INSTALLATION GUIDE. VirusScan Enterprise VERSION 7.0

Transcription

1 INSTALLATION GUIDE VirusScan Enterprise VERSION 7.0

2 COPYRIGHT 2003 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 3965 Freedom Circle, Santa Clara, California 95054, or call TRADEMARK ATTRIBUTIONS Active Firewall, Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, CNX, CNX Certification Certified Network Expert and design, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon s, Dr Solomon s label, Enterprise SecureCast, Enterprise SecureCast (in Katakana), Event Orchestrator, EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HomeGuard, Hunter, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, MultiMedia Cloaking, Net Tools, Net Tools (in Katakana), NetCrypto, NetScan, NetShield, NetStalker, Network Associates, NetXray, NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PrimeSupport, Recoverkey, Recoverkey International, Registry Wizard, ReportMagic, Router PM, Safe & Sound, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), Stalker, SupportMagic, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, Who s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners. This product includes or may include software developed by the OpenSSL Project for use in the OpenSSL Toolkit. ( This product includes or may include cryptographic software written by Eric Young. (eay@cryptsoft.com) LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND. Issued MARCH 2003 / VirusScan Enterprise software version 7.0

3 Contents Preface Audience Getting more information Contacting McAfee and Network Associates Installing the VirusScan Enterprise Software Before you begin System requirements Server requirements Workstation requirements Product license Terminal Services Installing the VirusScan Enterprise program files Start the Setup utility Start the installation Typical installation Custom installation Command line installation Installing silently Installing to a custom directory Selecting specific features to install Customized installation properties Setting reboot options Removing incompatible software Preserving settings Running Setup from a login script Installed components and files Testing your installation Modifying the VirusScan Enterprise program files Start the Setup utility Modify program features Reinstall or repair program files Installation Guide iii

4 Contents 2 Removing the VirusScan Enterprise Software Using the Setup utility Using the command-line options Using the Add/Remove Programs utility iv VirusScan Enterprise software version 7.0

5 Preface This Installation Guide introduces McAfee VirusScan Enterprise software version 7.0, and provides the following information: System requirements. Detailed instructions for installing the software. Roadmap for getting additional information or help. Audience This information is intended primarily for two audiences: Network administrators who are responsible for the company s anti-virus and security program. Users who are responsible for updating virus definition (DAT) files on their workstation, or configuring the software s detection options. Installation Guide 5

6 Preface Getting more information Product Guide Product introduction and features, detailed instructions for configuring the software, information on deployment, recurring tasks, and operating procedures. Available in an Adobe Acrobat.PDF file from either the product CD or the McAfee download site. Help Product information in the Help system that is accessed from within the application. The Help system provides high-level and detailed information. Access from either a Help menu option or Help button in the application. Context-sensitive (What s This?) Help provides brief descriptions of the selections in the application. Access by right-clicking on an option, pressing the [F1] control key, or dragging the question icon to an option. Release Guide High-level description of new and changed features for this version of the product. Configuration Guide For use with epolicy Orchestrator. Procedures for installing, configuring, deploying, and managing your McAfee product through epolicy Orchestrator management software. Available in an Adobe Acrobat.PDF file from either the product CD or the McAfee download site. 6 VirusScan Enterprise software version 7.0

7 Preface Release Notes README file. Product information, system requirements, resolved issues, any known issues, and last-minute additions or changes to the product or its documentation. Available as a.txt file from either the product CD or the McAfee download site. Contact A list of phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world. Also provides contact information for services and resources, including: Technical Support Customer Service Download Support AVERT Anti-Virus Emergency Response Team McAfee Beta Site On-Site Training Network Associates Offices Worldwide Installation Guide 7

8 Preface Contacting McAfee and Network Associates Technical Support McAfee Beta Site AVERT Anti-Virus Emergency Response Team Download Site DAT File Updates Product Upgrades ftp://ftp.nai.com/pub/antivirus/datfiles/4.x Valid grant number required. Contact Network Associates Customer Service. On-Site Training Network Associates Customer Service: Web US, Canada, and Latin America toll-free: Phone VIRUS NO or Monday Friday, 8 a.m. 8 p.m., Central Time For additional information on contacting Network Associates and McAfee including toll-free numbers for other geographic areas see the Contact file that accompanies this product release. 8 VirusScan Enterprise software version 7.0

9 Installing the VirusScan Enterprise Software 1 The VirusScan Enterprise 7.0 software supports both servers, workstations, and many third party applications. It is a replacement for: VirusScan version software for workstations. NetShield NT version 4.5 software for servers. NetShield for Celerra version 4.5 for Celerra filers. The following topics are covered in this chapter: Before you begin on page 9. Installing the VirusScan Enterprise program files on page 13. Testing your installation on page 39. Modifying the VirusScan Enterprise program files on page 40. Before you begin McAfee distributes VirusScan Enterprise software in two ways: As an archive file that you can download from the web. On a product CD. To install VirusScan Enterprise, you must have administrator rights for the computer on which you plan to install the program. When you install VirusScan Enterprise 7.0 on a computer with an older version of NetShield or VirusScan, the 7.0 version replaces the older software. You have the option of preserving settings from the previous version installed. Alternatively, you can remove the previous version first, then install VirusScan Enterprise 7.0. Review the system requirements to verify that the program can run on your system, then follow the installation steps that start on page 13. The following topics are covered in this section: System requirements on page 10. Product license on page 12. Terminal Services on page 12. Installation Guide 9

