|
|
||||||||||||||
|
|
Archive File - README FIRST!: Command AntiVirus for Exchange (AVAPI)
README FIRST! Command AntiVirus(tm) for Microsoft(r) Exchange NOTE: This version is for ONLY Microsoft(r) Exchange Version 5.5 with Service Pack 3 or higher. A separate version is available for all previous Microsoft Exchange 5x versions. Please read the Multi-Platform Quick Start Guide that is included with the installation files. It provides installation instructions and an overview of Command AntiVirus for all platforms. The MQCKST.PDF file contains the Multi-Platform Quick Start Guide. This file can be read with the Adobe(r) Acrobat(r) Reader that is included on the Command AntiVirus CD. For instructions on how to install Acrobat Reader, see the README.TXT file that is located in the ADOBE folder on the CD. Acrobat Reader is not included with the downloadable versions of Command AntiVirus. You can download Acrobat Reader from Adobe Systems Incorporated through our web site at http://www.commandcom.com/service/tc-viewutil.html. A Release Notes section is provided for each release. It contains the following topics: * Special Notes - contains important pre- and post-installation information that pertains to the release. * Product Enhancements - contains information about new virus signatures, scan engine improvements, and new features. * Fixes - contains updated information on previously reported problems that have been fixed. =================================================================== RELEASE NOTES Notes on Command AntiVirus for Exchange (CSAV) Version 2.43 01/22/01 SPECIAL NOTES * This version is for ONLY Microsoft(r) Exchange Version 5.5 with Service Pack 3 or higher. A separate version is available for all previous Microsoft Exchange 5x versions. * NOTE: We highly recommend that you install Service Pack 4 for Exchange Server 5.5. This service pack fixes the problem that AVAPI had with the Exchange Information Store. This service pack also fixes the following problems that occurred on Command AntiVirus for Microsoft Exchange Version 2.41: * Not allowing the attachments to be opened. * Periodic shutdown of On-access scanning. * WARNING: Command AntiVirus for Microsoft Exchange users We do NOT recommend installing Command AntiVirus for Microsoft Exchange on the same computer as CSAV for Windows NT Server Version 4.59 and higher. Doing so causes a conflict between the two scanners that are trying to access the same file. This condition results in an incorrect warning message that will display repeatedly and cause slowdowns. This is a temporary condition and will be fixed in a future commercial release. Again, the products can coexist on the same network but NOT on the same computer. * If you have Command AntiVirus for Microsoft Exchange Version 2.3x or lower, before you install Command AntiVirus for Microsoft Exchange Version 2.43, you MUST uninstall the previous versions. * INSTALLATION INSTRUCTIONS NOTE: Before installing CSAV for Exchange, make sure that Microsoft Exchange Version 5.0 or higher is running on your server. Also, make sure that you are logged on as: A. an administrator on the local domain. B. an Exchange Server administrator. This account should be the one on which the Exchange services run. To install Command AntiVirus for Microsoft Exchange, follow these steps: 1. Insert the CD-ROM. 2. Click the Start button. 3. Click Run. 4. Select Browse to search the CD for the EXCHANGE directory. 5. Change to that directory. 6. Double-click Setup.exe and click OK. After startup, the system displays the Welcome dialog box. 7. Click Next. The system displays the Software License Agreement. 8. To accept the license agreement, click Yes. The system displays the Setup Type dialog box. 9. Select one of the following installations. We recommend the Typical installation. - Typical � Installs all required files. - Custom � Allows you to choose whether to install program files and help files. 10. Specify the Destination Folder for the CSAV for Exchange files. You can accept the default destination folder or click the Browse button to select a different folder. 11. Click Next. The system displays the Select Service Start Options dialog box. This dialog box allows you to select the startup options for both the On-access and the Scheduler services. The On-access service provides real-time virus protection for your Exchange mail system. The Scheduler service allows you to schedule virus scans. Select from the following options: � Automatically start the CSAV for Exchange On-access service on system startup. � Start CSAV for Exchange On-access service upon completion of installation. We recommend that you select both options. This is the default setting. 