     What's New in McAfee VirusScan Command Line
            for Windows NT v2.5.2 (9609)
        Copyright 1994-1996 by McAfee, Inc.
               All Rights Reserved.


Thank you for using McAfee's VirusScan Command Line for
Windows NT. This What's New file contains important
information regarding the current version of this product.
It is highly recommended that you read the entire document.

McAfee welcomes your comments and suggestions. Please use
the information provided in this file to contact us.

___________________
WHAT'S IN THIS FILE

- New Features          
- Known Issues
- Installation          
- Documentation         
- Frequently Asked Questions  
- Contact McAfee

____________
NEW FEATURES

* NEW VIRUSES DETECTED *
  
This DAT file (9609) detects the following 68 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.

_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE
ARCV.255 
ARCV.679
ARCV.745
ASH.743
BEDA.1530
BEER.2620
BEER.3164.B
BEER.3192.B
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
BW-525
CASTELLO.3742           Spain
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DELWIN.1199
DIETZEL:DE (*)
DODGER
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
JERUSALEM.BUPT.1220
JERUSALEM.BUPT.1279
JERUSALEM.BUPT.1367
KABOUT.1804 (*)
KARNAVALI.1972          Europe
KDG
KITTY
LAMEGO.729              Portugal
LIBERTY.2857.D
LITTLEPEST.4243 (*)
MANNEQUIN
MANZON.1404             Europe
MENDOZA.3380            Spain
MSU.297
NECROS.1164.A
NECROS.1164.B
PHALCON.1117
PINDONGA.B
PS-MPC.578.C
PS-MPC.611.J
PS-MPC.753
PS-MPC.AOS
PULCE.1840 
RADYUM.509
RAHACK.936              Netherlands
RDA FIGHTER.5871
RIOT.ETERNITY.565
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SCREAMING_FIST.709
SIRIUS.ALIVE.4608
TANPRO.749
TEQUILA.2468
TURNER.3276
TV
V3.1765
VACSINA.1206.A
VERWOLF
VICTOR.2442.A
(*) Requires DOS/Win 2.5.2 engine

  
* NEW VIRUSES REMOVED *

This DAT file (9609) removes the following 38 new viruses.
In addition, locations that have experienced problems with
a particular virus are identified.

_1194                   Spain
ACCOUNT.AVENGER.873
ALLIANCE                England
ARCV.255
ARCV.657
ARCV.679
ARCV.745
ASH.743
BIRTHDAY:DE (*)         Germany
BLEAH
BUERO:DE                Germany
CHEGUEVA                Spain
COMPBACK.3783
CORDOBES.3334           Spain
DEI.8772
DEI.DR.8772
DIETZEL:DE (*)
HASSLE
HASTA.884
HLLP.NAZI.5984
IVP.665
LAMEGO.729              Portugal
LITTLE_BROTHER          Germany
NO_FRILL.835            Australia
PS-MPC.611.J
PS-MPC.753
RAHACK.936              Netherlands
SALMAN.2000             US
SATRIA.RZ               Europe
SCREAMING_FIST.652
SHELL.10634             Internet
TANPRO.524
TANPRO.749
TEQUILA.2468
TV
V3.1765
VICTOR.2442.A
ZYX                     Europe
(*) Requires DOS/Win 2.5.2 engine

____________
KNOWN ISSUES

1.  When VirusScan scans PAGEFILE.SYS, the system
    beeps and an Access Denied message is displayed.

2.  VirusScan is not able to access the boot sectors
    and the Master Boot Record unless you have
    administrative rights. To scan the boot sectors and
    the Master Boot Record, log in as a user with
    administrative rights. You may need the DOS version
    of VirusScan if your system has a boot sector virus.