10 System requirements Ensure that your computer meets the following system requirements before you start the installation process. Server requirements The VirusScan Enterprise software installs and runs on a server equipped with: An Intel processor or compatible architecture. McAfee recommends an Intel Pentium processor or Celeron running a minimum of 166MHz. A CD-ROM drive or an Internet connection. Any of the following Microsoft Windows platforms: Windows NT 4.0 Server, with Service Pack 6 or 6a. Windows NT 4.0 Enterprise Server, with Service Pack 6 or 6a. Windows 2000 Server, with Service Pack 1, 2, or 3. Windows 2000 Advanced Server, with Service Pack 1, 2, or 3. Windows 2000 DataCenter Server, with Service Pack 1, 2, or 3. Windows Server 2003 Standard (formerly known as Windows.NET Server 2003, Standard Edition). Windows Server 2003 Enterprise (formerly known as Windows.NET Server 2003, Enterprise Edition). Windows Server 2003 Web (formerly known as Windows.NET Server 2003, Web Edition). At least 32MB of RAM. For information on optimal operating system performance, review Microsoft s guidelines for minimum RAM configuration. Adequate hard disk space as follows: 20MB If you perform a complete installation of all the program s features and modules, it occupies approximately 20MB of disk space on your computer. 25MB The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete. 10 VirusScan Enterprise software version 7.0

11 Workstation requirements The VirusScan Enterprise software installs and runs on a workstation equipped with: An Intel processor or compatible architecture. McAfee recommends an Intel Pentium processor or Celeron running a minimum of 166MHz. A CD-ROM drive or an Internet connection. Any of the following Microsoft Windows platforms: Windows NT 4.0, with Service Pack 6 or 6a. Windows 2000 Professional, with Service Pack 1, 2, or 3. Windows XP Home and Professional, with Service Pack 1. Microsoft Internet Explorer, version 4.0 or later. NOTE If you plan to use McAfee AutoUpdate Architect, consider the following. Although it is not a requirement for VirusScan Enterprise, McAfee AutoUpdate Architect requires that you must have Internet Explorer, version 6.0 or later. If you have both the VirusScan Enterprise and McAfee AutoUpdate Architect products installed on the same computer, you must meet the minimum requirements that accommodate both products. At least 32MB of RAM. For information on optimal operating system performance, review Microsoft s guidelines for minimum RAM configuration. Adequate hard disk space as follows: 20MB If you perform a complete installation of all the program s features and modules, it occupies approximately 20MB of disk space on your computer. 25MB The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete. Installation Guide 11

12 Product license If you are installing a licensed version of the VirusScan Enterprise 7.0 software for the first time, the product will be licensed during the installation process. Skip this section and go to Installing the VirusScan Enterprise program files on page 13. If you are installing a licensed version of the VirusScan Enterprise 7.0 software over an evaluation version, you must upgrade the evaluation version to a licensed version. The license does not automatically upgrade itself if you are installing over an evaluation version. WARNING You must perform the license upgrade before the evaluation period expires. If you do not, the scanning and updating functions will stop until you replace the evaluation version with a licensed version of the product. Use one of these methods to upgrade an evaluation version of VirusScan Enterprise to a licensed version: 1 Use the McAfee Installation Designer to upgrade an installed evaluation version to a licensed version, as follows a b Install the licensed version of VirusScan Enterprise. Use McAfee Installation Designer to upgrade the license. Refer to the McAfee Installation Designer Product Guide for specific details. 2 Remove the existing evaluation version of the product and install the licensed version of the product. If you use this method you will lose all of the settings you selected for the previous installation. This method is only recommended if you cannot use McAfee Installation Designer to upgrade the license. Terminal Services Terminal Services is a multi-session environment that provides remote computers access to Windows-based programs running on the server. Using Terminal Services is optional. However, if you have Terminal Services installed, then you must install the VirusScan Enterprise product using the Add/Remove Programs utility that is included in the Windows Control Panel. To access the Add/Remove Programs utility, select Start Settings Control Panel Add/Remove Programs. NOTE If Terminal Services is installed, you must turn on application mode before starting the installation process. Review Microsoft s documentation for more information about using Terminal Services. 12 VirusScan Enterprise software version 7.0

13 Installing the VirusScan Enterprise program files You can install the VirusScan Enterprise program files on either a server or workstation. During installation, the installer determines whether you are installing to a server or a workstation and sets a registry value for epolicy Orchestrator reporting (via plug-in) to McAfee VirusScan Enterprise Server or McAfee VirusScan Enterprise Workstation, respectively. This allows epolicy Orchestrator to distinguish between a server and a workstation for reporting and policy enforcement purposes. Use any of these methods to install the VirusScan Enterprise software: The Setup utility that comes with the VirusScan Enterprise software. See Start the Setup utility on page 14. The Command line. See Command line installation on page 29. McAfee Installation Designer can be used to create a customized installation package and to configure product settings. See the McAfee Installation Designer Product Guide for detailed instructions. Review the System requirements starting on page 10 before you begin the installation process. The following topics are covered in this section: Start the Setup utility. Start the installation. Typical installation. Custom installation. Command line installation. Installed components and files. Installation Guide 13

