    Release Notes for McAfee(R) WebShield(R) SMTP
              Version 4.5 MR1a + P0803
                    HotFix 218014
           Copyright (C) 2005 McAfee, Inc.
                 All Rights Reserved


==========================================================

HotFix Release:   23rd March 2005

This release was developed and tested with:

- WebShield SMTP:      4.5 MR1a and Patch WSP0803
- DAT Version:         4440, Mar 4th 2005
- Engine Version:      4.3.20
- Alert Manager:       4.7

Make sure you have installed these versions before
using this release. If you have the old Alert Manager 4.5 
please install the new Alert Manager 4.7 and then proceed 
to install this HotFix.

==========================================================


Thank you for using McAfee (R) WebShield SMTP
software. This file contains important information
regarding this release. We strongly recommend that
you read the entire document.


The attached files are provided as is, and with no
warranty either expressed or implied as to their
suitability for any particular use or purpose.
McAfee, Inc. assumes no liability for damages
incurred either directly or indirectly as a result
of the use of these files, including but not limited
to the loss or damage of data or systems, loss of
business or revenue, or incidental damages arising
from their use. HotFix files should be applied only
on the advice of McAfee Technical Support, and only
when you are actually experiencing the issue being
addressed by the HotFix. HotFix files should not be
proactively applied in order to prevent potential
product issues. You are responsible for reading and
following all instructions for preparation,
configuration, and installation of the HotFix files.
HotFix files are not a substitute or replacement for
product Service Packs which may be released by
McAfee, Inc. It is a violation of your software
license agreement to distribute or share these files
with any other person or entity without written
permission from McAfee, Inc. Further, posting of
McAfee Patch files to publicly available Internet
sites is prohibited. McAfee, Inc. reserves the right
to refuse distribution of Patch files to any company
or person guilty of unlawful distribution of McAfee
software products. Questions or issues with McAfee
HotFix files should be directed to McAfee Technical
Support.



__________________________________________________________
WHAT'S IN THIS FILE

-   About This Release
   -   Purpose
   -   Resolved Issues
   -   Known Issues
   -   Files Included with This Release
-   Installation
   -   Installation Requirements
   -   Installation Steps
   -   Testing Your Installation
   -   Removing This Release
-   Participating in the McAfee Beta Program
-   Contact Information
-   Copyright & Trademark Attributions
-   License



IMPORTANT NOTE

    This HotFix requires that you have installed
    McAfee WebShield SMTP MR1a with Patch WSP0803
    and Alert Manager 4.7 software before installing
    this HotFix. You can download the Maintenance
    Release (MR1a) from the McAfee web site at:

       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

    You will need to supply your customer grant
    number or user name and password to access this
    site.


__________________________________________________________
ABOUT THIS RELEASE

PURPOSE

This HotFix includes an updated archive file for
use with McAfee WebShield SMTP MR1a and Patch WSP0803 software
with Alert Manager 4.7. This new file resolves the issues 
described in the section "RESOLVED ISSUES".


RESOLVED ISSUES

In addition to the resolved issues listed in the
Readme of Patch WSP0803 the following issues have
also been resolved.

1) The Mailscan process detects e-mail messages with
disclaimer text as corrupt.

2) Resolves an issue on update failure where
FRONTEND.EXE hangs and all further updates fail
unless the services are restarted.

3) Resolves an issue where WebShield SMTP was not
detecting a virus which had multi-part alternative
MIME ("W32/MyWife.a@MM" virus).

4) Resolves an issue with detecting "JS/Zerolin" virus.

5) Resolves the issue that messages infected with "bagle"
virus get stuck in the "In folder" of WebShield SMTP 4.5
patch 8, and it causes the software to hang with the alert
manager service at 100% cpu utilization and the Mailscan 
process becomes unresponsive.

6) Resolves the issue that e-mail messages detected with the
"W32/Bagle" virus and its variants are sent as blank e-mails.
Webshield SMTP did not replace the attachment with a warning.txt
as usual. In addition, the entire header (except the 
sender information) is removed from the e-mail.

7) Resolves the issue that a certain message sample causes the
Mailscan process to continuously hang and eventually crash the 
Mailscan process.


