     What's New in VirusScan for OS/2 v4.0.2 (4009)
  Copyright (c) 1998-1999 by Network Associates, Inc.,
   and its Affiliated Companies. All Rights Reserved.


Thank you for using VirusScan for OS/2. This What's New file
contains important information regarding the current version
of this product. Network Associates strongly recommends that
you read the entire document.

Network Associates welcomes your comments and suggestions.
Please use the information provided in this file to contact
Customer Care and technical support.

___________________
WHAT'S IN THIS FILE

- New Features
- Known Issues
- Installation
- Frequently Asked Questions
- Documentation
- Contacting Network Associates

____________
NEW FEATURES

1.  A new Network Associates scanning engine is at the heart
    of VirusScan v4.0.2. Created and backed by the combined
    efforts of the McAfee Labs and Dr Solomon anti-virus
    research teams, this engine delivers outstanding virus
    detection and cleaning rates. 

2.  The VShield component included with VirusScan for
    OS/2 now has a native OS/2 graphical user interface.
    This component provides complete on-access scanning
    protection for OS/2 sessions.

3.  This version of VirusScan combines its new VShield
    on-access scanning component with an updated on-demand
    scanner to provide you with complete and powerful
    anti-virus protection for your OS/2 desktop.

4.  The VShield component now has the ability to remove
    viruses from infected files.

5.  VShield adds the ability to perform on-access scan
    operations on floppy disk boot sectors.


* NEW VIRUSES DETECTED *


                  ****IMPORTANT NOTE****

The 4009 .DAT files included with this release of VirusScan
for OS/2 are compatible with Network Associates anti-virus
products that use scan engine versions 4.0.xx only. These
.DAT files will NOT work with v3.x or v2.x scan engines.
Network Associates recommends that you upgrade to the latest
version of the v4.x.xx engine for optimal virus detection
and repair.


                         ****

* NEW DETECTIONS *

With this release, the new scanning engine detects a total
of about 40,200 viruses and variants, Trojan horse files,
and other malicious software. Of this number these 135
viruses are new:

AD.436
AD.GR
AGIPLAN.GR
ALICIA.6554
ANAX.OW
ANSIBOMBKIT
ATEST.300
BASHME.4984
BASHME.6800
BIFURCATOR.1648
BLADE
BLAGG.GR
BOOTDR117
BOOTDR118
BOOTDR119
BOOTDR120
CLAW.2553
CLAW.INI
CLME.MING.DR
CODY.GR
DG.GR
DIC.858
DIE.GR
DUTCH TINY.GR1
DUTCH TINY.GR2
EMAN.457
FIST.407
FONX
FREEMUN.GR
GHOST.792
GOLD BUG.DR
GUNIA
HALCO.2901
HIDER
HLL.CMP.5216
HLL.OW.2229
HLL.OW.2673
HLL.OW.2688
HLL.OW.4368
HLL.OW.4505
HLLP.7102
HLLP.ALE.GR
HLLT.10594
HLLT.6014
HLLT.HUNGV.4949
HLLT.MACBETH.5894
HLLW.6010
HTTM.263
ITHAQUA.MP.8542
JOAN.767
JUANG
KIKI
LACORE.974
LAWINE.2449
LEO.328.DAM
MACARONI.GR
MAYAK.DR
MISSION
MPC4.649
MPCA.438
MPCB.546B
NABOB
ONTARIO.MP
ORION MOBIUS.DAM
ORION MOBIUS.GR
PARIAH
PC7
PICARD.1755.DR
PIXEL.DR
POFU.MP.5998
PREDATOR.DR
PREDATOR.GR
QDEL23
QGROAN.6809
RES.MP.2879
RETRO.2352
RTP.4838DR
RUNWILD
SCITZO.408
SCORN.CMP.289
SCORN.OW
SKIN
SOP
SPING
SPL.OW
SPYSENDER
TAO.975
TBRAIN
THCKIT
TIC.GR
TIGER.709
TITUS
TOUR
TUNNELER.811
UNDERCUT.GR
URLSNOOP
VIRDEMO.6257
VIVA.695
W32/PARVO
W32/REDEMPTION
W97M/EXAMPLE
W97M/FIVEA
W97M/FOOTER
W97M/HALFCROSS
W97M/MARKER
W97M/MERCADO
W97M/PRI
W97M/SMAC.C
W97M/SUGAR
W97M/THAO
W97M/UCK
W97M/UMP.KIT
W97M/VAMP.KIT
W97M/WALKER
W97M/WATERED
W97M/ZMK.O
WIN95/TENTA
WINNT/REMEXP (AKA REMOTEEXPLORER)
WM/CSF
WM/KOP
WM/NOMEJ
WM/VANOCE
WOOD GOBLIN.DD
X97M/HALFCROSS
X97M/LAROUX.HF
XANY.287
XM/LAROUX.FU
XM/LAROUX.HF
XMOVIE
XRF
YAWDY.825
YAWL.969
YELET.GR
YOKE.239
ZOMBIE.17654