14 Start the Setup utility On the computer that you want to install the program: 1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods: If your copy of the software is on the product CD: a b Insert the CD into the CD-ROM drive. Click Install from the Welcome dialog box. If you downloaded the software: a b c Create a temporary folder on your hard drive. Use a decompression utility, such as WinZip, to extract the files you downloaded to this folder. Click the Start button, then select Run. The Run dialog box appears. Figure 1-1. Run d Type <X>:\SETUP.EXE in the text box, then click OK. Here, <X>: represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package. 14 VirusScan Enterprise software version 7.0

15 The McAfee VirusScan Enterprise Setup dialog box appears. Figure 1-2. McAfee VirusScan Enterprise Setup 2 Review the product information: a b Click View Readme to display the README file, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box. When you have finished reviewing the product information, click Next to open the Network Associates Licensing dialog box. Installation Guide 15

16 Figure 1-3. Network Associates License 3 In the License expiry type text box, click to select the type of license. NOTE The license type must match the length of the license that you agreed to, when purchasing the software. If you are unsure of which type of license to select, contact the person from which you purchased the software. 4 In the Select country where purchased and used text box, click to select the country in which you are using the software. 5 Read the license agreement carefully, then choose one of these options: If you agree to the license terms, select I accept the terms in the license agreement, then click OK to continue. If you do not agree to the terms, select I do not accept the terms in the license agreement, then click Cancel to stop the installation process. 16 VirusScan Enterprise software version 7.0

17 Start the installation After you have accepted the terms of the license, follow these steps to start the installation process. If you are installing the VirusScan Enterprise 7.0 software over a previous version of NetShield or VirusScan software, the Previous Version Detected dialog box appears. Go to Step 1. If you are installing the VirusScan Enterprise 7.0 software for the first time, or reinstalling the software, (if Setup does not detect a previously installed version of either NetShield or VirusScan), the Select Setup Type dialog box appears. Go to Step 2. 1 In the Previous Version Detected dialog box, determine whether you want to preserve settings for saved tasks, user-specified extensions, and exclusions settings from previously installed versions of NetShield and VirusScan 4.5.1: Figure 1-4. Previous Version Detected a Preserve Settings. This option is selected by default. Deselect this option if you do not want to continue using the settings from the previous version of the McAfee anti-virus software. WARNING If Preserve Settings is not selected, the settings from the previously installed software are removed. b Click Next to continue. Installation Guide 17

18 The Select Setup Type dialog box appears. Figure 1-5. Setup Type 2 Choose from these options: Typical. This option is selected by default. A typical installation installs the software, together with all utilities, and provides the functionality to perform virus scanning, updating of virus definition files, and sending of alert messages. McAfee recommends this installation for most environments. See Typical installation on page 19 for detailed instructions. NOTE Typical installation does not give you the capability of importing the AutoUpdate repository list or setting a user interface password. You must use Custom installation if you want to use these features. Custom. Select this option to choose the specific features you want to install. With custom installation, you also have the capability to import the AutoUpdate repository list, set up a user interface password, or install the alerting function to a workstation. See Custom installation on page 21 for detailed instructions. 18 VirusScan Enterprise software version 7.0

19 Typical installation Complete Step 1 and Step 2 in Start the Setup utility on page 14, then continue: 1 In the Select Setup Type dialog box, select the setup type and installation path: a b Typical. This option is selected by default. In the Install To area, select the installation path. By default, Setup installs the VirusScan Enterprise program files to this path: <drive>:\program Files\Network Associates\VirusScan Accept the default path or click Browse to select another path. c d Click Disk Space to view the disk space requirements, then click OK to return to the Select Setup Type dialog box. Click Next to continue. The Ready to install dialog box appears. Figure 1-6. Ready to install 2 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process. NOTE Click Back to review or change any of the settings, then return to the Ready to install dialog box and click Install. The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation. Installation Guide 19

20 When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears. Figure 1-7. Setup completed successfully Update and scan options 3 You can run an update task or on-demand scan task upon completion of installation. Choose from these options: Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation. Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation. 4 Click Finish. NOTE Depending on the options you selected in Step 3, the program may run the update program or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs. 20 VirusScan Enterprise software version 7.0

21 5 You may be required to reboot your computer. If so, the VirusScan Setup dialog box appears. Figure 1-8. Reboot your machine Click Yes to reboot now, or click No to reboot at a later time. NOTE If you are installing VirusScan Enterprise over a previous version of NetShield or VirusScan, you are required to reboot your computer. Custom installation Use the Custom installation option to select specific features for installation. You can also specify whether you want to install the feature only, the feature and all subfeatures, or make a previously installed feature unavailable. Complete Step 1 and Step 2 in Start the Setup utility on page 14, then continue: 1 In the Select Setup Type dialog box, select the setup type and installation path: a b Select Custom. In the Install To area, select the installation path. By default, Setup installs the VirusScan Enterprise program files in this path: <drive>:\program Files\Network Associates\VirusScan Accept the default path or click Browse to select another path. c d Click Disk Space to view the disk space requirements, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box. Click Next to continue. Installation Guide 21

