, and version
 - Network card installed, where applicable
 - Modem manufacturer, model, and baud, where applicable
 - Relevant browsers or applications and their version 
   numbers, where applicable
 - How to reproduce your problem: when it occurs, whether
   you can reproduce it regularly, and under what 
   conditions
 - Information needed to contact you by voice, fax, or 
   e-mail

We also seek and appreciate general feedback.

 
* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use Network
Associates products, we have established a reseller's
program to provide service, sales, and support for our
products worldwide. For a listing of resellers, see the
resellers.txt file or contact Network Associates
Customer Care for resellers near you.

 
* FOR REPORTING PROBLEMS *

Network Associates prides itself on delivering a
high-quality product. If you find any problems, please
take a moment to review the contents of this file. If
the problem you've encountered is documented, there is
no need to report the problem to Network Associates.

If you find any feature that does not appear to
function properly on your system, or if you believe
an application would benefit greatly from enhancement,
please contact Network Associates with your suggestions
or concerns.


* FOR ON-SITE TRAINING INFORMATION *

Contact Network Associates Customer Service at
(800) 338-8754.


* NETWORK ASSOCIATES BETA SITE *

Get pre-release software, including DAT files, through
http://beta.nai.com. You will have access to Public
Beta and External Test Areas. Your feedback will make
a difference.