____________
KNOWN ISSUES

1.  To view the VirusScan log file, you must open it in a
    separate text editor that can read standard ASCII
    text.

2.  If you are running a DOS or Windows session within OS/2,
    VShield will not scan some network drives, including
    Novell NetWare drives. To scan these drives over the
    network, you must return to the OS/2 graphical user
    interface or command line.

3.  If you are running OS/2 Warp 3 and have a full-screen
    DOS, full-screen OS/2 command-prompt, or full-screen
    Win-OS/2 session running when VShield detects a virus,
    VShield will not display an alert message. It will,
    however, take the action you designated to respond to
    the virus.
  

____________
INSTALLATION

* INSTALLING VIRUSSCAN FOR OS/2 *

SYSTEM REQUIREMENTS

VirusScan for OS/2 runs under both Warp 3 and Warp 4. The
system requirements below list the particular configurations
necessary to run VirusScan under each OS/2 version.

To install and run VirusScan for OS/2 on Warp 4 systems,
your computer must:

  * Run OS/2 Warp 4 with the Security Enabling System
    component installed and enabled. You can install the
    Security Enabling System as an Optional System
    Component during your OS/2 installation. You can then
    enable SES with the VirusScan for OS/2 installation
    utility.

    Once you have SES installed, you can use the VirusScan
    for OS/2 installation utility to enable it. Note that
    to use the installation utility to enable SES, you must
    also choose to install VShield. If you already have SES
    installed and enabled on your system, you can choose to
    install VShield without enabling SES.

    Alternatively, you can enable SES separately by editing
    your system's CONFIG.SYS file. Consult "Enabling SES"
    later in this file to learn how to enable SES yourself.

    WARNING: You MUST have SES installed on your system in
    order for the installation utility to enable it
    properly. If you do not have SES installed, and you
    try to enable it during installation, the installation
    utility will prevent Program Manager from running and
    prevent your system from completing its startup. The
    installation utility CANNOT check for the presence of
    SES software on your computer.

  * Have OS/2 FixPak 4 installed.

To install and run VirusScan's VShield component on Warp 3
systems, your computer must:

  * Run OS/2 Warp 3 with the Security Enabling System (SES)
    component installed and enabled. The SES component, in
    turn, requires OS/2 FixPak 17 (XR_W017). You can obtain
    both SES and FixPak 17 from IBM, or download it from
    the IBM website at ftp://ftp.software.ibm.com.

    NOTE: If you have FixPak versions later than FixPak 17
    installed, you must remove them, install FixPak 17 and
    the SES FixPak, then reinstall later-version FixPaks
    in order to correctly enable SES.

    Once you have SES installed, you can use the VirusScan
    for OS/2 installation utility to enable it. Note that
    to use the installation utility to enable SES, you must
    also choose to install VShield. If you already have SES
    installed and enabled on your system, you can choose to
    install VShield without enabling SES.

    WARNING: You MUST have SES installed on your system in
    order for the installation utility to enable it
    properly. If you do NOT have SES installed, and you
    try to enable it during installation, the installation
    utility will prevent Program Manager from running and
    prevent your system from completing its startup. The
    installation utility CANNOT check for the presence of
    SES software on your computer.

    Alternatively, consult "Enabling SES" later in this file
    to learn how to enable SES yourself.

