McAfee VirusScan Setup

Arts and Sciences Computing

Installing McAfee Virus Shield

For Windows95/98, Windows NT, and Windows 2000

These instructions show how to install McAfee VirusScan 4.51 for Windows 9x and Windows NT/2000. Unlike previous versions VirusScan, version 4.51 uses the same installation files for each operating system. Version 4.51 also combines the DAT and Engine updates, as well as allowing for incremental updates. This results in the shortest possible connection times to update VirusScan. See directions on how to check the version, engine, and DAT level of your installation of McAfee Virus Scan.

Arts and Sciences Computing (ASC) has created a custom install package that preconfigures the AutoUpdate and AutoUpgrade features to point to a Duke FTP site. This site, however, is only available to computers with Duke IP addresses (152.3.X.X or 152.16.X.X, i.e. machines located at Duke or on DSL/CableModem connections authorized to issue Duke IPs.) Fortunately, there are simple adjustments that allow updating from McAfee's FTP site.

The ASC installation package also makes Email, Download, and Internet scanners part of a typical install, unlike the standard package. This allows the fullest possible protection from viruses.

Note: There is a McAfee 5.X, but it is a retail version for home users and not appropriate for our needs. It is not the "newest" version available. It is numbered differently because it is a different product. The next site-licensed extension of McAfee for the university environment will be another version 4.5X or version 6.

General Steps

Uninstall Old Versions
Install VirusScan 4.51
Updating DAT Files
Non-Duke IP (Home-User) Adjustments

Uninstall Old Versions

The installer for version 4.51 will uninstall older version of Mcafee. If version 4.5 is installed, however, it will not. It will simply update the existing pieces. Thus, if the Email, Download, and Internet scanners were not installed in VirusScan 4.5, they will not be available in the new installation. The solution is to manually uninstall the old version. On the clean machine, the new version will install all the scanners as part of a typical install.

There two ways to tell if the Email and Download scanners are missing. The first is in the system tray. If the VirusScan shield has a sword on it, it probably needs uninstalling before installing version 4.51. If not, it should be OK.

Uninstall necessary Probably OK

The more certain way to tell is to double click on the VirusScan shield in the system tray. This brings up a scan properties window.

Uninstall necessary

This first Status window came from clicking the shield with the sword. It only has the System Scan tab; it is missing the Email, Download and Internet scanners. This version of McAfee needs uninstalling before installing VirusScan 4.51

All Scanners installed

This Status window came from clicking the swordless shield. It has tabs for all four scanners. The version 4.51 installer will properly update these scanners. Manual uninstallation is unnecessary.

Finding and Running the Uninstaller

Unfortunately, when manual uninstallation is necessary, it may not be straightforward. A version of VirusScan 4.5 widely distributed by ASC did not include an uninstaller. For a lucky few, VirusScan will appear in the Add/Remove Programs control panel. Most, however, will have to locate the setup files, which act as an uninstaller as well.

Find setup files for VirusScan 4.5
- On //AAS101/admin, or \\language_lab\asc,
  - locate /setups/virus/mcafee/archives/vshnt.45/vsci45l.nai.exe
The self-extracting zip file will unzip to c:\temp\vs450.
From that directory, run setup.exe.
Click Next at the intro screen.
The following window will appear:
Select Remove and click Next. Then click Remove to uninstall VirusScan.

Install VirusScan 4.51

After uninstalling older versions manually, the installation of VirusScan 4.51 can proceed correctly.

Find setup files for VirusScan 4.51
- On //AAS101/admin, or \\language_lab\asc,
  - locate /setups/virus/mcafee/vshnt.451/vsc451L.exe
The self-extracting zip file will unzip to c:\temp\mcafee.
From that directory, run setup.exe to start the installation.
Note: VirusScan can be installed unattended by running setup /q /i from a command prompt. The program will install, and once finished, will run AutoUpdate in a few minutes. Windows 98 machines will require a reboot to complete the installation.
For attended installation, after accepting the licensing agreement, for the Security Type, choose the default Use Standard Security.
Install as a Typical Installation. Notice the typical install includes the Email, Download and Internet scanners.
At "Completing McAfee VirusScan Setup" unselect the two default options and click Next. The emergency disk can be created at any time and is the same for all computers. If selected, the default scan will run will less than current DAT files, so run it later if necessary.
At "Update Virus Definition Files," select Wait and Run AutoUpdate Later and click next. McAfee will then AutoUpdate the DAT files a few minutes after the installation completes.
Click Finish to start VirusScan.

