# Release Notes - McAfee® VirusScan® Enterprise 8.7i Repost Patch 4

Thank you for using McAfee software. This document contains important information about the current release. We strongly recommend that you read the entire document.

#### Contents

- About this release

- Rating
- Purpose
- Improvements
- Previous improvements

- Known issues
- Resolved issues

- Repost Patch 4 resolved issues
- Repost Patch 3 resolved issues
- Repost Patch 2 resolved issues
- Repost Patch 1 resolved issues

- File inventory
- Installation instructions

- Standalone installation
- Installation steps via ePolicy Orchestrator 3.6.x
- Installation steps via ePolicy Orchestrator 4.0.x
- Installation steps via ePolicy Orchestrator 4.5.x

- Verifying installation
- Removing the installation
- Copyright

## About this release

For a list of supported environments for VirusScan Enterprise 8.7i on Microsoft Windows, see McAfee Support KnowledgeBase article KB51111.

- Release Date: 10-22-2010

This release was developed for use with:

- McAfee Agent: 4.0.0.1496
- VirusScan Enterprise: 8.7i
- Detection Definitions (DAT): 6037.0000
- Scan Engine: 5.4.00

## Rating

McAfee recommends this release for all environments. Repost Patch 4 is considered a High Priority Release. See McAfee Support KnowledgeBase article KB51560 for information on ratings.

## Purpose

This release contains a variety of improvements. McAfee has spent a significant amount of time finding, fixing, and testing the fixes in this release. Please review the Known and Resolved issues lists for additional information on the individual issues. See McAfee Support KnowledgeBase article KB65944 for the most current information regarding this release.

This document supplements the product Release Notes and Patch Notes in the release package.

## Improvements

This release of the software includes the following improvements.

1. Update to the universal uninstaller script which includes new generic logic for detecting some competitors' products.

## Previous improvements

Previous releases of the software include the following improvements.

1. VirusScan Enterprise 8.7i Repost Patch 3 is the first package to include a placeholder stub DAT that reduces the size of the package, and prevents the system from having to download a DAT package twice in order to be fully installed and up-to-date. Refer to McAfee Support KnowledgeBase article KB68449 for further information on the benefits and cautions in using this new package.

2. The Heuristic network check for suspicious files (known as Artemis) settings for On-Access, On-Demand and Email Scanners are now set to Very Low by default in the installer and in the McAfee Default policy for VirusScan Extension. Refer to McAfee Support KnowledgeBase article KB53735 for further information on Artemis Technology.
   NOTE: See item #1 under Known Issues for further information about this topic.

3. The installation packages for patches and reposts have been upgraded so that the installation log name, created in the McAfeeLogs folder, has a dynamically generated name based on the current date and time of the installation. This helps save logs that might have been overwritten with the previous “backup previous log only” method.

4. The on-access scanner memory scan function (Processes on enable) has been modified significantly to make it more comprehensive. Because of this change, the installer has been modified to enable the option only if VirusScan is installed under Maximum Security settings.

5. The installation of VirusScan Enterprise now disables the Defender feature of Microsoft Windows Vista in order to improve performance of the operating system.

## Known issues

Here is a list of known issues that we are aware of at production time.

1. Issue: VirusScan Enterprise 8.7i packages created with McAfee Installation Designer fail to install on computers running Windows 7 when they are deployed from ePolicy Orchestrator.
Workaround: See McAfee Support KnowledgeBase article KB69397 for information on obtaining the latest McAfee Installation Designer repost that resolves this issue.

#### Previous known issues

1. Issue: With the change in Artemis defaults there are several variables that need to be taken into account when introducing this Repost Package into the environment.
NOTE FOR CURRENT AND NEW USERS:

- The product installation does not modify current settings to set the Artemis Sensitivity Level to Very Low. If VirusScan Enterprise 8.5i had Artemis levels set prior to this repost deployment, those settings are preserved.
- The VirusScan 8.7i NAP and extension that are included with the Repost do change the McAfee Default policy, but do not modify the My Default policy, or any custom policy settings that were made prior to the check-in of the new NAP/extension. If this is the first time that the extension is checked in, however, My Defaults has Artemis levels set to Very Low.
- When the ePolicy Orchestrator migration tool, which comes with this package, is used to migrate VirusScan 8.5i settings it now sets Artemis levels to a default of Very Low.

## Resolved issues

The resolved issues are divided into subsections per patch, showing when each fix was added to the compilation.

#### Repost Patch 4 resolved issues:

1. Issue: Universal uninstaller file does not uninstall Symantec Endpoint Protection 11 with password protection. (Reference: 569628)
Resolution: The universal uninstaller now properly uninstalls password-protected installations of Symantec Endpoint Protection 11 before continuing with the installation of VirusScan Enterprise.

2. Issue: ePolicy Orchestrator extensions do not display file version information unless checked into the ePolicy Orchestrator database.(Reference: 578075)
Resolution: ePolicy Orchestrator extension files for VirusScan Enterprise now include the build number, as a version, in the naming schema for the file.