  * Have OS/2 FixPak 26 or later installed. You must install
    FixPak 26 or any later FixPak after you install the SES
    component. You can obtain the necessary FixPak software
    from IBM, or download it from the IBM website at
    ftp://ftp.software.ibm.com.


ENABLING SES

Because VirusScan's VShield component relies on IBM's SES
component to give it the complete file access it needs to
check your system for viruses, you must enable SES before
you install VShield. IBM has versions of SES available
for use with OS/2 Warp 3 and OS/2 Warp 4.

If you do not already have SES enabled, you can have
the VirusScan for OS/2 installation utility enable it
for you during installation. See "Installation Steps"
later in this file for details.

To enable SES yourself, you must add configuration data to
your CONFIG.SYS file. CNFGSES.TXT, a separate text file
included with this VirusScan distribution, is a model
CONFIG.SYS file from which you can copy the necessary
configuration data. Once you edit your CONFIG.SYS file,
restart your computer to load the necessary configuration
data.


INSTALLATION STEPS

To install this version of VirusScan for OS/2, follow these
steps:

1.  Verify that you have installed and enabled the OS/2
    Security Enabling System component on your computer.
    To learn how to do so, see the "Enabling SES" earlier
    in this file. 

2.  Create a temporary directory on your hard disk or on a
    disk available on your network, then download the 
    VirusScan for OS/2 installation files from the Network
    Associates website to the directory you created.

    Next, use a utility that can extract files from .zip
    archives to uncompress the files you downloaded into
    the directory you created.

3.  Locate the INSTALL.EXE file in your temporary directory,
    then double-click it to begin your installation.

4.  Follow the instructions shown in the installation 
    panels to continue. You can choose to install the
    VirusScan on-demand scanner, the VShield on-access
    scanner, or both.

    NOTE: If you choose to install VShield, you MUST
    have SES installed on your computer for it to work
    properly. If you have SES installed on your system,
    but not enabled, you should choose to enable SES
    through the VirusScan installation utility.

    WARNING: If you choose to enable SES but do not have
    it already installed on your computer, the
    installation utility will prevent Program Manager
    from running and your system from completing its
    startup. The installation utility CANNOT check for
    the presence of SES software on your computer. Be
    sure you have followed all of the steps shown in the
    previous sections before you continue with your
    installation.

5.  When you finish your installation, restart your
    computer.



* PRIMARY PROGRAM FILES FOR VIRUSSCAN FOR OS/2 *

Files located in the default installation directory
C:\NETA\VSCANOS2:
===================================================

               APIO32.DLL = VShield scanning engine for OS/2
                CLEAN.DAT = Virus definition file
               COMMON.PKG = Package file for OS/2
                            installation utility
                CRYER.EXE = VShield alert message generation
                            utility
                CRYER.HLP = Help file for configuration
                            program
             EPFIEXTS.DLL = OS/2 installation support file
             EPFIHELP.INF = IBM Information file used together
                            with the OS/2 Information
                            Presentation Facility
             EPFIHPLB.HLP = IBM help file, similar to
                            EPFIHELP.INF 
             EPFIICIS.ICO = IBM installation support file;
                            lists files for uninstallation
              EPFIMSG.MSG = IBM localization file
             EPFINSTS.EXE = IBM installation and maintenance
                            program; used for uninstalling
              EPFIPII.DLL = OS/2 installation support file
             EPFIPRCS.EXE = OS/2 installation support file
             EPFIRSBK.DLL = OS/2 installation support file
             EPFIUPK2.EXE = IBM unpacking utility
             GDDAEMON.EXE = VShield scanning daemon; allows
                            interaction between the VShield
                            filter driver and the scanning
                            engine
             HELPFILE.INF = VirusScan for OS/2 help file
              LICENSE.DAT = License compliance checker
             MESSAGES.DAT = Localization file
                NAMES.DAT = Virus names list
                NOV16.DLL = Network message file for Novell
                            networks
                NOV32.DLL = Network message file for Novell
                            networks
             OS2GUARD.DSC = Package description file for
                            OS/2 installation utility
             OS2GUARD.ICF = Catalog file for OS/2
                            installation utility; lists
                            files for uninstallation
             OS2GUARD.MIF = Desktop Management Interface
                            (DMI) Management Information
                            Format file
             OS2GUARD.PKG = Package file for OS/2
                            installation utility
             OS2GUARD.RSP = Automated installation response
                            file for Netview
              OS2SCAN.EXE = VirusScan for OS/2 command-line
                            program file
              PACKING.LST = packing list for validation
               PMSCAN.EXE = VirusScan for OS/2 on-demand
                            scanning component used with
                            graphical user interface
             PTOOLKIT.EXE = VirusScan for OS/2 on-demand
                            graphical user interface file
             PTOOLKIT.HLP = VirusScan for OS/2 help file 
               README.1ST = Network Associates license
                            document
                 SCAN.DAT = Virus definitions file
             VALIDATE.EXE = Network Associates validation
                            utility
             WHATSNEW.TXT = This document