22 The Feature Selection dialog box appears. Figure 1-9. Feature Selection 2 In the Select which features you would like to install area, select the individual features you want to install. a b Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel. For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature. Figure Feature action options 22 VirusScan Enterprise software version 7.0

23 Choose from these action options: This feature will be installed on local hard drive. Installs the selected feature on the computer. This feature, and all subfeatures, will be installed on local hard drive. Installs the selected feature and all of the features that are subordinate to it. For example, if you select Console, then AutoUpdate, Scanner, On-Access Scanner, and On-Demand Scanner, and are also installed. This feature will not be available. Removes the selected feature, if it is already installed. c d In the Install To area, accept the default path or click Browse to select a new installation path. Click Next to continue. The Install Alert Manager dialog box appears. Figure Install Alert Manager NOTE The installation wizard detects whether Alert Manager is installed. If Alert Manager is already installed, the options on this dialog box are disabled. 3 Choose whether you want to install Alert Manager after the VirusScan Enterprise installation completes: Installation Guide 23

24 a Install Alert Manager Server. This option is selected by default if the current operating system is a server, Alert Manager has not already been installed, and Alert Manager is available in the specified location. Deselect this option if you do not want to install Alert Manager automatically after the VirusScan Enterprise installation completes. NOTE If you select this option, the Alert Manager files must be in the directory shown. b Alert Manager installation files. Accept the default path or click Browse to select a different location. WARNING If you do not install Alert Manager as part of a custom installation the first time you install VirusScan Enterprise 7.0, you can NOT use the VirusScan Enterprise installation utility to install Alert Manager at a later time. To install Alert Manager at a later time after VirusScan Enterprise has been installed, you must run the stand-alone Alert Manager installer. See the Alert Manager 4.7 Product Guide for more information. c Click Next to continue. The Product Configuration dialog box appears. Figure Product Configuration 24 VirusScan Enterprise software version 7.0

25 4 In the Product Configuration dialog box, choose from these options: a Import AutoUpdate repository list. This option is selected by default if a repository list resides in the installation directory. Select this option to import the repository list from the location you specify. Import the AutoUpdate repository list rom the following location. Accept the default location or click Browse to select a new location. NOTE If you do not import a repository list at this time, and a repository list resides in the installation directory, that repository list will be imported even though you do not select the Import AutoUpdate repository list option. If a repository list is not imported, AutoUpdate performs updates using the default Network Associates site as its repository list. See the Updating chapter in the VirusScan Enterprise Product Guide for more information about the repository list. b c Enable On-Access Scanner at the end of installation. This option is selected by default. Automatically starts the on-access scanner upon completion of the installation process. Deselect this option if you want to manually start the on-access scanner after installation. Click Next to continue. The Security Configuration dialog box appears. Figure Security Configuration Installation Guide 25

26 5 In the Security Configuration dialog box you can set a user interface password and determine which menu items users can see. a b c In the Configuration Password Protection area, enter and confirm the user interface password. In the Start Menu area, select Do not display the VirusScan items under the Start menu if you do not want to display these items on the menu. In the System tray icon and menu area, choose from these options: Show the system tray icon with all menu options. This option is selected by default. Deselect this option if you do not want to display all menu items on the system tray icon. Show the system tray icon with minimal menu options. Limit the menu items users can see on the system tray icon menu to About VirusScan Enterprise and On-Access Scan Statistics. All other menu items are not displayed on the system tray icon menu. Do not show the system tray icon. Prevent users from accessing the system tray icon menu. The system tray icon menu is not displayed in the system tray. NOTE If you choose not to set password protection and system tray icon options at this time, you can do so from the VirusScan Console after installation. See Setting user interface options in the VirusScan Enterprise Product Guide for more information. d Click Next to continue. 26 VirusScan Enterprise software version 7.0

27 The Ready to install dialog box appears. Figure Ready to install 6 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process. NOTE Click Back to review or change any of the settings, then return to the Ready to install dialog box and click Install. The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation. When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears. Installation Guide 27

28 Figure Setup completed successfully Update and scan options 7 You can run an update task or an on-demand scan task upon completion of installation. Choose from these options: Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation. Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation. 8 Click Finish. NOTE Depending on the options you selected in Step 7, the program may run the update task or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs. 9 You may be required to reboot your computer. If so, the VirusScan Setup dialog box appears. Figure Reboot your machine Click Yes to reboot now, or click No to reboot at a later time. 28 VirusScan Enterprise software version 7.0