#### Repost Patch 3 resolved issues:

1. Issue: VirusScan Enterprise would fail to install on a Vista or later system if Windows Defender was previously disabled. (Reference: 549951)
Resolution: The universal uninstall now accounts for when the Windows Defender service is disabled.

#### Repost Patch 2 resolved issues:

1. Issue: Some VirusScan Enterprise events were not being parsed properly by ePolicy Orchestrator 4.5. (Reference: 503537)
Resolution: The VirusScan Enterprise Reports Extension will now handle events where specific fields are blank.

2. Issue: During an upgrade from a customized VirusScan Enterprise 8.5i to VirusScan Enterprise 8.7i, the new McAfee Installation Designer custom settings were not getting applied. (Reference: 501306)
Resolution: The Repost Patch 2 and later install packages now remove the previous McAfee Installation Designer settings when the preserve option is disabled on the upgrade.

3. Issue: Some pre-patch 7 installs of VirusScan Enterprise 8.5i were corrupting the value for the Preferred Language setting. When the install was upgraded to VirusScan Enterprise 8.7i, this caused the McAfee Agent to stop communicating with the ePolicy Orchestrator server. (Reference: 511662)
Resolution: The Repost Patch 2 and later install packages will correct the invalid registry entry during the install to prevent the situation.

#### Repost Patch 1 resolved issues:

1. Issue: Silent installations might fail on hard drives that are designated as dynamic. The on-access scanner service fails to start, and the installation rolls back. (Reference: 443669)
Resolution: The Repost Patch 1 and later installation packages now install to a dynamic disk, silently.

2. Issue: Modifying an installation of VirusScan Enterprise to add the on-access scanner component caused the scanner to be in a disabled state. (Reference: 464808)
Resolution: The modification to add the on-access scanner component now correctly enables the scanner at the completion of the installation.

3. Issue: An 8E bugcheck (blue screen) sometimes occurred when VirusScan Enterprise 8.7i was installed along with Checkpoint VPN-1 SecureClient. (Reference: 438771)
Resolution: The link driver was updated to avoid probing kernel memory unnecessarily.

4. Issue: During an upgrade from a customized VirusScan Enterprise 8.5i to VirusScan Enterprise 8.7i, an issue sometimes occurred where the configuration tool did not properly backup and restore the registry information. The installation was left in a state where some of the product information still showed as the older version. (Reference: 443019)
Resolution: The McAfee Installation Designer configuration applicator has been changed to be more comprehensive in backing up and in version checking during the upgrade, in order to prevent failures by other McAfee product installations that require version 8.7i.

5. Issue: Creating a McAfee Installation Designer change package for VirusScan Enterprise and the AntiSpyware Enterprise Module sometimes failed to upgrade the evaluation versions to licensed versions, for both products. (Reference: 437509)
Resolution: McAfee Installation Designer configuration applicator upgrades the licenses of VirusScan Enterprise and the AntiSpyware Enterprise Module when they are both evaluation versions.

## File inventory

This release consists of a package called VSE870LMLRP4.zip, which contains the following files:

File name | Description
--- | ---
ePOPolicyMigration.exe | ePO Policy Migration Tool
example.sms | Configuration file
FramePkg_UPD.exe | McAfee Agent installer
mcavscv.scv | Check Point SCV
msistrings.bin | Configuration file
PKGCATALOG.Z | Package catalog file
Patch4.htm | Patch 4 Readme
Readme_DE.html | Product Readme in German
Readme_EN.html | Product Readme in English
Readme_ES.html | Product Readme in Spanish
Readme_FR.html | Product Readme in French
Readme_IT.html | Product Readme in Italian
Readme_JA.html | Product Readme in Japanese
Readme_KO.html | Product Readme in Korean
Readme_NL.html | Product Readme in Dutch
Readme_PL.html | Product Readme in Polish
Readme_PT_BR.html | Product Readme in Brazilian Portuguese
Readme_RU.html | Product Readme in Russian
Readme_SV.html | Product Readme in Swedish
Readme_ZH_CN.html | Product Readme in Chinese Simplified
Readme_ZH_TW.html | Product Readme in Chinese Traditional
Repost4.htm | This document
Setup.INI | Initialization file for SETUP.EXE
SetupVSE.EXE | Installer for this release
SignLic.Txt | License file
UnInst.exe | 32-bit uninstaller file
UnInst.ini | Initialization file for UnInstal.exe and UnInstX64.exe
UnInstX64.exe | 64-bit uninstaller file
VIRUSCAN8700(195).zip | ePolicy Orchestrator 4.x extension for VirusScan Enterprise
VIRUSCANREPORTS(154).zip | ePolicy Orchestrator 4.x Reports for VirusScan Enterprise
vse870.msi | Microsoft Installer file
VSE870.Nap | ePolicy Orchestrator 3.6.x NAP for VirusScan Enterprise
VSE870Det.mcs | ePolicy Orchestrator detection script for VirusScan Enterprise
VSE870Reports.Nap | ePolicy Orchestrator 3.6.x Reports for VirusScan Enterprise
WindowsInstaller-KB893803-v2-x86.exe | Windows Installer update

The following files are new with this release:

No files have been updated since the release of Patch 4. Refer to the Patch4.htm Release Notes accompanying this document for information about changes to file versions since the previous Repost Patch release.