12. Click Next. The system displays the Start Copying files dialog box. 13. Click Next. The installation program begins copying the CSAV for Exchange files to your system. When the copying is complete, the system displays the Service Account Information dialog box. NOTE: If you chose the Custom installation, the system first displays the Select Components dialog box. Select the components that you want to install and click Next. 14. Type the user name�s password in the Password text box. This identifies the Windows NT account under which the Command AntiVirus services run. NOTE: If you did not use the correct user name, the system displays a dialog box that informs you that you have entered the wrong user name. The user name should be the user name that installed Exchange Server. 15. Click Next. The system displays a dialog box containing the following message: THE ACCOUNT HAS BEEN GRANTED THE LOG ON AS A SERVICE RIGHT. This right is required for the account to run the service. 16. Click OK. The system displays the CSAV for Exchange Options dialog box. 17. Use the Browse button to select an Administrator Name. You can also change the Exchange mail folder that holds infected files in quarantine. The default is Public Folders\Quarantine. You can use the Browse button to select a Quarantine Folder from the Choose Quarantine Folder dialog box. 18. After you have selected the Administrator Name and the Quarantine Folder, click Next. The system displays the Setup Complete dialog box. 19. Select whether you want to view the README file and/or run the CSAV for Exchange console. We recommend that you view the README file as it contains the latest information on the functionality of CSAV for Exchange. 20. Click Finish. This completes the installation of CSAV for Exchange. * When the Action to Take on Infection for on-access scanning is set to LOG INFECTION AND CONTINUE, the attachment CANNOT be accessed from any client. The attachment also CANNOT be accessed during an on-demand scan. To access these attachments, you can disable on-access scanning. You can then run an on-demand scan or access the attachment. * The Notification feature has been changed. In the Mail Alerts Configuration dialog box, you can select to SEND THE MAIL ALERT TO ADMINISTRATOR(S). This option is ONLY for sending an alert message to ADDITIONAL administrators. It does NOT change the Microsoft Exchange Server Administrator that you specified during the installation. Although you can cancel sending an alert to the additional administrators that you selected, you CANNOT cancel sending an alert to the Microsoft Exchange Server Administrator that you specified during the installation. PRODUCT ENHANCEMENTS * Selection of files and folders to scan has been improved. To select multiple single files and/or folders, click the file or folder, hold down the Ctrl key, and then click each file or folder that you want to select. * To select a block of files and/or folders, click the first file or folder in the block, hold down the Shift key, and then click the last file or folder in the block. FIXES * None for this release. _____________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for Exchange (CSAV) Version 2.42 11/30/00 SPECIAL NOTES * This version is for ONLY Microsoft(r) Exchange Version 5.5 with Service Pack 3. A separate version is available for all previous Microsoft Exchange 5x versions. * NOTE: We highly recommend that you install Service Pack 4 for Exchange Server 5.5. This service pack fixes the problem that AVAPI had with the Exchange Information Store. This service pack also fixes the following problems that occurred on CSAV for Exchange Version 2.41: * Not allowing the attachments to be opened. * Periodic shutdown of On-access scanning. * WARNING: CSAV for Exchange users We do NOT recommend installing CSAV for Exchange on the same computer as CSAV for Windows NT Server Version 4.59 and higher. Doing so causes a conflict between the two scanners that are trying to access the same file. This condition results in an incorrect warning message that will display repeatedly and cause slowdowns. This is a temporary condition and will be fixed in a future commercial release. Again, the products can coexist on the same network but NOT on the same computer. * If you have CSAV for Exchange Version 2.3x or lower, before you install CSAV for Exchange Version 2.42, you MUST uninstall the previous versions. PRODUCT ENHANCEMENTS * This release contains scan engine enhancements that include detection for the W95/MTX.9244 virus and X97M/Jini-A1 misdisinfected viruses. * If the SCAN ALL FILE ATTACHMENTS option under MAIL ATTACHMENTS TO SCAN is selected in the PROPERTIES/DETECTION dialog box for both the on-access and an on-demand scan task, Command AntiVirus now performs the following: - decodes and scans messages in TNEF format - decompresses and scans ACE files * The speed of scanning CAB files has been improved. FIXES * The level of generated false positives for macro viruses has been reduced. * Some users reported Information Store shutdowns. This problem was caused by a text buffer overflow, and it has been fixed. _____________________________________________________________ RELEASE NOTES Notes on Command AntiVirus for Exchange (CSAV) Version 2.41 09/26/00 SPECIAL NOTES * WARNING: CSAV for Exchange users We do NOT recommend installing CSAV for Exchange on the same computer as CSAV for Windows NT Server Version 4.59.4. Doing so causes a conflict between the two scanners that are trying to access the same file. This condition results in an incorrect warning message that will display repeatedly and cause slowdowns. This is a temporary condition and will be fixed in a future commercial release. Again, the products can coexist on the same network but NOT on the same computer. * Before you install CSAV for Exchange Version 2.41, you MUST uninstall any previous versions of CSAV for Exchange. * The pre-installation requirements have changed in this release. Before installing CSAV for Exchange, make sure that Microsoft(r) Exchange Version 5.5 with Service Pack 3 is running on your server. You MUST be at least an Exchange Server Administrator. The account that you are logging in with MUST have the following rights: - Act as part of the operating system - Create a token object - Increase quotas - Log on as a batch job - Log on as a service - Log on locally - Replace a process level token - Restore files and directories * CSAV for Exchange no longer contains the option to send an e-mail notification to the Sender and Recipient of an infected attachment. Now, only the mail administrator designated at the time of the CSAV for Exchange installation receives an e-mail notification that an infected attachment has been found. If the infected attachment is QUARANTINED or DELETED, the Recipient's infected attachment is replaced with a file called VIRUSINFO.TXT. This file specifies the name of the attachment and the name of the virus that was found. The Sender of the infected attachment does NOT receive any notification. * The Quarantine folder is no longer located in Public Folders. It is now located in Program Files\Command Software\CSAV for Exchange\Quarantine. PRODUCT ENHANCEMENTS * In previous versions of CSAV for Exchange, there is a limit of 7,500 users. In CSAV for Exchange Version 2.41, this limit has been greatly increased. * CSAV for Exchange now includes the scanning of both incoming and outgoing (mail that is sent to addresses outside the server's domain) e-mail. FIXES * None for this release. ________ RELEASE NOTES Notes on Command AntiVirus for Exchange (CSAV) Version 2.33 07/10/00 SPECIAL NOTES * None for this release. PRODUCT ENHANCEMENTS * None for this release. FIXES * None for this release. ________ RELEASE NOTES Notes on Command AntiVirus for Exchange (CSAV) Version 2.32 06/20/00 SPECIAL NOTES * A new dialog box has been added to the Command AntiVirus for Exchange installation. This dialog box asks if you want to run Exchange Optimizer. We recommend that you select NO. PRODUCT ENHANCEMENTS * None for this release. FIXES * None for this release. ________ Notes on Command AntiVirus for Exchange (CSAV) Version 2.31 05/18/00 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. The following improvements have been made to the scan engine: - Improved HTML and ASCII scanning. - CSAV now detects W95/Bolzano family viruses. - Scanning of the following is now supported: - TAR archives - RAR archives - LHA archives - CAB archives (partially supported) - GNU GZIP (.GZ files) - Self-extracting RAR files - Self-extracting LHA files FIXES Some users reported a problem with some documents falsely being reported as "could be misdisinfected virus." This has been fixed. SPECIAL NOTES None for this release. ________ Notes on Command AntiVirus for Microsoft Exchange Version 2.30 03/6/00 PRODUCT ENHANCEMENTS None for this release. FIXES If there were more than the allowed MAPI limit of 248 mailboxes, the on-access service stopped and no active scanning took place. This has been fixed. Now, there is no limit to the number of mailboxes for active scanning to take place. SPECIAL NOTES None for this release. _____________ Notes on Command AntiVirus for Microsoft Exchange Version 2.20 01/19/00 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. This includes signatures for detecting more than 200 new trojans. The following improvements have been made to the scan engine: - CSAV now detects malicious or destructive Java code (Java Trojans). - The handling of script viruses is improved. This includes VBScript viruses and ASCII-based viruses. - CSAV now scans file