Mcafee viruscan 8.0

Installation, both online and via CD, was trouble-free and took only a few minutes. Upon start-up, VirusScan downloaded updated virus definitions, as most antivirus programs do. Last year, we praised VirusScan's browserlike interface but found its multiple Web-page-like screens tedious to navigate, particularly when you had to dig through several layers just to change a few basic settings.

VirusScan 8. The Center's Security Index uses graphical bars with a 1 to 10 rating scale to show how well your PC is protected against all kinds of digital intrusions--viruses, hackers, spam, and so on--and it provides quick access to VirusScan settings. Despite Security Center's embrace of third-party security apps, it's still very McAfee-centric. On our test PC, for instance, we use the ZoneAlarm firewall. Security Center accurately detected the presence of ZoneAlarm, as indicated by the WormStopper blocks malicious, wormlike behavior, often before a signature-file download is available.

It's difficult to predict future worms; however, VirusScan detected and deleted the MSBlast worm on our test PC, something our previous antivirus program missed. The ScriptStopper feature, which finds and blocks malicious scripts, is unchanged from version 7. A better integration with Microsoft Outlook includes on-demand scanning of all e-mail folders and archives to find viruses and worms lying dormant there.

Like Norton AntiVirus , it scans inbound and outbound IM messages; its predecessor scanned inbound only. Unfortunately, McAfee removed its firewall from VirusScan 8. The merger of the online and retail flavors of VirusScan also creates a buying dilemma. Online subscribers get program updates, which include new and upgraded features, as soon as they become available. But retail buyers must wait for the next version.

Here are our test results:. By default, files larger than 5MB are hashed. This release of VirusScan Enterprise enables the following security features for all VirusScan Enterprise components:. Here is a list of issues from previous releases of the software that have been fixed. These issues were resolved in the VirusScan Enterprise Patch 4 release. Resolution — Fixed a timing issue in the VirusScan Enterprise plug-in. Resolution — Revised the mfehidk.

Resolution — VirusScan Enterprise Outlook Email scanner now writes registry data using installed locale instead of the user locale format. Resolution — Modified mfehidk. Resolution — Resolved a deadlock condition between the pause for update and trust validation. Resolution — Repaired a memory leak in the On-Demand Scan process. The read activity no longer increases memory usage for entire scan. Resolution — This patch includes the correct help file with correct localization support.

Resolution — Fixed the path comparison when the exclusion list includes items in a combination of file names with no extensions, path names, and wildcards. Resolution — Removed a bottleneck in the mfewfpk.

Resolution — Increased text box sizes to allow over characters. In addition, ePolicy Orchestrator displays red warning text when fewer than character spaces are available and again when fewer than 50 characters spaces are available. Resolution — Non-critical installation requirements were adjusted so that installation can proceed on these systems. Resolution — Scan threads retrieving the list of virus names are now protected from change by other threads.

Resolution — Revised VirusScan Enterprise to ensure that configuration data is not modified while it is being processed. Resolution — Improved string length tracking when performing rule matching operations. Resolution — This update resolves the vulnerability. Refer to online Security Bulletin SB for the most current details. Resolution — Fixed thread synchronization issue related to update certificates thread and service main thread.

Resolution — When authentication fails in these environments, Vsplugin now uses an alternative credential authentication method to launch the on-demand scan task successfully. These issues were resolved in the VirusScan Enterprise Patch 3 release. Resolution — The number of files in the scanner queue is now limited to , preventing the On-Demand Scanner memory from growing too large.

Resolution — VirusScan Enterprise 8. Use this property in queries to filter against workstations or servers. Resolution — Only administrative users can stop the McShield service.

These issues were resolved in the VirusScan Enterprise Patch 2 release. Resolution — A missing or corrupt patch file in the repository now causes VirusScan Enterprise updates to fail. Resolution — Microsoft identified a workaround and McAfee implemented the fix.

Resolution — All queries now include a group reference so they do not try to recreate the default group. Resolution — The McAfee filter driver now ensures header information is preserved and forwarded through a raw socket.

Resolution — The API to set processor group affinity is now called correctly. Resolution — The return value has been updated to send an empty string if no engine version is found. Resolution — Managed ePolicy Orchestrator On-Demand Scan tasks now properly enforce the password protection settings for the user if managed tasks are displayed in the user console. Resolution — The Access Protection driver now properly addresses the issue when evaluating rules beginning with "? Resolution — VirusScan Enterprise now recompiles rules from a separate thread to resolve the underlying dead-lock condition.