KNOWN ISSUES

Installing this HotFix has the following impact on
the other components:

1.  This HotFix will support and interact with the
    new Alert Manager (AM) 4.7 service. Therefore it
    is mandatory that AM 4.7 be installed before
    applying this HotFix.

2.  While upgrading to AM 4.7 from AM 4.5 do not
    stop the Outbreak Manager Services. Simply
    double-click the AM 4.7 setup.exe and it should
    take care of the AM 4.7 installation / upgrade.

3.  Do not manually remove the McPal Folder located
    at:

    C:\ProgramFile\CommonFiles\NetworkAssociates\McPal

    This folder has some files that are necessary
    for Outbreak Manager to work with AM 4.7.

4.  Users may not get alerts for certain types of
    events. If this happens, you may need to change
    either the priority levels for those messages or
    change the AM configurations for generating
    those messages (including those for
    informational messages). This can be done
    through the AM Program Menu options. The AM
    priority settings are not mandatory because
    different users like to be alerted differently
    based on priority levels.

5.  Base64 Encoded E-Mails with disclaimer text are
    delivered to the recipient without being flagged as
    corrupt. However the disclaimer text is sent as
    it is without any decoding/encoding. This is as
    designed and is the standard behavior of mail clients
    and other Mail Transfer Agents.

FILES INCLUDED WITH THIS RELEASE

This release consists of a package called
HF218129.ZIP, which contains the following files:

      	FRONTEND.exe =
            	This is file that handles the GUI part
            	of the application.
      	MAILFG.exe   =
	        This file deals with configuration
                maintainence, update and other related
                services for WebShield SMTP.
	MAILSCAN EXE =
	        This is the main NT service file which
        	scans e-mail messages for viruses.
	CONFLT.dll   =
		Rule manager for WebShield SMTP.
	ePOAgentHandler.dll =
		The ePO Agent Handler.
	EVENTLOGMSG.dll =
	        Logger file-creates the logs for
        	WebShield SMTP services.
	EventWrapperU.dll
		Eventing DLL in Unicode.
	INVCLN32.dll =
		Utility files for Win32.
	MAKESERIAL.dll =
		Product Serial generator
	OLUS0409.dll =
		Olympus wrapper DLL
	OLUSCONF.dll =
		Olympus engine config wrapper
	OLUSLIB.dll =
		Olympus wrapper DLL
	PREFERENCES.dll =
		WebShield WSMTP user preferences
	WS403UPGRADER.dll =
		WebShield WSMTP update component
	WS45BETALOCATOR.dll =
		Beta tryer for WebShield SMTP
	WSSMTPePO.dll =
		WebShield SMTP ePO wrapper
	WSSMTPOb.dll =
		WebShield SMTP Outbreak wrapper
	AMCorrupt.reg =
		Registry Key Update File.

__________________________________________________________
INSTALLATION

INSTALLATION REQUIREMENTS

The McAfee WebShield SMTP 4.5 MR1a Software with
Patch WSP0803 and Alert Manager 4.7 must be applied
on your system before installing this HotFix.

IMPORTANT NOTES:

-   This HotFix does not work with earlier versions
    of McAfee WebShield SMTP software and Alert
    Manager 4.5.

-   Once Alert Manager 4.7 is installed it cannot be
    rolled back to Alert Manager 4.5. So if this
    HotFix is installed, it cannot be rolled back.

-   The account used to install the HotFix must have
    the change rights to the temporary location used
    for expanding the HF218014.ZIP file.

INSTALLATION STEPS

1.  If you still have Alert Manager(AM) 4.5,upgrade
to AM 4.7, then continue to install this HotFix.Please 
see the KNOWN ISSUES section of this document for tips 
on how to upgrade to AM 4.7.

