Release Notes - McAfee® VirusScan® Enterprise 8.7i Repost Patch 5

Thank you for using McAfee software. This document contains important information about the current release. We strongly recommend that you read the entire document.

Contents

About this release

For a list of supported environments for VirusScan Enterprise 8.7i on Microsoft Windows, see McAfee Support KnowledgeBase article KB51111.

This release was developed for use with the following minimum requirements:

Rating

McAfee recommends this release for all environments. Repost Patch 5 is considered a High Priority Release. See McAfee Support KnowledgeBase article KB51560 for information on ratings.

Purpose

This release contains a variety of improvements. McAfee has spent a significant amount of time finding, fixing, and testing the fixes in this release. Please review the Known and Resolved issues lists for additional information on the individual issues. See McAfee Support KnowledgeBase article KB65944 for the most current information regarding this release.

This document supplements the product Release Notes and Patch Notes in the release package.

Improvements

This release of the software includes the following improvements.

  1. Reduced repost package size by removing ePolicy Orchestrator 3.6.x NAP and Report extension files for VirusScan Enterprise, due to ePolicy Orchestrator 3.6.x End of Support.

  2. Added Windows XP Embedded platform identification to the VirusScan Enterprise package catalog.

Previous improvements

Previous releases of the software include the following improvements.

  1. VirusScan Enterprise 8.7i Repost Patch 3 is the first package to include a placeholder stub DAT that reduces the size of the package, and prevents the system from having to download a DAT package twice in order to be fully installed and up-to-date. Refer to McAfee Support KnowledgeBase article KB68449 for further information on the benefits and cautions in using this new package.

  2. The Heuristic network check for suspicious files (known as Artemis) settings for On-Access, On-Demand and Email Scanners are now set to Very Low by default in the installer and in the McAfee Default policy for VirusScan Extension. Refer to McAfee Support KnowledgeBase article KB53735 for further information on Artemis Technology.

    NOTE: See item #1 under Known Issues for further information about this topic.

  3. The installation packages for patches and reposts have been upgraded so that the installation log name, created in the McAfeeLogs folder, has a dynamically generated name based on the current date and time of the installation. This helps save logs that might have been overwritten with the previous “backup previous log only” method.

  4. The on-access scanner memory scan function (Processes on enable) has been modified significantly to make it more comprehensive. Because of this change, the installer has been modified to enable the option only if VirusScan is installed under Maximum Security settings.

  5. The installation of VirusScan Enterprise now disables the Defender feature of Microsoft Windows Vista in order to improve performance of the operating system.

  6. Update to the universal uninstaller script which includes new generic logic for detecting some competitors' products.

Known issues

Here is a list of known issues that we are aware of at production time.

  1. Issue: With the change in Artemis defaults there are several variables that need to be taken into account when introducing this Repost Package into the environment.

    2. NOTE FOR CURRENT AND NEW USERS:

  2. Issue: VirusScan Enterprise 8.7i packages created with McAfee Installation Designer fail to install on computers running Windows 7 when they are deployed from ePolicy Orchestrator.

    3. Workaround: See McAfee Support KnowledgeBase article KB69397 for information on obtaining the latest McAfee Installation Designer repost that resolves this issue.

Resolved issues

The resolved issues are divided into subsections per patch, showing when each fix was added to the compilation.

Repost Patch 5 resolved issues:

  1. Issue: When installing VirusScan Enterprise 8.7 package generated with McAfee Installation Designer, the installer ignored the option to not run an AutoUpdate at the end of the installation. (Reference: 645531)

    2. Resolution: The installer can now disable the AutoUpdate at the end of the installation by configuring the Post-Installation Options within McAfee Installation Designer.

Repost Patch 4 resolved issues:

  1. Issue: Universal uninstaller file does not uninstall Symantec Endpoint Protection 11 with password protection. (Reference: 569628)

    2. Resolution: The universal uninstaller now properly uninstalls password-protected installations of Symantec Endpoint Protection 11 before continuing with the installation of VirusScan Enterprise.

  2. Issue: ePolicy Orchestrator extensions do not display file version information unless checked into the ePolicy Orchestrator database.(Reference: 578075)

    3. Resolution: ePolicy Orchestrator extension files for VirusScan Enterprise now include the build number, as a version, in the naming schema for the file.