Files located in the OS/2 directory:
====================================

              VSHIELD.FLT = VShield filter driver; enables
                            file access for scanning engine



* TESTING YOUR INSTALLATION *

The Eicar Standard AntiVirus Test File is a combined effort
by anti-virus vendors throughout the world to implement one
standard by which customers can verify their anti-virus
installations.

To test your installation, copy the following line into its
own file, then save the file with the name EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

The file size will be 69 or 70 bytes.

Next, start your anti-virus software and allow it to scan
the directory that contains EICAR.COM. When your software
scans this file, it will report finding the
EICAR virus.

Note that this file is NOT A VIRUS. Delete the file
when you have finished testing your installation to
avoid alarming unsuspecting users.


* UNINSTALLING VIRUSSCAN FOR OS/2 *

To remove VirusScan for OS/2 from your computer, follow
these steps:

1.  Locate and open the VirusScan folder on your computer.
    By default, the VirusScan installation utility places
    this folder on the OS/2 desktop.

2.  Double-click the VirusScan Uninstaller program icon
    to open it.

    The Uninstaller window appears.

3.  Choose Delete from the Action menu.

    A dialog box appears, where you can choose the
    components you want to remove.

4.  Click Select All to choose all VirusScan components.

5.  Click Delete to remove all VirusScan components, then
    confirm your action when the utility prompts you to so
    so.

    The uninstaller will remove each VirusScan component
    and delete the VirusScan folder from your OS/2 desktop.

6.  Restart your computer to complete the uninstallation
    and return your computer to its previous state.


__________________________
FREQUENTLY ASKED QUESTIONS

Q:  I've installed VShield, but I don't see an icon on my
    desktop? How do I configure the program?

A:  VShield for OS/2 runs in a minimized state. By default,
    programs that run in this state in OS/2 appear in the
    Minimized Window viewer, not on the desktop. To see the
    VShield icon, first open the OS/2 System icon, then
    open the Minimized Window Viewer. You can then start
    the VShield configuration utility to choose your
    scanning and other options.

    To configure your OS/2 system to display minimized
    programs as icons on your desktop, you must change
    your system setup. To do so, open the System Setup
    icon, then open the System icon.

    In Warp 3 systems, this opens the System - Settings
    dialog box. In Warp 4 systems, this opens the System -
    Properties dialog box. In either case, click the Window
    tab to display the correct property page, then select
    the Minimize Window to Desktop button in the Minimize
    Button Behavior area. Next, click the close box to save
    your settings and close the dialog box.

_____________
DOCUMENTATION

For more information, refer to the users guides for each
product included on the CD-ROM or available from Network
Associates electronic services. Each product user's guide
is saved in Adobe Acrobat Portable Document Format (.PDF).
You can view and print this document with Adobe's Acrobat
Reader. PDF files can include hypertext links and other
navigation features to assist you in finding answers to
questions about your Network Associates product.

To download Adobe Acrobat Reader from the World Wide Web,
visit Adobe's website at:

http://www.adobe.com/prodindex/acrobat/readstep.html

To download documentation for Network Associates anti-virus
software, visit the Network Associates FTP site at:

ftp://www.nai.com/pub/manuals/total_virus_defense

Additional contact information appears in the following
section.

