McAfee VirusScan Enterprise 7.0.0 Users Guide
MCAFEE VIRUSSCAN 7.1.0 (VS) USER'S GUIDE
This document aims to introduce to the users McAfee VS 7.1.0 software and covers information about how to use it in order to get the
users familiarized with its use and operation. In the first section, users will find information about how to access McAfee VS software environment and
use the functions on the McAfee VS 7.1.0 software interface. The second section covers information about the tasks that should be used frequently such as
virus scan, updating virus definitions etc. To get information about how to install the software please click on the link Installation of McAfee Vscan Anti-Virus Software
McAfee VS 7.1.0 Update
The most basic and fundamental information is about how to update the anti-virus software. All anti-virus software are ineffective against the viruses which
emerged after the production and/or installation date of antivirus software. For this reason they must be updated by virus definition files which inform the
software about newly detected viruses. These virus definition files are provided by the companies who produced the antivirus software and distributed from Internet.
The instructions for customizing the program to update itself automatically is given under the AutoUpdate section below. To manually update your software please
click on the Manual Update
McAfee VS 7.1.0 Access
There are a number of ways to access McAfee VS software functions.
- McAfee VS software can be seen as an icon (with a picture of
a shield) on the System Tray. When you right click on this icon, the menu on Figure 1 is displayed with a menu including eight options. "On-Access Scan
Statistis" is selected by default and you can open it by double clicking the mouse.
Note: If the anti-virus software is administered centrally, the departmental coordinator may have disabled the appearence of the icon on the System Tray.
Figure 1- McAfee VS
- Click the Start menu.
- Programs > Network Assoc > VirusScan Console (Windows 9x / 2000)
- All Programs > Network Assoc > VirusScan Console (Windows XP)
On the window displayed, there are 4 tasks that are available by default:
These default tasks are "On-Access Scan", "AutoUpdate", "E-mail Scan" and "Scan All Fixed Disk" and are displayed under "Task".
On-Access Scan:
This task enables the virus scanning of any file that is accessed. All the programs that the user tries to access are initially scanned
with the aid of this task. By scanning the files before they are accessed, the virus software tries to detect the virus patterns beforehand.
The picture in Figure 2 is the picture of the window that is displayed after the "On-Access Scan" task is double clicked. The user sees
two panels in the window. The one on the left contains the icons of "General" and "All Processes". The panel on the right displays the contents of these
icons.
By default, the contents of the "General" icon are displayed. The "General" icon contains all the virus scans and specifies the tasks to
be performed as a result of the virus scans.
Figure 2- McAfee VS console
In the "Scan" box, the actions that the anti-virus program will perform during the startup or shut down are defined. The "General" box
enables the running of "On-Access Scan" feature during the startup of the computer and it enables the task of defining of quarantine directory. "Scan
time" box shows maximum how much seconds will be used to scan the file. The first option is for archive files. The second and third options are applicable
for all the files.
When "Messages" tab is clicked, "Message for local users" is displayed. This box contains the message that will be displayed to the user
using the computer when a virus is detected. If the user does not own the administrator rights, the message contains the tasks that the user can follow
then. The tasks mentioned here may allow the user to delete the file; however, this is not the default setting, because it may be that a virus affecting
the system files may get activated because of a careless or an ignorant user. "Response to network users" box specifies the message that will be
displayed to the users using the computer on a network and this box specifies whether the connection will be maintained or not (Figure 3).
Figure 3- McAfee VS On-Access Scan Features - General Settings
"Report" tab, when clicked due to a detection of virus activity on the computer, enables one to locate the logs that will be created and
specify their maximum sizes. In addition to the virus activity, it records the name of the current user when the virus is detected, the encrypted files
that were not scanned and the summary of the session.
Under "All Process" icon, the "Process" tab includes the rules that will be applied to all the tasks or to the tasks that are classified
as low risk level and high risk level. The default setting applies the rules to all the tasks (Figure 4).
Figure 4- McAfee VS On-Access Scan Features - All Settings
Under "Detection" icon, the "Scan Files" tab specifies by default the setting of scanning the files as they are written on the disc or as
they are read from the disc. In addition to these options, it enables the scanning of network drivers. Under "What to scan" box, all the files are
selected by default. However, according to the user's wishes, the default files and the other files that the user specifies can be scanned. Or, according
to the user's wishes, another special setting can be done to be able to scan only specific type of files. It is recommended that users use the default
settings. "What not to scan" section enables the user to scan the specific directories and/or file types that s/he does not want to scan.
Under "Advanced" tab, "Find unknown program virus" and "Find unknown macro virus" options are selected by default under the "Heuristics"
box. These options enable the detecting of viruses that are not present in the virus defintions but are using an old virus engine. In "Non-viruses" box,
"Find potentially unwanted programs" option is not selected as default. If this option is enabled, anti-virus software may prevent some programs that
cause the display of some pop-up windows. In "Compressed files" box, there are options about scanning of the zipped files. By default ".UPX" files are
scanned. However, it does not scan the files that are coded as ".ZIP" and MIME.
Figure 5- McAfee VS On-Access Scan Features - All Settings - Detection
The tasks that should be performed when the file that generates the virus acitivity is detected, are specified under "Action" tab.
Cleaning the file automatically is the default setting. If the cleaning of the virus is unsuccesful, the setting is set to moving the file to the
directory that is specified as quarantine directory.