29 NOTE If you are installing VirusScan Enterprise over a previous version of NetShield or VirusScan, you are required to reboot your computer. Command line installation The VirusScan Setup utility runs as a Microsoft Installer (MSI) application, which allows a wide array of custom installation options. Running the Setup utility from the command line allows you to customize the installation so that it runs the way you want and installs exactly the product features you want. NOTE You can run Setup from the command line to install the VirusScan Enterprise software to your local computer, if you have administrative privileges. To install the software to a remote computer, you must use epolicy Orchestrator, or other product deployment software. Refer to the VirusScan Enterprise Configuration Guide for information about how to use epolicy Orchestrator to install the program files. 1 Click the Start button, then select Run. The Run dialog box appears. 2 Enter the command line you want to use in the Run dialog box, then click OK. The Setup command-line syntax looks like this: setup PROPERTY=VALUE[,VALUE] [/option] This syntax does not require any particular order in its elements, except that you may not separate a property and its value. The syntax consists of: The name of the executable file: setup.exe. Any options you choose to add, each preceded by a / character. Options are not case sensitive. The installation scenarios that appear later in this guide discuss some of the available options. Any properties you want to use to shape how the installation runs. Each property consists of: A name, which must appear all in uppercase. An = sign. One or more values, each separated by commas. Most property values must appear in all uppercase too, but some, such as True and False, must appear in mixed case. The Microsoft Installer permits a large variety of properties, all of which you can use to determine how your installation runs. To learn about those properties, see the Microsoft Installer documentation. To install VirusScan Enterprise software, specifically, you can use these additional properties: Installation Guide 29

30 ADDLOCAL. Installs particular features to the local computer. INSTALLDIR. Specifies which installation directory you want to use. The value consists of the directory path. PRESERVESETTINGS. Specifies whether Setup should retain the configuration options you used for previous on-access scanner installations. By default, its value is True. REBOOT. Specifies whether Setup should restart your computer. You can force the computer to restart if a reboot is required, or prevent it from restarting. REMOVE. Removes one or more program features. You can specify a particular feature, or use the value ALL to remove all features. If you combine this property with the ADDLOCAL property, you can install all but one or two specific features. REMOVEINCOMPATIBLESOFTWARE. Removes competitor s anti-virus software that could conflict with this VirusScan Enterprise version. By default, its value is True. The following sections describe some common scenarios that use command-line options to run custom installations. Installing silently Use command-line options to set up VirusScan Enterprise software on each network node with little or no interaction from end users. During a silent installation, Setup does not display any of its usual wizard panels, or offer the end user any configuration options. Instead, you pre-configure these choices and run Setup in the background on each destination computer. You can install VirusScan Enterprise software on any unattended computer with or without the end user s knowledge, provided you have all the necessary administrative rights. For example, setup/q: Use /q to run a silent installation. Other semi-silent installation methods are: /qb /q+ /qb+ /qf Shows a small progress bar during installation, with a cancel button. Shows a success/failure installation complete dialog box. Shows both the progress and completed dialog boxes. Shows the full progress bar screen from the regular installation. 30 VirusScan Enterprise software version 7.0

31 To record installation progress in a log file, add this option and parameter to the Setup command line: /l*v c:\temp\log.txt Here, c:\temp\log.txt can be any directory and any file name you want to use to create the log file. This option logs all installer activity, including all files copied, all registry keys added, and all.ini file changes. Replace the * shown in the command-line example, with one or more of these parameters to limit the type of data that the log file records: i w e a r u c m o p status messages non-fatal warnings all error messages action starts action-specific records user requests initial user interface parameters out-of-memory or fatal exit information out-of-disk space messages terminal properties + append to existing file! flush each line to the log Installing to a custom directory To install VirusScan Enterprise software to a custom directory, add the INSTALLDIR property to the command line, then follow the property with a value for the directory you want to use. To install VirusScan Enterprise software to C:\My Anti-Virus Software, for example, type this line at the command prompt: setup INSTALLDIR= c:\my Anti-Virus Software /q Use quotes only if the destination directory name has spaces. You can add the /q switch if you want to run the installation silently. Selecting specific features to install When you run Setup from the command line to install specific program features, the utility installs those features according to a pre-existing hierarchy. This means that if you choose to install only the VirusScan Enterprise shell extensions, for example, Setup knows that you must have SCAN32.EXE, the VirusScan Enterprise application, installed in order to use the extensions. It therefore installs both this file and any related files. Installation Guide 31

32 To specify the features you want to install, Setup requires that you to add particular feature names as command-line parameters. The feature names you can specify from the command line are: Table 1-1. Installing features from the command line Feature Name AutoUpdate Console Scan OnAccessScanner OnDemandScanner ShellExtentions Description The AutoUpdate utility. The VirusScan Enterprise Console. The scanner and the scan extension. The on-access scanner. The on-demand scanner. Extensions that add right-click functionality that enables you to scan individual files. NOTE You can specify particular features, or use the ALL property to install all the features. To use these feature names in a command line, specify the destination and the feature name, exactly as it appears in the table. For example, to add the VirusScan Enterprise application to the local system, type this line at the command prompt: setup.exe ADDLOCAL=ALL/q Use a comma to separate values in order to install more than one feature. To add OnDemandScanner and OnAccessScanner together, for example, type this line at the command prompt: setup.exe ADDLOCAL=OnAccessScanner,OnDemandScanner/q For a complete installation, type this line at the command prompt: setup.exe ADDLOCAL=ALL/q To remove all VirusScan Enterprise components, type this line at the command prompt: setup.exe REMOVE=ALL/q To install all features except for one, for example the Scan feature, type this line at the command prompt: setup.exe ADDLOCAL=ALL REMOVE= Scan/q 32 VirusScan Enterprise software version 7.0