Repost Patch 3 resolved issues:

  1. Issue: VirusScan Enterprise would fail to install on a Vista or later system if Windows Defender was previously disabled. (Reference: 549951)

    2. Resolution: The universal uninstall now accounts for when the Windows Defender service is disabled.

Repost Patch 2 resolved issues:

  1. Issue: Some VirusScan Enterprise events were not being parsed properly by ePolicy Orchestrator 4.5. (Reference: 503537)

    2. Resolution: The VirusScan Enterprise Reports Extension will now handle events where specific fields are blank.

  2. Issue: During an upgrade from a customized VirusScan Enterprise 8.5i to VirusScan Enterprise 8.7i, the new McAfee Installation Designer custom settings were not getting applied. (Reference: 501306)

    3. Resolution: The Repost Patch 2 and later install packages now remove the previous McAfee Installation Designer settings when the preserve option is disabled on the upgrade.

  3. Issue: Some pre-patch 7 installs of VirusScan Enterprise 8.5i were corrupting the value for the Preferred Language setting. When the install was upgraded to VirusScan Enterprise 8.7i, this caused the McAfee Agent to stop communicating with the ePolicy Orchestrator server. (Reference: 511662)

    4. Resolution: The Repost Patch 2 and later install packages will correct the invalid registry entry during the install to prevent the situation.

Repost Patch 1 resolved issues:

  1. Issue: Silent installations might fail on hard drives that are designated as dynamic. The on-access scanner service fails to start, and the installation rolls back. (Reference: 443669)

    2. Resolution: The Repost Patch 1 and later installation packages now install to a dynamic disk, silently.

  2. Issue: Modifying an installation of VirusScan Enterprise to add the on-access scanner component caused the scanner to be in a disabled state. (Reference: 464808)

    3. Resolution: The modification to add the on-access scanner component now correctly enables the scanner at the completion of the installation.

  3. Issue: An 8E bugcheck (blue screen) sometimes occurred when VirusScan Enterprise 8.7i was installed along with Checkpoint VPN-1 SecureClient. (Reference: 438771)

    4. Resolution: The link driver was updated to avoid probing kernel memory unnecessarily.

  4. Issue: During an upgrade from a customized VirusScan Enterprise 8.5i to VirusScan Enterprise 8.7i, an issue sometimes occurred where the configuration tool did not properly backup and restore the registry information. The installation was left in a state where some of the product information still showed as the older version. (Reference: 443019)

    5. Resolution: The McAfee Installation Designer configuration applicator has been changed to be more comprehensive in backing up and in version checking during the upgrade, in order to prevent failures by other McAfee product installations that require version 8.7i.

  5. Issue: Creating a McAfee Installation Designer change package for VirusScan Enterprise and the AntiSpyware Enterprise Module sometimes failed to upgrade the evaluation versions to licensed versions, for both products. (Reference: 437509)

    6. Resolution: McAfee Installation Designer configuration applicator upgrades the licenses of VirusScan Enterprise and the AntiSpyware Enterprise Module when they are both evaluation versions.

File inventory

This release consists of a package called VSE870LMLRP5.zip, which contains the following files:

File name Description
ePOPolicyMigration.exe ePO Policy Migration Tool
example.sms Configuration file
FramePkg_UPD.exe McAfee Agent installer
mcavscv.scv Check Point SCV
msistrings.bin Configuration file
PKGCATALOG.Z Package catalog file
Patch5.htm Patch 5 Readme
Readme_DE.html Product Readme in German
Readme_EN.html Product Readme in English
Readme_ES.html Product Readme in Spanish
Readme_FR.html Product Readme in French
Readme_IT.html Product Readme in Italian
Readme_JA.html Product Readme in Japanese
Readme_KO.html Product Readme in Korean
Readme_NL.html Product Readme in Dutch
Readme_PL.html Product Readme in Polish
Readme_PT_BR.html Product Readme in Brazilian Portuguese
Readme_RU.html Product Readme in Russian
Readme_SV.html Product Readme in Swedish
Readme_ZH_CN.html Product Readme in Chinese Simplified
Readme_ZH_TW.html Product Readme in Chinese Traditional
Repost5.htm This document
Setup.INI Initialization file for SETUP.EXE
SetupVSE.EXE Installer for this release
SignLic.Txt License file
UnInst.exe 32-bit uninstaller file
UnInst.ini Initialization file for UnInstal.exe and UnInstX64.exe
UnInstX64.exe 64-bit uninstaller file
VIRUSCAN8700(205).zip ePolicy Orchestrator 4.x extension for VirusScan Enterprise
VIRUSCANREPORTS(154).zip ePolicy Orchestrator 4.x Reports for VirusScan Enterprise
vse870.msi Microsoft Installer file
VSE870Det.mcs ePolicy Orchestrator detection script for VirusScan Enterprise
WindowsInstaller-KB893803-v2-x86.exe Windows Installer update