Resolution — The Lotus Notes scan driver now handles the access violation, preventing a crash on exit. Resolution — Policy enforcement no longer causes Event ID to occur on the client. Resolution — VirusScan Enterprise was modified to eliminate the pool corruption that could cause the race condition.

Resolution — VirusScan Enterprise now calls the correct API to return the name of the user or other security principal associated with the calling thread. Resolution — The installer now ensures the core files will not be removed from the system after a failed upgrade.

Resolution — Simplified internal synchronization to avoid a registration race condition. Resolution — VirusScan Enterprise was modified to eliminate the race condition that could corrupt the kernel pool. Resolution — The Host Intrusion Prevention Entercept Agent service is now stopped before upgrading the syscore drivers and vscore files.

Resolution — Access Protection was modified to remove the incompatibility. Resolution — The file filter was revised to temporarily delay a scan if a file had been modified under conditions that could block concurrent access through the file system. Resolution — Scans of modified files are now conducted with corrected context information passed to internal utility routines, avoiding the dead-lock situation. Resolution — VirusScan Enterprise On-Demand scanner no longer modifies the file time stamp while performing scans.

Resolution — VirusScan Enterprise no longer accesses invalid memory locations when processing the PendingRename registry value.

Resolution — SetupVSE. Resolution — The installer now removes the outdated driver. A system reboot might be required to remove the driver from memory and load the correct driver. The installer does not force a reboot. These issues were resolved in the VirusScan Enterprise Patch 1 release.

Resolution — The system core installer has been revised to recognize all system paths. Resolution — The memory allocation is now checked for success prior to referencing it.

Resolution — Self protection now protects McAfee folders, files and registry data from permission changes. Resolution — Process exclusions for Buffer Overflow work as expected on standalone machines, ePolicy Orchestrator managed systems and during ePolicy Orchestrator Policy Migration.

Resolution — Buffer size for storing Extra. DAT signature information has been increased to 4 times its original size. The pop-up error no longer appears. Resolution — The exception is handled to avoid a system crash. Resolution — VirusScan Enterprise identifies remote share access and enforces Access Protection rules that prevent remote access to shares. Resolution — Buffer size for storing processes to exclude has been increased, enabling customers to add exclusions.

Resolution — The McAfee driver has been updated to handle this situation. Resolution — Changes made to the process validation service have removed the dependency of the Microsoft. NET runtime support library, mscoree.

Resolution — The McAfee Agent is no longer blocked when trying to set folder permissions. BOF content file has been modified to properly restrict access to McAfee files and settings. Resolution — The installation now loads the correct Access Protection rule-set.

Resolution — The installer now detects that McAfee AntiSpyware Enterprise is being installed for the first time and now sets the default scanning options. Use these instructions to install, verify, and remove this VirusScan Enterprise Patch release. This Patch release works with the following VirusScan Enterprise releases. Install this patch directly to a target client system or use ePolicy Orchestrator to deploy this release to managed systems. For more information, see Checking in packages manually in the ePolicy Orchestrator online help.

After installing VirusScan Enterprise Patch 4, verify that the product installed correctly. Reboot the client system prior to validating that the installation is successfully installed. McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase.

Other names and brands may be claimed as the property of others. About this release Thank you for using this McAfee product. Important Patch 4 is the last release of VirusScan Enterprise 8. Important This package does not upgrade VirusScan Enterprise version 8. Build date February 5, Rating Critical — McAfee rates this release as critical for all environments to avoid a severe business impact.

New features This release of the product includes these new features for all supported operating systems. Hotfix installation report This release includes a new property in the ePolicy Orchestrator Query Builder to report on Hotfixes that are installed on VirusScan Enterprise client systems. However, ScriptScan is still scanning. Note ScriptScan does not support Mozilla Firefox browsers. Updated components This release includes updated versions of the following components.

BOF New features — Windows 8 and Server systems This release includes support for Windows 8. Note Patch 3 included additional features for supported Windows systems. New features — other supported Windows systems This release includes these new features for supported Windows systems other than Windows 8 and Server Note These features were supported in Patch 3 for Windows 8 and Server systems only. Policy settings changes. Client task settings changes.

Registry settings changes. Large files are now hashed and, in parallel with the scan, an Artemis query runs to determine whether the file is known to be clean. If so, the scan stops. Note The Artemis query runs regardless of the sensitivity level. Because hashes are cached, future scans can use the existing hash if the file hasn't been modified. Resolved issues Here is a list of issues from previous releases of the software that have been fixed. Issues resolved in this release These issues were resolved in the VirusScan Enterprise Patch 4 release.