attachments in Rich Text Format (.RTF) files. - CSAV now disinfects Office 2000 signed documents. - Scanning of the following is now supported: - OLE1 embedding (embedded files in WordPad and Microsoft Word 6) - WordPerfect 2000 (.WPD) files - Lotus worksheets (.WKS) files - LX (OS/2) files as well as the detection of all OS/2 viruses. - PowerPoint scanning is improved and the disinfection process is revised. However, as the Microsoft Corporation does not document its compression method, the disinfection of objects that are embedded in PowerPoint documents is still not possible. - CSAV features improved scanning in Windows 32-bit programs resulting in higher rates of detection and fewer false positives. - Disinfection of infected .VBS files by deletion. The following file types are now scanned by default and they cannot be deleted: EXE, COM, SYS, VXD, DLL, DRV, SCR, 386, OV?, CPL, FON, TSK, ACM, ACV, TLB, TSP, OCX, VBX, VOM, VXE, OBJ, SHS, SMM, HLP, CLA, XL?, DOC, DOT, MDB, RTF, MPP, MPT, PPA, PPS, PPT, POT, WBK, PWZ, MSO, OBD, OBT, OBZ, OFT, MSG, EML, TD0, BAT, BTM, INI, INF, HT?, VBS, GMS, CSC, WPD, WK?, DVB, WBT, and CDR NOTE: Self-extracting files are not scanned by default. However, the .EXE portion of the self-extracting file is scanned by default. You can add up to 20 additional file extensions to the File Extensions dialog box. A new virus definition file, SIGN2.DEF, is now included with Command AntiVirus. This file provides virus signatures for a variety of scripting viruses and trojans. The CSAV for Exchange Console, the program's system tray icon, all configuration options, and all property sheets now display in read-only mode for users who do not have sufficient access rights. If the CSAV for Exchange Console was started when (A) the Exchange Directory service was not running or (B) when the user did not have sufficient permission on the Exchange server, corresponding dialog boxes would display. This has been modified. Now, if the user starts the service or acquires sufficient permission on the Exchange server, the changes will not be reflected in CSAV for Exchange Console until it is restarted. FIXES The intermittent problem that occurred with on-access scanning has now been fixed. This involves the on-access scans that take place when the e-mail is delivered to your mailbox. If there were more than the allowed MAPI limit of 248 mailboxes, the on-access service would crash. Now, if that limit is exceeded, the on-access service simply stops and no active scanning takes place. The on-access service could not handle Custom Recipients. As Custom Recipients are not physical mailboxes on the Exchange server, the on-access service now ignores them. The on-access service was reported to be using large amounts of memory. This service has been modified to use memory more efficiently. Some notifications were being missed during on-access scans. This resulted in a discrepancy between the number of e-mails scanned and the number of notifications sent. This has been fixed. In the Options dialog box, if the path to the quarantine folder ended with one or more backslashes, the CSAV for Exchange Console would crash. This also occurred if, during installation, a quarantine path that contained one or more backslashes was entered in the Options dialog box. Both of these problems have been fixed. In Microsoft Exchange Administrator, if the Roles permission for the quarantine folder was set to "None" and the Folder Visible option was not selected, CSAV for Exchange would crash. This has been fixed. Now, these permission options cannot be selected for the quarantine folder. If a pipe character ("|") existed in a folder's name, that folder would not be scanned by on-demand scanning. This has been fixed. Scheduled on-demand scans would crash if two or more tasks were running at the same time on the same folder. This has been fixed. The properties of an on-demand task were being displayed when the task's name was double-clicked in the CSAV for Exchange Console task list. This has been fixed. Now, double-clicking the task's name launches a scan. When running two or more on-demand scans with the on-access scan enabled, the on-demand scans cause intermittent General Protection Faults (GPFs). This has been fixed. There was a report that on-demand scans would briefly display the Statistics Dialog Box and then close back to the GUI. Nothing is written to the on-demand log file, but Event Viewer shows that the scans had started but were never completed. This has been fixed. SPECIAL NOTES To install Command AntiVirus for Exchange you now must be logged on as: A. an administrator on the local domain B. an Exchange Server Administrator. This account should be the one on which the Exchange services run. Before installing CSAV for Exchange 