Documentation feedback is welcome. Send e-mail to
tvd_documentation@nai.com.

_____________________________
CONTACTING NETWORK ASSOCIATES

On December 1, 1997, McAfee Associates merged with
Network General Corporation, Pretty Good Privacy, Inc.,
and Helix Software, Inc. to form Network Associates, Inc.
The combined Company subsequently acquired Dr Solomon's
Software and CyberMedia, Inc.

Network Associates continues to market and support the
product lines from each of the former entities. You may
direct all questions, comments and technical support
requests to the Network Associates Customer Care department
at any of the addresses or phone numbers listed below.

Contact the Network Associates Customer Care
department at: 

1.  Phone (408) 988-3832
    Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time

2.  Fax (408) 970-9727
    24-hour, Group III Fax 

3.  Fax-back automated response system (408) 346-3414

 
Send correspondence to any of the following Network
Associates locations:
  
     Network Associates Corporate Headquarters  
     3965 Freedom Circle
     McCandless Towers   
     Santa Clara, CA 95054

     Phone numbers for corporate-licensed customers:
     Phone: (408) 988-3832
     Fax:   (408) 970-9727

     Phone numbers for retail-licensed customers:
     Phone: (972) 278-6100
     Fax:   (408) 970-9727

Network Associates offices outside the United States:

     Network Associates Australia
     Level 1, 500 Pacific Highway
     St. Leonards, NSW
     Sydney, Australia 2065
     Phone: 61-2-8425-4200
     Fax:   61-2-9439-5166 

     Network Associates Austria
     Pulvermuehlstrasse 17
     Linz, Austria
     Postal Code A-4040
     Phone: 43-732-757-244
     Fax:   43-732-757-244-20

     Network Associates Belgium
     Bessenveldtstraat 25a
     Diegem, Belgium - 1831
     Phone: 32-3-716-4070
     Fax:   61-2-716-4770

     Network Associates do Brasil
     Rua Geraldo Flausino Gomez 78
     Cj. - 51 Brooklin Novo - So Paulo
     SP - 04575-060 - Brasil
     Phone:  (55 11) 5505 1009
     Fax:    (55 11) 5505 1006

     Network Associates Canada
     139 Main Street, Suite 201
     Unionville, Ontario
     Canada L3R 2G6
     Phone: (905) 479-4189
     Fax:   (905) 479-4540

     Network Associates People's Republic of China
     New Century Office Tower, Room 1557
     No. 6 Southern Road Capitol Gym 
     Beijing
     People's Republic of China 100044
     Phone: 86 10 6849-2650
     Fax:   86 10 6849-2069

     NA Network Associates Oy
     Sinikalliontie 9, 3rd Floor
     02630 Espoo
     Finland
     Phone: 358 9 5270 70
     Fax:   358 9 5270 7100

     Network Associates France S.A.   
     50 Rue de Londres    
     75008 Paris     
     France
     Phone: 33 1 44 908 737
     Fax:   33 1 45 227 554  

     Network Associates GmbH
     Ohmstrae 1
     D-85716 Unterschleiheim
     Deutschland
     Phone: 49 (0)89/3707-0
     Fax:   49 (0)89/3707-1199


     Network Associates Hong Kong
     19th Floor, Matheson Centre
     3 Matheson Way
     Causeway Bay
     Hong Kong 63225
     Phone: 852-2832-9525
     Fax:   852-2832-9530

     Network Associates Srl
     Centro Direzionale Summit     
     Palazzo D/1
     Via Brescia, 28
     20063 - Cernusco sul Naviglio (MI)
     ITALY  
     Phone: 39 (0)2 9214 1555   
     Fax:   39 (0)2 9214 1644

     Network Associates Japan, Inc.
     Toranomon 33 Mori Bldg.
     3-8-21 Toranomon Minato-ku
     Tokyo 105-0001 Japan
     Phone: 81 3 5408 0700
     Fax:   81 3 5408 0780

     Network Associates Latin America
     150 South Pine Island Road, Suite 205
     Plantation, Florida 33324
     United States
     Phone: (954) 452-1731
     Fax:   (954) 236-8031