____________
INSTALLATION

* PRIMARY PROGRAM FILES FOR VIRUSSCAN COMMAND LINE *

Files located in the Install directory:
=======================================

      NTSCAN.EXE = VirusScan for Windows NT Command
                   Line program
      README.1ST = McAfee information
        SCAN.DAT = Virus scan definition data
       NAMES.DAT = Virus names definition data
       CLEAN.DAT = Virus clean definition data
        SCAN.EXE = MS-DOS scan program
    VALIDATE.EXE = McAfee file validation program
    WHATSNEW.TXT = What's New document
     PACKING.LST = Packing list
      AGENTS.TXT = McAfee authorized agents

* INSTALLING THE PRODUCT *

To install, create a directory and copy the files
to it.

       
* TESTING YOUR INSTALLATION *
            
The Eicar Standard AntiVirus Test File is a combined effort
by anti-virus vendors throughout the world to come up with
one standard by which customers can verify their anti-virus
installations.

To test your installation, copy the following line into its
own file and name it EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

When done, you will have a 69- or 70-byte file.

When VirusScan is applied to this file, Scan will report
finding the EICAR-STANDARD-AV-TEST-FILE virus.

It is important to know that THIS IS NOT A VIRUS. However,
users often have the need to test that their installations
function correctly. The anti-virus industry, through the
European Institute for Computer Antivirus Research, has
adopted this standard to facilitate this need.

Please delete the file when installation testing is
completed so unsuspecting users are not unnecessarily
alarmed.

_____________
DOCUMENTATION

For more information, refer to the DOS section of the
VirusScan User's Guide, included on the CD-ROM versions
of this program or available from McAfee's BBS and FTP
site. This file is in Adobe Acrobat Portable Document
Format (.PDF) and can be viewed using Adobe Acrobat
Reader. This form of electronic documentation includes
hypertext links and easy navigation to assist you in
finding answers to questions about your McAfee product.

Adobe Acrobat Reader is available on CD-ROM in the
ACROREAD subdirectory. Adobe Acrobat Reader also can
be downloaded from the World Wide Web at:

http://www.adobe.com/Acrobat/readstep.html

VirusScan documentation can be downloaded from McAfee's
BBS or the World Wide Web at:

http://www.McAfee.com or http://205.227.129.97

__________________________
FREQUENTLY ASKED QUESTIONS

Regularly updated lists of frequently asked questions 
about McAfee products also are available on McAfee's 
BBS, website, and CompuServe and AOL forums.
     
Q:  What is VirusScan Command Line for Windows NT
    (NTSCAN)?

A:  VirusScan Command Line for Windows NT is a
    command line scanner that was ported from our
    DOS VirusScan product. It uses the same command
    line options as the DOS product.


Q:  Is this the only command line-based NT scanning
    product?

A:  Yes and no. VirusScan Command Line for Windows NT
    is the only command line program, but the SCAN32
    program that is included with NetShield and the
    VirusScan for NT products will accomplish the same
    goal using a custom VirusScan Configuration (VSC)
    file instead of command line parameters. Because
    SCAN32 is not offered as a stand-alone product,
    we maintain VirusScan Command Line for Windows NT.


Q:  How do I use VirusScan Command Line for Windows NT?

A:  You use VirusScan Command Line for Windows NT
    similar to the way you use VirusScan for DOS or
    OS/2. While in NT, open a DOS command line
    session and run NTSCAN <drive spec> /<option1>
    /<option2> /<option3>. The product documentation
    contains information about the different command
    line parameters.


Q:  What if my DOS session is infected? How can I boot
    clean?

A:#l  If the file on your computer is file allocation
      table (FAT) based, boot with a DOS system
      disk, then scan all the files.

A:#2  If your system is NT file system (NTFS) based,
      take these steps:

      a.  If your command shell is not infected
          (CMD.EXE), then open a new DOS session.
          Run SCAN. Because all DOS sessions share
          the same file area but different protected
          memory locations, this is a clean boot.

      b.  If the command shell is infected, take one
          of the following steps: (1) Use Control
          Panel to change your system command shell to
          COMMAND.COM, or (2) Use File Manager to copy
          a new uninfected copy of CMD.EXE to the machine
          and delete the infected copy.