The following files are new with this release:

No files have been updated since the release of Patch 5. Refer to the Patch5.htm Release Notes accompanying this document for information about changes to file versions since the previous Repost Patch release.

Installation instructions

Standalone installation

  1. Extract the Patch files from VSE870LMLRP5.zip to a temporary folder on your hard drive.
  2. Double-click the file SetupVSE.EXE inside the temporary folder created in Step 1.
  3. Follow the instructions of the installation wizard.

Installation steps via ePolicy Orchestrator 4.0.x

  1. On the computer where the ePolicy Orchestrator 4.0.x console resides, extract the files and folders from VSE870LMLRP5.zip to a temporary folder on your hard drive.
  2. Open the ePolicy Orchestrator 4.0.x console and add the package from the temporary folder created in Step 1 to your repository.

    3. NOTE: Refer to Checking in Packages Manually in the ePolicy Orchestrator 4.0.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

  3. From the Menu of the ePolicy Orchestrator console, click Configuration.
  4. From the Menu tabs, click Extensions.
  5. Click Install Extensions in the lower left of the window.
  6. Click Browse and locate the VIRUSCAN8700(205).zip extension update from the temporary folder created in Step 1.
  7. Click OK to begin the extension update.
  8. Click OK to accept the installation of the extension.
  9. Repeat the check-in process for the VIRUSCANREPORTS(154).zip reports extension.

    10. NOTE: Once the extensions are updated, the version can be verified in the ePolicy Orchestrator Extensions list (see File Inventory for version information).

Installation steps via ePolicy Orchestrator 4.5.x

  1. On the computer where the ePolicy Orchestrator 4.5.x console resides, extract the files and folders from VSE870LMLRP5.zip to a temporary folder on your hard drive.
  2. Open the ePolicy Orchestrator 4.5.x console and add the package from the temporary folder created in Step 1 to your repository.

    3. NOTE: Refer to Checking in Packages Manually in the ePolicy Orchestrator 4.5.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

  3. From the Menu button of the ePolicy Orchestrator console, click Extensions in the Software submenu.
  4. Click Install Extensions in the lower left of the window.
  5. Click Browse and locate the VIRUSCAN8700(205).zip extension update from the temporary folder created in Step 1.
  6. Click OK to begin the extension update.
  7. Click OK to accept the installation of the extension.
  8. Repeat the check-in process for the VIRUSCANREPORTS(154).zip reports extension.

    9. NOTE: Once the extensions are updated, the version can be verified in the ePolicy Orchestrator Extensions list (see File Inventory for version information).

Installation steps via ePolicy Orchestrator 4.6.x

  1. On the computer where the ePolicy Orchestrator 4.6.x console resides, extract the files and folders from VSE870LMLRP5.zip to a temporary folder on your hard drive.
  2. Open the ePolicy Orchestrator 4.6.x console and add the package from the temporary folder created in Step 1 to your repository.

    3. NOTE: Refer to Checking in Packages Manually in the ePolicy Orchestrator 4.6.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

  3. From the Menu button of the ePolicy Orchestrator console, click Extensions in the Software submenu.
  4. Click Install Extensions in the lower left of the window.
  5. Click Browse and locate the VIRUSCAN8700(205).zip extension update from the temporary folder created in Step 1.
  6. Click OK to begin the extension update.
  7. Click OK to accept the installation of the extension.
  8. Repeat the check-in process for the VIRUSCANREPORTS(154).zip reports extension.

    9. NOTE: Once the extensions are updated, the version can be verified in the ePolicy Orchestrator Extensions list (see File Inventory for version information).

Verifying installation

Always reboot the client system prior to validating that the install has been installed successfully.

Removing the installation

COPYRIGHT

Copyright © 2011 McAfee, Inc. All Rights Reserved.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

TRADEMARK ATTRIBUTIONS

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

License agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.