2.  Unzip the file HF218014.ZIP to a temporary location 
on your system.

3.  Ensure that the WebShield MR1a Configuration Console
and the WebShield MR1a Status Monitor are both closed.

4.  Open the Windows Services control panel and stop
these services:

"Network Associates WebShield SMTP MailCfg"
"Network Associates WebShield SMTP MailScan"
"Network Associates Outbreak Manager"

5.  Make a copy of all the original .dll and
.exe files listed in the FILES INCLUDED WITH THIS
RELEASE section. If you have installed WebShield SMTP MR1a 
in its default location, you will find these files at:

C:\Program Files\Network Associates\TVD\WebShield
SMTP

You can either rename the existing files with the
.BAK extension, or move the files to a different
location on your hard drive. Copy the new files
from the temporary folder you created in Step 2
to:

C:\Program Files\Network Associates\TVD\WebShield
SMTP

6.  Return to the Services control panel and start
these services:

"Network Associates WebShield SMTP MailCfg"
"Network Associates WebShield SMTP MailScan"
"Network Associates Outbreak Manager"

7.  Double-click on AMCorrupt.Reg and check that
the file registers successfully.

8.  Restart the "McAfee Alert Manager Services".


TESTING YOUR INSTALLATION

You can test the operation of the software by
scanning for genuine messages that have disclaimer
text and check that these mails are not being
reported as corrupt.


REMOVING THIS RELEASE

If this HotFix has been installed after Build
Version Number 393 and above, then this HotFix can
be rolled back by overwriting the existing files
with the backed up copy of the corresponding files
as was done from step 4 onwards.

If you have upgraded to AM 4.7 and applied this HotFix,
then the HotFix / AM 4.7 cannot be rolled back.If you 
need to go back to the older version of WebShield SMTP,
the product has to be reinstalled again.

Note:

   1. To check for the Build Version Number open the
      WebShield SMTP Console. In the Information Tab
      read the value against the Version Number 4.5
      MR1aP0803.XXX  This XXX tells you the Build
      Version Number.
   2. We recommend that you do NOT remove the HotFix files
      from your WebShield installation once you install them.
      If you reinstall your WebShield SMTP software, we 
      recommend that you also reinstall the HotFix.


__________________________________________________________
PARTICIPATING IN THE MCAFEE BETA PROGRAM

To download new beta software or to read about the
latest beta information, visit the McAfee beta web
site located at:
       http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm

To submit beta feedback on any McAfee product, send
e-mail to:
       mcafee_beta@mcafee.com

McAfee is devoted to providing solutions based on your input.


__________________________________________________________
CONTACT INFORMATION

SECURITY HEADQUARTERS:  AVERT
(Anti-Virus & Vulnerability Emergency Response
Team)
    Home Page
       http://www.mcafeesecurity.com/us/security/home.asp

    Virus Information Library
       http://vil.mcafeesecurity.com/

    AVERT WebImmune & Submit a Virus Sample
       https://www.webimmune.net/default.asp

    AVERT DAT Notification Service
       http://vil.mcafeesecurity.com/vil/join-DAT-list.asp


DOWNLOAD SITE
    Home Page
       http://www.mcafeesecurity.com/us/downloads/

    Anti-Virus DAT File and Engine Updates
       http://www.mcafeesecurity.com/us/downloads/updates/

       ftp://ftp.mcafee.com/pub/antivirus/datfiles/4.x

    Anti-Spam Rules File and Engine Updates
       ftp://ftp.nai.com/spamdefs/1.x/

    Product Upgrades
       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

    Valid grant number required (contact Customer
    Service)


TECHNICAL SUPPORT
    Home Page
       http://www.mcafeesecurity.com/us/support/technical_support

    KnowledgeBase Search
       https://knowledgemap.mcafeesecurity.com/phpclient/homepage.aspx

    PrimeSupport Service Portal (Logon credentials
    required)
       https://mysupport.mcafeesecurity.com

    PSVANS  PrimeSupport Vulnerability Alert
    Notification Service
       http://www.mcafeesecurity.com/us/support/primesupport/


CUSTOMER SERVICE
    US, Canada, and Latin America toll-free:
   Phone:     +1-888-VIRUS NO or +1-888-847-8766
              Monday-Friday, 8am-8pm, Central Time

   E-mail:    https://secure.nai.com/us/forms/support/request_form.asp

   Web:       http://www.mcafeesecurity.com/us/support/default.asp


MCAFEE BETA PROGRAM
    Download Site:
       http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm

    E-mail to Submit Beta Feedback:
       mcafee_beta@mcafee.com


TRAINING: MCAFEE UNIVERSITY
       http://www.mcafeesecurity.com/us/services/education/mcafee/university.htm


WORLDWIDE OFFICES
    For addresses and phone numbers of worldwide
    offices:

       http://www.mcafeesecurity.com/us/contact/home.htm


_____________________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

Copyright (C) 2005 McAfee, Inc. All Rights Reserved.
No part of this publication may be reproduced,
transmitted, transcribed, stored in a retrieval
system, or translated into any language in any form
orbyany means without the written permission of
McAfee, Inc., or its suppliers or affiliate
companies.


TRADEMARKS

ACTIVE FIREWALL, ACTIVE SECURITY, ACTIVESECURITY
(AND IN KATAKANA), ACTIVESHIELD, CLEAN-UP, DESIGN
(STYLIZED E), DESIGN (STYLIZED N), ENTERCEPT,
EPOLICY ORCHESTRATOR,  FIRST AID, GROUPSHIELD,
GROUPSHIELD (AND IN KATAKANA),  INTRUSHIELD,
INTRUSION PREVENTION THROUGH INNOVATION,  MCAFEE,
MCAFEE (AND IN KATAKANA), MCAFEE AND DESIGN,
MCAFEE.COM, MCAFEE VIRUSSCAN, NA NETWORK ASSOCIATES,
NET TOOLS, NET TOOLS (AND IN KATAKANA), NETSCAN,
NETSHIELD, NETWORK ASSOCIATES, NUTS & BOLTS, OIL
CHANGE, PRIMESUPPORT, SPAMKILLER, THREATSCAN, TOTAL
VIRUS DEFENSE, VIREX, VIRUS FORUM, VIRUSCAN,
VIRUSSCAN, VIRUSSCAN (AND IN KATAKANA), WEBSCAN,
WEBSHIELD, WEBSHIELD (AND IN KATAKANA), YOUR
NETWORK. OUR BUSINESS.  are registered trademarks or
trademarks of McAfee, Inc. and/or its affiliates in
the US and/or other countries.  The color red in
connection with security is distinctive of McAfee
brand products.  All other registered and
unregistered trademarks herein are the sole property
of their respective owners.


_____________________________________________________
LICENSE

LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE
LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU
PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND
CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF
YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE
ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED
LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A
BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE
AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED
THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF
THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE
PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A
FULL REFUND.