2.1, we recommend that you uninstall any earlier versions of the product. Then reboot your system and install CSAV for Exchange 2.1. NOTE: If you reinstall CSAV for Exchange 2.1, you do not need to perform a system reboot. If the location of the quarantine folder is changed while the on-access service is running, the on-access service will need to be restarted in order for the change to take effect. CSAV for Exchange scans only those e-mail messages that are located on the Exchange server. As outgoing SMTP e-mail uses a POP3 server instead of the Exchange server, CSAV for Exchange does not scan those outgoing messages. If two or more on-demand tasks are run on the same folder simultaneously, there is a chance that you could receive a "multiple edit conflict" error message. To test CSAV for Exchange, you can now download the self-extracting file named SE_EICAR.EXE from our web site at: http://www.commandcom.com/html/utils.html When you run this file, a test file, EICAR.COM (from European Institute for Computer Anti-Virus Research), is extracted from it. Changing the quarantine folder while the on-access service is running requires that you restart the on-access service in order for the change to take effect. Running two or more on-demand scan tasks simultaneously on the same folder may result in a "multiple edit conflict" error message. ________ Notes on Command AntiVirus for Microsoft Exchange version 2.0 10/04/99 PRODUCT ENHANCEMENTS The scan engine has been optimized to provide faster on-demand and on-access scans. New virus signatures have been added in this release. CSAV for Exchange has been modified to better handle various error conditions. These conditions include scarce system resources, improper passwords, and accessing unavailable servers. FIXES General Protection Faults occurred when CSAV disinfected user macros. This has been fixed. Modifications have been made to the code behavior monitoring process. These modifications fix a situation that produced false positives. Two scheduled scan issues have been fixed. One problem consisted of scheduled scans not running at their specified time. The second problem consisted of scheduled scan settings not being transferred successfully from the CSAV console to the scheduler. The Help buttons did not provide the requested on-line help. This has been fixed. SPECIAL NOTES None for this release. _____________ Notes on Command AntiVirus for Microsoft Exchange version 1.1 07/12/99 PRODUCT ENHANCEMENTS New virus signatures have been added in this release. Command AntiVirus now includes expanded protection for the following: A. CorelDraw -- The newly discovered CorelDraw virus is now detected. The .CSC CorelDraw-related extension is now scanned by default. B. MacOffice -- Viruses in MacOffice documents can be detected and disinfected. However, as the Macintosh(tm) operating system is not directly supported by Command AntiVirus, detection is possible only when the infected Macintosh Office documents are scanned in a DOS or Windows-based environment. For example, if you have a floppy disk with infected MacOffice documents on it, you can disinfect these documents by using CSAV to scan the floppy disk. C. Microsoft Office 97 -- The .MPT, .WBK and .MSO extensions are now scanned by default. D. Office 2000 -- The heuristics scan engine has been modified so that it now detects some native Office 2000 viruses. E. PowerPoint 97 -- PowerPoint 97 viruses are now detected and disinfected. The .PP?, .POT, and .PWZ PowerPoint 97 file types are now scanned by default. An additional generic virus detector has been added. This detector allows Command AntiVirus to detect approximately 14,000 more "generic viruses." This brings the total number of viruses detected by Command AntiVirus to just over 39,500. The CSAV scanners have been optimized to provide better protection against "New Executable" file viruses and VxD viruses. Improvements have also been made to reduce the occurrence of false positives. If you open an infected Microsoft Office 97 document in Microsoft Office 2000, our HoloCheck scan engine will detect the infection. Documents converted to Office 2000 format from Office 97 format can be disinfected. Currently, disinfecting an Office 2000 document consists of removing all macros from the document. Files that do not have a file name extension are now scanned by default. FIXES None for this release. SPECIAL NOTES None for this release. Notes on Command AntiVirus for Microsoft Exchange version 1.00 Service Pack 2 05/25/99 SPECIAL NOTES The instructions for insuring the proper starting of CSAV for Exchange services has been updated. Please see 04/29/99 SPECIAL NOTES. 