33 You can also choose different features for an installation that you do not run silently. If, for example, you leave off the /q option in any of the command line examples shown above, the Custom Setup wizard panel (see Custom installation on page 21) shows only the features you specify as those available for installation. If you use these same examples to specify a feature set for installation, Setup installs only the features you specified during a Typical installation. Customized installation properties You can customize the installation process using specific properties when installing from the command line. Table 1-2. Installation Customization Properties Command-Line Property PRESERVESETTINGS INSTALLDIR Function Preserves settings upon upgrade of NetShield 4.5 or VirusScan False = A False value cannot be set. True = Preserve settings. This is the default. Note: If you do not want to preserve settings, set the property to. This literally means PRESERVESETTINGS=, an empty string. Sets the default installation directory. INSTALLALERTMANAGER False = Do not install Alert Manager 4.7. True = Install Alert Manager 4.7, if present. Default is False if installing on a workstation and True if installing on a server. ALERTMANAGERSOURCEDIR INSTALL_SITEINFO_FILE Sets the default Alert Manager source path. The default path is \AMG. You can set it yourself in SETUP.INI. Imports the AutoUpdate repository list (SITELIST.XML). False = A False value cannot be set. True = Import the SITELIST.XML. The file already exists in the specified path. Note: If you do not want to import the AutoUpdate repository list, set the property to. This literally means INSTALL_SITEINFO_FILE=, an empty string. Installation Guide 33

34 Table 1-2. Installation Customization Properties (Continued) Command-Line Property CMASOURCEDIR LOCKDOWNVIRUSSCANSHORTCUTS VIRUSSCANICONLOCKDOWN ENABLEONACCESSSCANNER RUNAUTOUPDATE Function Set the source path for the SITELIST.XML. The default path is the current directory from which SETUP.EXE is being run. False = A False value cannot be set. True = Do not display any shortcuts under the start menu. Note: If you want to allow the shortcuts to be installed, set the property to. This literally means LOCKDOWNVIRUSSCANSHORTCUTS=, an empty string. This is the default. Lock down the product as follows: NORMAL = Show all the menu items on the VirusScan icon menu in the system tray.this is the default. MINIMAL = Show only the Enable On-Access Scan and About VirusScan Enterprise menu items on the VirusScan icon menu in the system tray. NOICON = Do not show the VirusScan icon menu in the system tray. False = A False value cannot be set. True = Enable on-access scanner upon completion of installation. This is the default. Note: If you do not want to enable the on-access scanner, set the property to. This literally means ENABLEONACCESSSCANNER=, an empty string. False = A False value cannot be set. True = Run update upon completion of installation. This is the default. Note: If you do not want to run update upon completion of installation, set the property to. This literally means RUNAUTOUPDATE=, an empty string. 34 VirusScan Enterprise software version 7.0

35 Table 1-2. Installation Customization Properties (Continued) Command-Line Property RUNONDEMANDSCAN RUNAUTOUPDATESILENTLY RUNONDEMANDSCANSILENTLY Function False = Do not run a scan of all local drives upon completion of installation. True = Run a scan of all local drives upon completion of installation. This is the default. False = Do not run silent update of virus definition files upon completion of installation. This is the default. True = Run silent update upon completion of installation. False = Do not run on-demand scan silently upon completion of installation. This is the default. True = Run on-demand scan silently upon completion of installation. Setting reboot options You can force a reboot if one is required, or prevent the destination computer from restarting during the installation. To do this, add the REBOOT property to the command line: REBOOT=F forces the restart if one is required. REBOOT=R prevents the restart. If you must first install the Windows Installer service on a destination computer, Setup requires you to restart, whether you force or prevent a restart for other reasons. Setup resumes after MSI forces a restart. It then uses the options you set to determine whether to force or prevent a restart after the installation. setup REBOOT=R/q This example runs a silent installation and prevents a system restart. Removing incompatible software By default, Setup removes incompatible software during a silent installation. Incompatible software is defined as all competitor s products. If you do not want to remove incompatible software, add the REMOVEINCOMPATIBLESOFTWARE property to the command line with the value False: setup REMOVEINCOMPATIBLESOFTWARE=False Installation Guide 35

36 Preserving settings By default, Setup preserves your settings from previous VirusScan and NetShield installations. To install the new VirusScan Enterprise version without previous settings, add the PRESERVESETTINGS property to the command line with the value set to an empty string: setup PRESERVESETTINGS= Running Setup from a login script To install VirusScan Enterprise software at the time each of your destination computers starts, you can add a Setup command line to your login script and include any logic you think necessary to ensure that the installation runs once; checking for the VirusScan Enterprise default program directory, for example. The command line should include all of the options and properties you want to use to govern how Setup runs. In order to use a login script for this purpose, you must also copy or push the VirusScan Enterprise installation package to a local directory on the destination computer. You may not use a login script to install VirusScan Enterprise software from elsewhere on your network. To install VirusScan Enterprise software from a remote location on the network, use McAfee epolicy Orchestrator management software. Installed components and files During the VirusScan Enterprise installation process, components and files are installed in several different locations. The following sections list the installed components and files, and the location in which they are installed. NOTE The installation path is determined during the installation process. The default installation path is: <drive>:\program Files\Network Associates\ VirusScan folder These components and/or files are installed in the installation directory: Table 1-3. VirusScan folder Additional Preserved Settings NoPassword_REG AdsLokUU.Dll ntclient.dll Alert Manager Component OASDisabledRegKeys AutoUpdateRegKeys OASEnabledRegKeys ConsoleRegKeys OnAccessScannerRegKeys 36 VirusScan Enterprise software version 7.0