Q:  Can I use the same data files to update VirusScan
    Command Line for Windows NT as I would use to
    update VirusScan for DOS?

A:  Yes. All McAfee anti-virus products use the same virus
    definition files for scanning. If you have Internet
    access, you can download updated McAfee data
    files from the McAfee Web Site, BBS, or other online
    resources. To download from the McAfee Web Site,
    follow these steps:
 
    1.  Go to the McAfee Web Site (http://www.mcafee.com
        or http://205.227.129.97).

    2.  Click on the Download McAfee button in the upper
        left hand column or frame.

    3.  Click Get that DAT! to update DAT files. 

    4.  View the information provided on new DAT files
        and downloading.

    5.  Click on Download this Month's DAT.
   
    6.  Data file updates are stored in a compressed form 
        to reduce transmission time. Unzip the files into
        a temporary directory, then copy the files to the
        appropriate directory, replacing your old files.    

    7.  Before performing any scans, shut down your
        computer, wait a few seconds, and turn it on again.

    If you need additional assistance with downloading, 
    contact McAfee Download Support at (408) 988-3832.

______________
CONTACT McAFEE

* FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS *

Contact McAfee's Customer Care department: 

1.  Call (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax: (408) 970-9727
    24-hour, Group III Fax 
		
3.  Fax-back automated response system: (408) 988-3034
    24-hour fax

Send correspondence to any of the following McAfee
locations:
	
    McAfee Corporate Headquarters		
    2710 Walsh Avenue			
    Santa Clara, CA 95051-0963		
	
    McAfee East Coast Office					
    Jerral West Center
    766 Shrewsbury Avenue
    Tinton Falls, NJ 07724-3298

    McAfee Central Office			
    5944 Luther Lane, Suite 117		
    Dallas, TX 75225				
						
    McAfee Canada
    178 Main Street
    Unionville, Ontario
    Canada L2R 2G9

    McAfee Europe B.V.			
    Orlyplein 81 - Busitel 1		
    1043 DS Amsterdam				
    The Netherlands	 		

    McAfee (UK) Ltd.
    Hayley House, London Road
    Bracknell, Berkshire  RG12 2TH
    United Kingdom 

    McAfee France S.A.			
    50 rue de Londres				
    75008 Paris					
    France					
				
    McAfee Deutschland GmbH
    Industriestrasse 1
    D-82110 Germering
    Germany

Or, you can receive online assistance through any of the 
following resources:

1.  Bulletin Board System: (408) 988-4004
    24-hour US Robotics HST DS

2.  Internet e-mail: support@mcafee.com

3.  Internet FTP: ftp.mcafee.com or 205.227.129.134

4.  World Wide Web: http://www.mcafee.com
    or http://205.227.129.97

5.  America Online: keyword MCAFEE

6.  CompuServe: GO MCAFEE

7.  The Microsoft Network: GO MCAFEE


Before contacting McAfee, please make note of the
following information. When sending correspondence,
please include the same details.

- Program name and version number
- Type and brand of your computer, hard drive, and any 
  peripherals
- Operating system type and version
- Network name, operating system, and version
- Contents of your AUTOEXEC.BAT, CONFIG.SYS, and 
  system LOGIN script
- Microsoft service pack, where applicable
- Network card installed, where applicable
- Modem manufacturer, model, and baud, where 
  applicable
- Relevant browsers/applications and version number,
  where applicable

- Problem
- Specific scenario where problem occurs
- Conditions required to reproduce problem
- Statement of whether problem is reproducible on demand

- Your contact information: voice, fax, and e-mail

Other general feedback is also appreciated.


* FOR ON-SITE TRAINING INFORMATION *

Contact McAfee Customer Service (800) 338-8754.


* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use McAfee's
products, we have established an Agents program to 
provide service, sales, and support for our products 
worldwide. For a listing of agents, see the file 
AGENTS.TXT, where applicable, or contact McAfee
Customer Service for agents near you.