AutoUpdate:
If the user forgets or neglects the task of updating the virus definition files, the software should not end up being useless against the
latest virus thrats; so, this section is designed for this purpose. When AutoUpdate is double clicked, the picture shown on Figure 6 is displayed. The
user should click on "Update Now" file to start updating the software.
Figure 6- McAfee VS - AutoUpdate Features
"Log file" box keeps the logs of the update process. If the updating process fails, examining the log reports may help the user to fix
the problem. "Run options" box enables the running of a program after the updating process is finished. Running of the virus scanning program after the
updating process, enables the user to see whether the computer gets affected by the activity of a new virus.
In order to schedule the update, in the followin windows after pressing the "Schedule" botton, if computer is a domain member, user name
and password with the update privilages, else without doing anything press "Schedule" botton. Subsequently, under "Schedule" tab, the frequency of
updating should be specified. Under normal circumstances, it is sufficient to update the software once in a week. However, in cases of emergencies, when
there are the risks of new viruses spreading, this time interval should be shortened (Figure 7).
Figure 7- McAfee VS - AutoUpdate Features - Schedulled Update
E-mail Scan:
This option enables the virus scanning of e-mail messages that are received and sent by the users who use MS Outlook program. The window
displayed after double-clicking it is very similar to the "Detection" window provided on Figure 5. However, instead of "Scan files" box, there is "Scan
of e-mail" box. This enables the scannng of e-mails that are sent by Microsoft Exchange.
Under "Advanced" tab, "Find unknown program virus" and "Find unknown macro virus" options are selected by default under the "Heuristics"
box. These options enable the detecting of viruses that are not present in the virus defintions but are using an old virus engine. However, "Find at
unknown program virus" option that enables the scanning of the files with two or more extensions is not selected by default. We recommend to our users to
enable this option and use it. In "Non-viruses" box, "Find potentially unwanted programs" option is not selected as default. If this option is enabled,
anti-virus software may prevent some programs that cause the display of some pop-up windows. In "Compressed files" box, there are options about scanning
of the zipped files. By default ".UPX" files are scanned. However, it does not scan the files that are coded as ".ZIP" and MIME. "E-mail message body" box
enables examining of the e-mail message body in order to scan whether it contains a virus or not (Figure 8).
The tasks that should be performed when the file that generates the virus acitivity is detected, are specified under "Action" tab.
Cleaning the file automatically is the default setting. If the cleaning of the virus is unsuccesful, the setting is set to moving the file to the
directory that is specified as quarantine directory.
Under "Alert" tab, "E-mail alert" box contains the "Return reply mail to sender" option that enables the sending of a feedback message to
the sender that sends virus infected message from his/her inbox. However, since most of the new generation viruses are able to configure the "from" line
of the e-mail messages, such feedback message may create false alarms. Therefore, we do not recommend our users to use this option. The "Send alert mail
to user" option at the same box enables the sending of an e-mail message to the system administrator when a virus infected message is detected. It is
recommended that the users should use this feature according to the policies implemented by their departments/units.
"Report" tab, when clicked due to a detection of virus activity on the computer, enables one to locate the logs that will be created and
specify their maximum sizes. In addition to the virus activity, it records the name of the current user when the virus is detected, the encrypted files
that were not scanned and the summary of the session.
Figure 8- McAfee VS - On-Delivery Scan Features - Reports
Scan All Fix Disks:
This option enables the user to scan all the files on his/her computer at a any time s/he designates. The "Add" button enables the user
to add fields to be searched other than the ones that will already be searched. The "Remove" button enables the user to remove the locations where the
search will not be conducted (Figure 9).
Figure 9- Figure 9- McAfee VS - On-Demand Scan Features
The "Scan Now" button enables the user to start the scanning instantly. "Reset to Default" button enables the user to reset the settings
to the default ones. "Save as Deafult" button enables the user to set the default settings according to his/her like. The scanning task can be scheduled
to a certain time or time periods with the "Schedule" button (Figure 8).
Under "Action" button, the user can find the tasks that should be done if a file is found out to be infected by a virus. The default
setting is set to clean the file automatically. If the file cannot be cleaned, the setting is set to move the file to a quarantine directory.
Under "Advanced" tab, "Find unknown program virus" and "Find unknown macro virus" options are selected by default under the "Heuristics"
box. In "Non-viruses" box, "Find potentially unwanted programs" option is not selected as default. If this option is enabled, anti-virus software may
prevent some spy programs that cause the display of some pop-up windows. "CPU utilization" enables the user to determine how much of the CPU will be used
during the scanning. In "Compressed files" box, there are options about scanning of zipped files. By default ".UPX" files are scanned. However, it does
not scan the files that are coded as ".ZIP" and MIME (Figure 10).
Figure 10- McAfee VS - On-Demand Scan Features - Advanced
Under "Action" button, the user can find the tasks that should be done if a file is found out to be infected by a virus. The default
setting is set to clean the file automatically. If the file cannot be cleaned, the setting is set to move the file to a quarantine directory.
If the user selects "Report" tab,
"Report" tab, when clicked due to a detection of virus activity on the computer, enables one to locate the logs that will be created and
specify their maximum sizes. In addition to the virus activity, it records the name of the current user when the virus is detected, the encrypted files
that were not scanned and the summary of the session.