37 Table 1-3. VirusScan folder (Continued) DefaultOnDemandScanTask_REG OnDemandScannerRegKeys dssdata.h otherrequiredfiles Scan_Exhchange_REG packing.lst Scan_OAS_REG Password_REG Scan_ODS_REG RemoveNaiFiltrNaiFsrecDrivers Eval_REG scan32.exe FtCfg.dll Scanemal.dll Ftl.dll scncfg32.exe IconLockdownMinimal scnstat.exe IconLockdownNoIcon shcfg32.exe IconLockdownNormal shext.dll InstallCMA shext.dll_reg mcconsol.exe shstat.exe McPal_REG shstatregkeys mcshield.exe shutil.dll mcshieldservicestart svcpwd.exe mcupdate.exe VS700ConsoleShortcut msiutil.dll VS700OASShortcut NaEventU.Dll VS700ODSShortcut NaEventU.dll_REG vsplugin.dll NaEvtRes.dll_REG vsplugin.tlb naiann.dll vsplugin_server_reg naiav5.cat vsplugin_workstation_reg naivf4x.sys vstskmgr.exe naiavf5i.sys VstskmgrServiceControlAutoUpdate naiavf5x.sys VstskmgrSerjviceControlODS naiavfin.exe insall.pkg naievent.dll license.dat NaKrnlU.Dll nailite.dll NaUtilU.dll packing.lst NaUtlRes.dll readme.txt Installation Guide 37

38 Res09 folder These components and/or files are installed in the installation directory: Table 1-4. Res09 folder FtCfgRc.dll scnstat.dll mcconsol.dll SEmalRes.dll mcshield.dll shcfg32.dll mcupdate.dll shextres.dll NaEvtRes.dll shstat.dll NaUtlRes.Dll ShUtilRc.dll product.dll vse.chm scan32.dll vstskmgr.dll scncfg32.dll amg.chm Engine folder These components and/or files are installed in the following location: Program Files\Common Files\Network Associates\ Table 1-5. Engine folder DatFilesPlaceHolder messages.dat EngineFilesPlaceHolder names.dat avparam.dll scan.dat clean.dat scan.exe mcscan32.dll 38 VirusScan Enterprise software version 7.0

39 Testing your installation Installing the VirusScan Enterprise Software Once installed, the software can scan your system for infected files. You can test whether it is installed correctly and can properly scan for viruses by implementing a test developed by the European Institute for Computer Anti-Virus Research (EICAR), a coalition of anti-virus vendors, as a method for their customers to test any anti-virus software installation. To test your installation: 1 Using a standard Windows text editor, such as Notepad, type the following string, on a single line with no spaces or line breaks: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* 2 Save the file with the name EICAR.COM. The file size will be 68 bytes. Make a note of the directory in which you saved the file. 3 Start the program. To test the on-demand scanner, create an on-demand scan task that examines the directory where you saved EICAR.COM. When the scanner examines this file, it reports finding the EICAR test file. To test the on-access scanner, confirm that the on-access scanner is configured to scan files written to the computer and files read from the computer. See Configuring the on-access scanner in the VirusScan Enterprise Product Guide for additional information. Next, locate the EICAR.COM file and try to copy or move it to another location. The scanner reports finding the EICAR test file when it examines the file. NOTE This file is not a virus it cannot spread, infect other files, or harm your system. Delete the file when you have finished testing your installation to avoid alarming other users. Installation Guide 39

40 Modifying the VirusScan Enterprise program files You can use the Setup utility to modify or repair the VirusScan Enterprise program files. The following topics are covered in this section: Start the Setup utility. Modify program features. Reinstall or repair program files. Start the Setup utility 1 Click the Start button, then select Run. The Run dialog box appears. Figure Run 2 Type <X>:\SETUP.EXE in the text box provided, then click OK. Here, <X>: represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a Total Virus Defense CD, you must also specify which folder contains the VirusScan Enterprise software. 40 VirusScan Enterprise software version 7.0

41 The Program Maintenance dialog box appears. Figure Program Maintenance 3 Select the program maintenance activity you want to perform: Modify. This option is selected by default. Change which program features are installed. This option uses the Feature Selection dialog box to change the installed features. See Modify program features on page 42 to complete the modification process. Repair. Select this option to reinstall or repair the program files. See Reinstall or repair program files on page 45 to complete the reinstall or repair process. Remove. Select this option to remove the program files. See Removing the VirusScan Enterprise Software on page 49 for more information about removing program files. Installation Guide 41

42 Modify program features 1 Select Modify in the Program Maintenance dialog box, then click Next. The Feature Selection dialog box appears. Figure Feature Selection Modify 2 In the Select which features you would like to install area, choose from the following: a b Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel. For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature. Figure Feature action options 42 VirusScan Enterprise software version 7.0