Reference: Resolution — Revised the mfehidk. Reference: Resolution — VirusScan Enterprise Outlook Email scanner now writes registry data using installed locale instead of the user locale format. Reference: , Resolution — Modified mfehidk.

Reference: Resolution — Resolved a deadlock condition between the pause for update and trust validation. Reference: Resolution — This patch includes the correct help file with correct localization support. Reference: Resolution — Fixed the path comparison when the exclusion list includes items in a combination of file names with no extensions, path names, and wildcards.

Reference: , Resolution — Removed a bottleneck in the mfewfpk. Reference: Resolution — Increased text box sizes to allow over characters. Reference: , , Resolution — Non-critical installation requirements were adjusted so that installation can proceed on these systems. Reference: , , Resolution — Scan threads retrieving the list of virus names are now protected from change by other threads. Reference: Resolution — Revised VirusScan Enterprise to ensure that configuration data is not modified while it is being processed.

Reference: Resolution — Improved string length tracking when performing rule matching operations. Reference: Resolution — This update resolves the vulnerability. Reference: Resolution — Fixed thread synchronization issue related to update certificates thread and service main thread.

Reference: Resolution — When authentication fails in these environments, Vsplugin now uses an alternative credential authentication method to launch the on-demand scan task successfully. Reference: Resolution — The number of files in the scanner queue is now limited to , preventing the On-Demand Scanner memory from growing too large. Reference: However, when you drill down into one chart group, the filter is not applied and both workstations and servers are displayed.

Reference: Resolution — VirusScan Enterprise 8. Reference: Resolution — Only administrative users can stop the McShield service.

Reference: Resolution — A missing or corrupt patch file in the repository now causes VirusScan Enterprise updates to fail. Note You must still manually fix the issue with the repository before the update can be successful. Reference: Resolution — Microsoft identified a workaround and McAfee implemented the fix.

Reference: Resolution — All queries now include a group reference so they do not try to recreate the default group. This issue was seen with some third-party VPN clients. Reference: Resolution — The McAfee filter driver now ensures header information is preserved and forwarded through a raw socket. Reference: Resolution — The return value has been updated to send an empty string if no engine version is found. Reference: Resolution — Managed ePolicy Orchestrator On-Demand Scan tasks now properly enforce the password protection settings for the user if managed tasks are displayed in the user console.

Reference: Resolution — The Access Protection driver now properly addresses the issue when evaluating rules beginning with "? Reference: Resolution — VirusScan Enterprise now recompiles rules from a separate thread to resolve the underlying dead-lock condition. Reference: Resolution — The Lotus Notes scan driver now handles the access violation, preventing a crash on exit. Reference: Resolution — Policy enforcement no longer causes Event ID to occur on the client.

Reference: Resolution — VirusScan Enterprise was modified to eliminate the pool corruption that could cause the race condition. Reference: Resolution — VirusScan Enterprise now calls the correct API to return the name of the user or other security principal associated with the calling thread. Reference: Resolution — The installer now ensures the core files will not be removed from the system after a failed upgrade. In some instances, the old driver remained loaded in memory.

Reference: Resolution — The installer now removes the outdated driver. This can occur when Microsoft Windows is installed to a sub-folder rather than the root. Reference: Resolution — The system core installer has been revised to recognize all system paths. Reference: , , , Resolution — The memory allocation is now checked for success prior to referencing it. Reference: Resolution — Self protection now protects McAfee folders, files and registry data from permission changes.

Reference: , , Resolution — Process exclusions for Buffer Overflow work as expected on standalone machines, ePolicy Orchestrator managed systems and during ePolicy Orchestrator Policy Migration. DAT, the buffer used to store the description information for the "About" window might not be large enough.

Reference: Resolution — Buffer size for storing Extra. One report of this occurred when opening Outlook with PST files configured to reside on remote storage. Reference: , , , Resolution — The exception is handled to avoid a system crash.

This also applies to preventing remote access to shares. Reference: Resolution — VirusScan Enterprise identifies remote share access and enforces Access Protection rules that prevent remote access to shares. One instance was triggered when using Virtual Machine Converter. Reference: , , , , , Resolution — A memory corruption issue has been resolved. Reference: , , , , , , , , , , , , , , , , , , , , , , , , , Resolution — ScriptScan DLLs are no longer accessed if the feature is disabled.