LICENSE ATTRIBUTIONS

This product includes or may include:
*Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
*Cryptographic software written by Eric A. Young
and software written by Tim J. Hudson. *Some
software programs that are licensed (or sublicensed)
to the user under the GNU General Public License
(GPL) or other similar Free Software licenses which,
among other rights, permit the user to copy, modify
and redistribute certain programs, or portions
thereof, and have access to the source code. The GPL
requires that for any software covered under the GPL
which is distributed to someone in an executable
binary format, that the source code also be made
available to those users. For any such software
covered under the GPL, the source code is made
available on this CD. If any Free Software licenses
require that McAfee provide rights to use, copy or
modify a software program that are broader than the
rights granted in this agreement, then such rights
shall take precedence over the rights and
restrictions herein.  *Software originally written
by Henry Spencer, Copyright 1992, 1993, 1994, 1997
Henry Spencer.  *Software originally written by
Robert Nordier, Copyright (C)1996-7 Robert Nordier.
*Software written by Douglas W. Sauder.  *Software
developed by the Apache Software Foundation
(http://www.apache.org/). A copy of the license
agreement for this software can be found at
www.apache.org/licenses/LICENSE-2.0.txt.
*International Components for Unicode ("ICU")
Copyright (C)1995-2002 International Business
Machines Corporation and others.  *Software
developed by CrystalClear Software, Inc., Copyright
(C)2000 CrystalClear Software, Inc. *FEAD(R)
Optimizer(R) technology, Copyright Netopsystems AG,
Berlin, Germany. *Outside In(R) Viewer Technology
(C)1992-2001 Stellent Chicago, Inc. and/or Outside
In(R) HTML Export, (C)2001 Stellent Chicago, Inc.
*Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C)1998, 1999, 2000.
*Software copyrighted by Expat maintainers.
*Software copyrighted by The Regents of the
University of California, (C)1989.  *Software
copyrighted by Gunnar Ritter.  *Software
copyrighted by Sun Microsystems(R), Inc. (C)2003.
*Software copyrighted by Gisle Aas. (C)1995-2003.
*Software copyrighted by Michael A. Chase,
(C)1999-2000.  *Software copyrighted by Neil
Winton, (C)1995-1996.  *Software copyrighted by
RSA Data Security, Inc., (C)1990-1992.  *Software
copyrighted by Sean M. Burke, (C)1999, 2000.
*Software copyrighted by Martijn Koster, (C)1995.
*Software copyrighted by Brad Appleton,
(C)1996-1999.  *Software copyrighted by Michael G.
Schwern, (C)2001.  *Software copyrighted by Graham
Barr, (C)1998.  *Software copyrighted by Larry
Wall and Clark Cooper, (C)1998-2000.  *Software
copyrighted by Frodo Looijaard, (C)1997.
*Software copyrighted by the Python Software
Foundation, Copyright (C)2001, 2002, 2003. A copy
of the license agreement for this software can be
found at www.python.org.  *Software copyrighted by
Beman Dawes, (C)1994-1999, 2002.  *Software
written by Andrew Lumsdaine, Lie-Quan Lee, Jeremy G.
Siek (C)1997-2000 University of Notre Dame.
*Software copyrighted by Simone Bordet & Marco
Cravero, (C)2002.  *Software copyrighted by
Stephen Purcell, (C)2001.  *Software developed by
the Indiana University Extreme! Lab
http://www.extreme.indiana.edu/).  *Software
copyrighted by International Business Machines
Corporation and others, (C)1995-2003.  *Software
developed by the University of California, Berkeley
and its contributors.  *Software developed by Ralf
S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/).
*Software copyrighted by Kevlin Henney,
(C)2000-2002.  *Software copyrighted by Peter
Dimov and Multi Media Ltd. (C)2001, 2002.
*Software copyrighted by David Abrahams, (C)2001,
2002. See http://www.boost.org/libs/bind/ bind.html
for documentation.  *Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C)2000.  *Software copyrighted by Boost.org,
(C)1999-2002.  *Software copyrighted by Nicolai M.
Josuttis, (C)1999.  *Software copyrighted by
Jeremy Siek, (C)1999-2001.  *Software copyrighted
by Daryle Walker, (C)2001.  *Software copyrighted
by Chuck Allison and Jeremy Siek, (C)2001, 2002.
*Software copyrighted by Samuel Krempp, (C)2001.
See http://www.boost.org for updates, documentation,
and revision history.  *Software copyrighted by
Doug Gregor (gregod@cs.rpi.edu), (C)2001, 2002.
*Software copyrighted by Cadenza New Zealand Ltd.,
(C)2000.  *Software copyrighted by Jens Maurer,
(C)2000, 2001.  *Software copyrighted by Jaakko
Jrvi (jaakko.jarvi@cs.utu.fi), (C)1999, 2000.
*Software copyrighted by Ronald Garcia, (C)2002.
*Software copyrighted by David Abrahams, Jeremy
Siek, and Daryle Walker, (C)1999-2001.  *Software
copyrighted by Stephen Cleary (shammah@voyager.net),
(C)2000.  *Software copyrighted by Housemarque Oy
<http:// www.housemarque.com>,(C)2001.  *Software
copyrighted by Paul Moore, (C)1999.  *Software
copyrighted by Dr. John Maddock, (C)1998-2002.
*Software copyrighted by Greg Colvin and Beman
Dawes, (C)1998, 1999.  *Software copyrighted by
Peter Dimov, (C)2001, 2002.  *Software copyrighted
by Jeremy Siek and John R. Bandela, (C)2001.
*Software copyrighted by Joerg Walter and Mathias
Koch, (C)2000-2002.

V3.1.2
