Release Notes
McAfee VirusScan Enterprise 8.8.0 HotFix 805660

Thank you for using McAfee software. This document contains important information about this release. McAfee strongly recommends that you read the entire document.

About this release

Although this release has been thoroughly tested, McAfee strongly recommends that you verify this update in test and pilot groups prior to mass deployment. Please review the Improvements, Known issues, and Resolved issues sections below for additional information.

This document supplements the product Release Notes in the current release package.

For a list of supported environments and latest information please see KnowledgeBase article KB51111.

Version

HotFix 805660

Product

This release was developed for use with:

·         McAfee® VirusScan® Enterprise 8.8.0 Patch 2

Important Notice:
This fix requires VirusScan Enterprise 8.8.0 Patch 2. This fix will not install to earlier versions of VirusScan Enterprise. McAfee strongly recommends that all systems are updated to Patch 2 and this fix.

Supported minimum versions:

·         Scan Engine: 5400

·         Detection Definitions (DAT): 6900+

·         McAfee Agent: 4.5.0.1810 or 4.6.0.2292

NOTE: McAfee Agent 4.0.0 reached End of Life on December 31, 2011. The latest available McAfee Agent versions are 4.5.0 and 4.6.0.

Package date

January 29, 2013

Rating

McAfee considers this release High Priority for all environments. Failure to apply a High Priority update may result in potential business impact.

See McAfee Support KnowledgeBase article KB51560 for information on ratings.

New features

For the most recent list of VirusScan Enterprise 8.8.0 new features, refer to KnowledgeBase article KB51111.

No new features were added with this release.

Known issues

For the most recent list of VirusScan Enterprise 8.8.0 known issues, refer to KnowledgeBase article KB51111.

No known issues were found during testing.

Resolved issues

This release includes the following resolved issues:

1.    Issue: A vulnerability allowed for unauthorized privilege escalation by an authenticated user. (Reference: 805660)
Resolution: This update resolves the vulnerability. For the most recent information with this vulnerability, refer to Security Bulletin SB10034.

Installation instructions

To use this release, you must have VirusScan Enterprise 8.8.0 Patch 2 software installed on the computer you intend to update with this release.

·         This release does not work with earlier versions of McAfee VirusScan Enterprise software.

·         You might need to reboot the system to fully load the system drivers into memory.

·         The package installation does not force the reboot.

Standalone instructions

To install this release directly to a system, you must have installation rights.

1.    Extract the HotFix files to a temporary folder on your hard drive.

2.    Double-click the VSE88HF805660.EXE file inside the temporary folder created in Step 1.

3.    Follow the instructions of the installation wizard.

ePolicy Orchestrator instructions

To deploy this release to managed systems.

1.    Open the ePolicy Orchestrator console and add the zip package to your repository. Refer to Checking in Packages Manually in the ePolicy Orchestrator online help for instructions on adding a package to the repository. The package type for this installation is "Products or Updates (.ZIP)".

NOTE: If the VirusScan Enterprise reports or extension files are updated with this release, extract them from the package .zip file to a temporary folder and check them into the ePolicy Orchestrator Extension repository separately.

2.    Deploy to the appropriate client systems with an agent update task.

Verifying installation

Always reboot the client system prior to validating that the installation is successfully installed.

To verify that the product is installed successfully, check any of the folowing items:

·         After the ePolicy Orchestrator agent collects property information, the client system details display the HotFix/Patch version.

·         On the client system, check for a registry key entry Hotfix_805660 in the HKey_Local_Machine\Software\McAfee\DesktopProtection tree.

NOTE: On a 64-bit OS, this entry might be located under the HKey_Local_Machine\Software\Wow6432Node\McAfee\DesktopProtection tree.

·         Confirm that the expected files are installed by checking the version number of individual files. File versions should match the list of files in File inventory section.

NOTE: Releases are not displayed or do not report installed if an error occurred during installation, or if a file did not install correctly.

Removing installation files

Removing the HotFix files can only be done by performing a Repair option on the client system. The Repair option can be performed by either executing the setup file locally on the system and selecting the repair option or by opening the VirusScan console and following the steps below.