04/29/99 PRODUCT ENHANCEMENTS New virus signatures were added in this release. FIXES None for this release. SPECIAL NOTES To update Command AntiVirus for Exchange with this service pack, you must run the service pack's SETUP.EXE program. Note that only the components that require updating will be modified. To insure the proper starting of the CSAV for Exchange services, the administrator who is installing the product must be: A. a local administrator or a domain administrator (with local administrator rights) with the Logon as a service right on the Exchanger Server system. B. an administrator on the Exchange Server. To enable the Log on as a service right, follow these steps: 1. In the taskbar, click the Start button. 2. Select Programs. 3. Select Administrative Tools (Common). 4. Click User Manager for Domains. The system displays the User Manager dialog box. 5. Select the administrator's name from the Username column. 6. Click the Policies menu. 7. Click the User Rights menu item. The system displays the User Rights Policy dialog box. 8. Select the Show Advanced User rights check box. 9. In the Right drop-down list box, select Log on as a service. 10. Click the Add button. The system displays the Add Users and Groups dialog box. 11. Click the Show Users button. 12. In the Names list box, select the administrator's name. 13. Click Add. 14. Click OK. The system returns to the User Rights Policy dialog box. 15. Click Ok to finish. To be an administrator on the Exchange Server, follow these steps: 1. In the taskbar, click the Start button. NOTE: If you are using Windows NT Server 3.51, double-click the Microsoft Exchange group. 2. Select Programs. NOTE: If you are using Windows NT Server 3.51, double-click the Microsoft Exchange Administrator icon. 3. Select Microsoft Exchange. 4. Click Microsoft Exchange Administrator. The system displays the Microsoft Exchange Administrator dialog box. 5. Locate the name of your Microsoft Exchange server and click the plus sign (+) located next to the server's name. The system displays the Configuration icon and the Recipients icon below the server's name. 6. Select the Configuration icon. 7. On the menu bar, click File. The system displays the drop-down menu. 8. Click Properties. The system displays the Configuration Properties dialog box. 9. Click the Permissions tab. The system displays the Permissions dialog box. 10. Click Add. 11. Select the administrator's name from the Names list box. 12. Click Add. 13. Click OK. The system returns to the Configuration Properties dialog box. 14. Click Apply. 15. Click OK to finish. Notes on Command AntiVirus for Microsoft Exchange version 1.00 03/19/99 PRODUCT ENHANCEMENTS None for this release. FIXES None for this release. SPECIAL NOTES In the "Reports" dialog box, the "Delete attachment if the specified action fails" item is enabled by default. For maximum protection against computer viruses, we recommend that you do NOT disable this item unless it is absolutely necessary to do so. For detailed virus information, we suggest that you view the Joe Wells Virus Encyclopedia that is included on the CD. You can open the encyclopedia by going to the "JoeWells" directory located in the "Manuals" directory. Then, double-click the file named INDEX.HTM to display the encyclopedia. Scan tasks are not sorted when you click the column headers in the CSAV for Exchange console. This will be corrected in an upcoming release. The CSAV for Exchange documentation refers to the scanning of e-mail that is sent and received. Currently, sent e-mail is defined as mail that is sent between mailboxes and mail folders within the Exchange server's domain. The scanning of outgoing e-mail (mail that is sent to addresses outside the server's domain) is a planned future enhancement to CSAV for Exchange. =================================================================== PRODUCT SUPPORT Command Software Systems' technical support includes a variety of electronic services. You can contact us at: Command Software Systems, Inc. 1061 E. Indiantown Rd., Suite 500 Jupiter, FL 33477 Voice: 561/575-3200 8:00 a.m. to 8:00 p.m. Eastern Standard Time. Fax: 561/575-3026 Internet: [email protected] FTP: ftp.commandsoftware.com Web: http://www.commandsoftware.com In Europe contact: Command Software Systems UK, Ltd. Ground Floor Millbank Tower Millbank London SW1P 4QP If dialing from within the UK: Voice: 020 7931-9301 Fax: 020 7931-9302 If dialing from outside the UK: Voice: +44 20 7931-9301 Fax: +44 20 7931-9302 Internet: [email protected] [email protected] [email protected] In Pacific Rim, contact: Command Software Systems, PTY Pac Rim Unit 5, 18-20 Floriston Road Boronia, VIC 3155 Australia Voice: 1-300-65-0903 or 613-9762-2203 Fax: 1-300-65-0904 Internet: [email protected] Web: http://www.commandcom.com.au ====================================== END ========================================
|
|