## Installation instructions

- Refer to the VirusScan Enterprise 8.7i Installation Guide to install and deploy software in a production environment.
- VirusScan Enterprise 8.7i Repost Patch 4 includes McAfee Agent 4.0.0.1496.
- A reboot is needed to fully load the system drivers into memory.
- The package installation does not force a reboot.

#### Standalone installation

1. Extract the Patch files from VSE870LMLRP4.zip to a temporary folder on your hard drive.
2. Double-click the file SetupVSE.EXE inside the temporary folder created in Step 1.
3. Follow the instructions of the installation wizard.

#### Installation steps via ePolicy Orchestrator 3.6.x

1. On the computer where the ePolicy Orchestrator 3.6.x console resides, extract the files and folders from VSE870LMLRP4.zip to a temporary folder on your hard drive.
2. Open the ePolicy Orchestrator 3.6.x console and add the package from the temporary folder created in Step 1 to your repository.

NOTE: Refer to Checking in product deployment packages manually in the ePolicy Orchestrator 3.6.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

3. In the ePolicy Orchestrator console, add the VSE870.NAP file using the Check in NAP wizard.
4. Repeat the check-in process for the VSE870REPORTS.NAP reports extension.

#### Installation steps via ePolicy Orchestrator 4.0.x

1. On the computer where the ePolicy Orchestrator 4.0.x console resides, extract the files and folders from VSE870LMLRP4.zip to a temporary folder on your hard drive.
2. Open the ePolicy Orchestrator 4.0.x console and add the package from the temporary folder created in Step 1 to your repository.

NOTE: Refer to Checking in Packages Manually in the ePolicy Orchestrator 4.0.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

3. From the Menu of the ePolicy Orchestrator console, click Configuration.
4. From the Menu tabs, click Extensions.
5. Click Install Extensions in the lower left of the window.
6. Click Browse to locate and select the VIRUSCAN8700(195).zip extension update from the temporary folder created in Step 1.
7. Click OK to begin the extension update.
8. Click OK to accept the installation of the extension.
9. Repeat the check-in process for the VIRUSCANREPORTS(154).zip reports extension.

NOTE: Once the extensions are updated, the version can be verified in the ePolicy Orchestrator Extensions list (see File Inventory for version information).

#### Installation steps via ePolicy Orchestrator 4.5.x

1. On the computer where the ePolicy Orchestrator 4.5.x console resides, extract the files and folders from VSE870LMLRP4.zip to a temporary folder on your hard drive.
2. Open the ePolicy Orchestrator 4.5.x console and add the package from the temporary folder created in Step 1 to your repository.

NOTE: Refer to Checking in Packages Manually in the ePolicy Orchestrator 4.5.x online Help, for instructions on adding a package to the repository. The package type for this install is “Products or Updates.”

3. From the Menu button of the ePolicy Orchestrator console, click Extensions in the Software submenu.
4. Click Install Extensions in the lower left of the window.
5. Click Browse and locate the VIRUSCAN8700(195).zip extension update from the temporary folder created in Step 1.
6. Click OK to begin the extension update.
7. Click OK to accept the installation of the extension.
8. Repeat the check-in process for the VIRUSCANREPORTS(154).zip reports extension.

NOTE: Once the extensions are updated, the version can be verified in the ePolicy Orchestrator Extensions list (see File Inventory for version information).

## Verifying installation

Always reboot the client system prior to validating that the install has been installed successfully.

- Open the VirusScan Console and select About from the Help menu. The About VirusScan Enterprise window, Installed Patches, displays “4.”
- After property information has been collected by the ePolicy Orchestrator agent, the client system displays that Patch 4 is installed as the “Hotfix /Patch” version within the agent "About..." section. If the value HotfixVersions appears, it is a temporary value and is removed after a full property collection from the client is performed.
- Confirm that the expected files are installed by checking the version number of individual files. File versions should match the list of files in File Inventory above and within the Patch 4 ReadMe that accompanies this file.

NOTE: Patch releases are not displayed or do not report that the Patch is installed if an error occurred during installation, or if a file did not install correctly.

## Removing the installation

Warning: Removing the installation leaves the system without any virus protection software until another installation is scheduled and completed.

- For Windows XP, Windows 2003, Windows Vista, Windows 2008, and Windows 7 operating systems, the installation can be removed manually via Add/Remove Programs if the user has administrative rights to the local system.
- For all systems managed by ePolicy Orchestrator, a removal task can be set up and applied to each system that requires the installation removed.

Note: After removing VirusScan Enterprise from a system, we recommend that you reboot the client system.

## COPYRIGHT

Copyright © 2010 McAfee, Inc. All Rights Reserved.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

#### TRADEMARK ATTRIBUTIONS

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

#### License agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.