1.    Click Help menu item.

2.    Click Repair Installation... from the menu list.

3.    Check the box Reinstall all program files. WARNING: HotFixes, Patches, and/or Service Packs may be over-written.

NOTE: Checking just this box will remove the HotFix and not allow the HotFix to be reinstalled without the /FORCE command. If the HotFix needs reinstalled, recommend checking the box Restore all settings to installation defaults. WARNING: Customizated settings may be lost. also.

4.    Click OK

Note: After performing a Repair, we recommend that you reboot the client system.

Important Notice:
Removing this HotFix from a client system may place the client system in an unsupported state.

Uninstalling VirusScan Enterprise 8.8.0 or this HotFix might remove some critical files shared by other McAfee products and is not supported for this release. If an uninstallation or repair option is performed on the VirusScan Enterprise product, all other McAfee products must also be removed and then reinstalled before the system can be supported again.

File inventory

File name

Description

HF805660.HTM

This Release Notes document

Packing.Lst

Package list file

PKGCATALOG.Z

Package catalog file

VSE88HF805660.EXE

Installer for this release

VSE880DET.MCS

ePolicy Orchestrator detection script for VirusScan Enterprise

The following files are updated with this release:

File name

Version (x64/x86)

adslokuu.dll

15.0.0.468

csscan.exe

15.0.0.468

dainstall.exe

15.0.0.468

entvutil.exe

15.0.0.468

ftl.dll

15.0.0.468

lockdown.dll

15.0.0.468

mcshield.dll

15.0.0.468

mcshield.exe

15.0.0.468

mcvssnmp.dll

15.0.0.468

mfeann.exe

15.0.0.468

mfeotlkaddin.dll

15.0.0.468

mytilus3.dll

15.0.0.468

mytilus3_server.dll

15.0.0.468

mytilus3_worker.dll

15.0.0.468

naevent.dll

15.0.0.468

naievent.dll

15.0.0.468

otlkscan.dll

15.0.0.468

otlkui.dll

15.0.0.468

RkScan.dll

15.0.0.468

scriptff.dll

15.0.0.468

scriptsn.dll

15.0.0.468

mfeotlk.dll

2.0.0.1

File name

Version (x64/x86)

mfeapconfig.dll

15.0.0.518

mfeapfa.dll

15.0.0.518

mfeapfk.sys

15.0.0.518

mfeavfa.dll

15.0.0.518

mfeavfk.sys

15.0.0.518

mfebopa.dll

15.0.0.518

mfebopk.sys

15.0.0.518

mfeclnk.sys

15.0.0.518

mfehida.dll

15.0.0.518

mfehidin.exe

15.0.0.535

mfehidk_messages.dll

15.0.0.518

mfehidk.sys

15.0.0.518

mferkda.dll

15.0.0.518

mferkdet.sys

15.0.0.518

mfetdi2k.sys

15.0.0.518

mfevtpa.dll

15.0.0.518

mfevtps.exe

15.0.0.518

mfewfpk.sys

15.0.0.518

File name

Version

NaiScrip.nsc

NONE

vse_x64.xml

NONE

vse_x86.xml

NONE

chrome.manifest

NONE

HF805660.exe

NONE

install.rdf

NONE

scriptff.gif

NONE

scriptff.js

NONE

scriptff.xul

NONE

strings.bin

NONE

vscan.bof

NONE

Important Notice:
When newer versions of these files already exist on the system, the HotFix will not install any older versions of these files. All other necessary changes required to address this fix will still be applied appropriately.

Product documentation

McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the KnowledgeBase.

1.    Go to the McAfee Technical Support ServicePortal.

2.    Under Self Service, access the type of information you need:

To access...

Do this...

User
documentation

1.    Click Product Documentation.

2.    Select a product, and then select a version.

3.    Select a product document.

KnowledgeBase

·         Click Search the KnowledgeBase for answers to your product questions.

·         Click Browse the KnowledgeBase for articles listed by product and version.

Legal notice

COPYRIGHT

Copyright© 2013 McAfee, Inc. All Rights Reserved.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

Trademark attributions

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

License agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.