     Network Associates de Mexico
     Andres Bello No. 10, 4 Piso
     4th Floor
     Col. Polanco
     Mexico City, Mexico D.F. 11560
     Phone: (525) 282-9180
     Fax:   (525) 282-9183

     Network Associates International B.V.   
     Gatwickstraat 25   
     1043 GL Amsterdam    
     The Netherlands    
     Phone: 31 20 586 6100
     Fax:   31 20 586 6101

     Network Associates Portugal
     Av. da Liberdade, 114
     1269-046 Lisboa
     Portugal
     Phone:  351 1 340 4543
     Fax:    351 1 340 4575

     Net Tools Network Associates South Africa
     Bardev House, St. Andrews
     Meadowbrook Lane
     Epson Downs, P.O. Box 7062
     Bryanston, Johannesburg
     South Africa 2021
     Phone: 27 11 706-1629
     Fax:   27 11 706-1569

     Network Associates South East Asia
     78 Shenton Way
     #29-02
     Singapore 079120
     Phone: 65 222-7555
     Fax:   65 222-7555

     Network Associates Spain
     Orense 4, 4a Planta.
     Edificio Trieste
     28020 Madrid
     Spain
     Phone: 34 91 598 18 00
     Fax:   34 91 556 14 04

     Network Associates Sweden
     Datavgen 3A
     Box 596
     S-175 26 Jrflla
     Sweden
     Phone: 46 (0) 8 580 88 400
     Fax:   46 (0) 8 580 88 405

     Network Associates AG
     Baeulerwisenstrasse 3
     8152 Glattbrugg
     Switzerland
     Phone: 0041 1 808 99 66
     Fax:   0041 1 808 99 77

     Network Associates Taiwan
     Suite 6, 11F
     No. 188, Sec. 5
     Nan King E. Rd.
     Taipei, Taiwan, Republic of China
     Phone: 886-2-27-474-8800
     Fax:   886-2-27-635-5864

     Network Associates International Ltd.
     Minton Place, Victoria Street
     Windsor, Berkshire
     SL4 1EG
     United Kingdom
     Phone: 44 (0)1753 827 500
     Fax:   44 (0)1753 827 520


Or, you can receive online assistance through any
of the following resources:

 1.  Internet E-mail: support@nai.com

 2.  Internet FTP: ftp.nai.com

 3.  World Wide Web: http://support.nai.com

 4.  America Online: keyword MCAFEE

 5.  CompuServe: GO NAI

To provide the answers you need quickly and efficiently,
the Network Associates technical support staff needs
some information about your computer and your software.
Please have this information ready when you call:
                          
 - Program name and version number
 - Computer brand and model
 - Any additional hardware or peripherals connected to
   your computer
 - Operating system type and version numbers
 - Network name, operating system, and version
 - Network card installed, where applicable
 - Modem manufacturer, model, and baud, where applicable
 - Relevant browsers or applications and their version 
   numbers, where applicable
 - How to reproduce your problem: when it occurs, whether
   you can reproduce it regularly, and under what 
   conditions
 - Information needed to contact you by voice, fax, or 
   e-mail

We also seek and appreciate general feedback.

 
* FOR PRODUCT UPGRADES *

To make it easier for you to receive and use Network
Associates products, we have established a reseller's
program to provide service, sales, and support for our
products worldwide. For a listing of resellers, see the
resellers.txt file or contact Network Associates
Customer Care for resellers near you.

 
* FOR REPORTING PROBLEMS *

Network Associates prides itself on delivering a
high-quality product. If you find any problems, please
take a moment to review the contents of this file. If
the problem you've encountered is documented, there is
no need to report the problem to Network Associates.

If you find any feature that does not appear to
function properly on your system, or if you believe
an application would benefit greatly from enhancement,
please contact Network Associates with your suggestions
or concerns.


* FOR ON-SITE TRAINING INFORMATION *

Contact Network Associates Customer Service at
(800) 338-8754.


* NETWORK ASSOCIATES BETA SITE *

Get pre-release software, including .DAT files, through
http://beta.nai.com. You will have access to Public
Beta and External Test Areas. Your feedback will make
a difference.