Updating DAT Files

The VirusScan Console (found under Start-Programs-Network Associates-VirusScan Console or by double clicking the magnifying glass in the System Tray) contains the utilities AutoUpdate and AutoUpgrade. In version 4.51, the AutoUpdate function has expanded its capabilities. AutoUpdate now works on an incremental update basis. Rather than download a whole 1 MB DAT (virus definitions) file each week, a delta file describes which 100 KB incremental change file needs downloading, cutting download times. Unlike older versions, using the same delta file, AutoUpdate can now download SuperDATs to upgrade the engine. This leaves the AutoUpgrade for its intended use, systematically and remotely installing new service packs and updating to the next version of VirusScan.

ASC's custom install pre-configures these utilities to point to our own FTP server and schedules them to run at appropriate times. These require no changes for Duke users. Only non-Duke users need to reconfigure these utilities. Thus, the following is for educational use only.

Configuring AutoUpdate

Open the VirusScan Console

and click on Autoupgrade.

A Task Properties window will open:

and click Configure. An Automatic Update window will appear, listing the update sites configured.

Two sites have been configured. Since the aas site is at the top of the list, VirusScan will check that site first for updates. If, for some reason, it has problems connecting or finding DAT files, it will move to the next site on the list. Select aas and click Edit to see the site properties.

The pre-configured AAS site points to the anonymous FTP site, ftp.aas.duke.edu/mcafee/v4. This is restricted to Duke IP's only. Therefore non-Duke users must do some re-configuring . Clicking OK twice will bring back the "AutoUpdate Task Properties" window. Click Schedule, to see when the AutoUpdate will try to run.

The AutoUpdate will try to run three times a week, sometime during the afternoon. If the computer is off during a scheduled Update, it will try to complete it the next time the computer is on.

Configuring AutoUpgrade

AutoUpgrade is structured the same way as AutoUpdate. Clicking on AutoUpgrade from the VirusScan Console, then on Configure will bring up a list of AutoUpgrade sites configured.

Clicking aas and then Edit will bring up the site properties.

The pre-configured AAS site points to ftp.aas.duke.edu/mcafee/v451. This directory is currently empty. This is why the VirusScan Console lists an error for AutoUpgrade. This utility will be used in the future, when the next version of VirusScan is released. At that time the setup files will be placed here. Thus version 4.51 will automatically be updated to the newest version.

Clicking Schedule from the AutoUpgrade task properties,

shows the upgrade is scheduled for just once a week.

Non-Duke IP (Home-User) Adjustments

The AAS FTP sites are restricted to on campus users or home users who have ISP's authorized to issue Duke IP (152.3.X.X or 152.16.X.X). Therefore, non-Duke users must edit the AutoUpdate and AutoUpgrade utilities.

Re-configuring AutoUpdate

As outlined above, bring up the "Site Options" for the aas AutoUpdate site, by clicking AutoUpdate on the VirusScan Console, clicking Configure, and Edit the aas site.

Unclick Enable site as shown, and all the options in the window will go gray. Click OK to return to the Site list. Select aas and click Move down.

This will put the Network Associate site at the top of the list as the only enabled site. Thus VirusScan will check at McAfee's FTP site for DAT updates.

Re-configuring AutoUpgrade

Similarly, bring up the aas AutoUpgrade site properties.

Unclick Enable site. After click OK, this will leave no enabled AutoUpgrade sites available.

The VirusScan console will still try to AutoUpgrade each week, but like the on-campus version, it will fail. However, it will fail immediately rather than looking for Upgrade files.