43 Choose from these action options: This feature will be installed on local hard drive. Installs the selected feature on the computer. This feature, and all subfeatures, will be installed on local hard drive. Installs the selected feature and all of the features that are subordinate to it. For example, if you select Console, then AutoUpdate, Scanner, On-Access Scanner, and On-Demand Scanner, and are also installed. This feature will not be available. Removes the selected feature, if it is already installed. NOTE The Install To path and Disk Space features are disabled. To change the installation path, you must first remove the product, then reinstall the product to the required path. 3 Click Next to continue. The Product Configuration dialog box appears. Figure Product Configuration Modify Installation Guide 43

44 4 In the Product Configuration dialog box, choose from these options: NOTE The Import AutoUpdate repository list option is disabled. To import the repository list, see the Updating chapter in the VirusScan Enterprise Product Guide. a b Enable On-Access Scanner at the end of installation. This option is selected by default. Automatically starts the on-access scanner upon completion of the installation process. Deselect this option to manually start the on-access scanner after installation. Click Next to continue. The Ready to install dialog box appears. NOTE Click Back to review or change any of the settings, then return to the Ready to install dialog box and click Install. 5 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process. 6 When the Setup has completed successfully, click Finish. 44 VirusScan Enterprise software version 7.0

45 Reinstall or repair program files 1 Select Repair in the Program Maintenance dialog box, then click Next. The Reinstall or Repair the Product dialog box appears. Figure Reinstall or Repair the Product 2 Select from these maintenance options: Reinstall McAfee VirusScan Enterprise. This option is selected by default. Reinstalls the program files, registry keys and shortcuts. Detect and repair missing or corrupt files. Finds missing or corrupt files and repairs them. Re-write registry keys. WARNING If you manually remove or rename files, the repair feature may fail. See the Troubleshooting appendix in the VirusScan Enterprise Product Guide for detailed instructions about repairing files after they have been removed or renamed. Installation Guide 45

46 3 Click Install. WARNING Neither the Reinstall McAfee VirusScan Enterprise or the Detect and repair missing or corrupt files features support reinstalling or repairing update components. If an AutoUpdate file is removed or corrupted, you must remove the update component and then reinstall it. To remove the update component using VirusScan Enterprise, use the SETUP.EXE or command line to remove the VirusScan Enterprise program files. See Removing the VirusScan Enterprise Software on page 49 for more information. If the update component was deployed using an epolicy Orchestrator environment, simply remove the program files, and the update component will be installed again by epolicy Orchestrator. See the epolicy Orchestrator Product Guide for more information. When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears. Figure Setup completed successfully Update and scan options 4 You can run an update task or an on-demand scan task upon completion of installation. Choose from these options: Update Now. This option is selected by default. Deselect this option if you do not want to start the AutoUpdate task upon completion of installation. 46 VirusScan Enterprise software version 7.0

47 Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation. 5 Click Finish. NOTE Depending on the options you selected in Step 3, the program may run the update program or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs. 6 You may be required to reboot your computer. If so, the VirusScan Setup dialog box appears. Figure Reboot your machine Click Yes to reboot now, or click No to reboot at a later time. Installation Guide 47

48 48 VirusScan Enterprise software version 7.0

49 Removing the VirusScan Enterprise Software 2 You can use the Setup utility, command line, or Add/Remove Programs utility that is included in the Windows Control Panel to remove the VirusScan Enterprise program files using the following methods: The following topics are covered in this chapter: Using the Setup utility on page 50. Using the command-line options on page 53. Using the Add/Remove Programs utility on page 53. Installation Guide 49

50 Removing the VirusScan Enterprise Software Using the Setup utility On the computer from which you want to remove the program: 1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods: If your copy of the software is on the product CD: a b Insert the CD into the CD-ROM drive. Click Install from the Welcome dialog box. If you downloaded the software: a Click the Start button, then select Run. The Run dialog box appears. Figure 2-1. Run b Type <X>:\SETUP.EXE in the text box, then click OK. Here, <X> represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package. 50 VirusScan Enterprise software version 7.0

51 Removing the VirusScan Enterprise Software The Program Maintenance dialog box appears. Figure 2-2. Program Maintenance 2 Select Remove, then click Next. The Remove McAfee VirusScan Enterprise dialog box appears. Figure 2-3. Remove VirusScan Enterprise 3 Click Remove to start the removal process. 4 When the Setup completes successfully, click Finish. Installation Guide 51

52 Removing the VirusScan Enterprise Software 5 The uninstaller detects whether there are any remaining files or directories. These are files or directories that were not installed initially with the VirusScan Enterprise installation. For example, log files or other files or directories added by the user. Figure 2-4. Remove remaining files Click Yes to remove the remaining files, or click No if you do not want to remove the remaining files. NOTE When the program files are removed, two files are left in the C:\TEMP directory. These files are used for debugging purposes: VSCUninst.log VSEInst.log 6 Reboot your computer after the removal process completes. WARNING We strongly recommend that you reboot your computer after removing files. The reboot should be performed before installing again. When you remove files using SETUP.EXE or the command line, some files or stopped services may not be removed. For example, if you remove the VirusScan Enterprise product while the Network Associates Task Manager or the Network Associates McShield services are stopped, these services would not be removed. Rebooting after removing files ensures that all files and services are removed before installing again. 52 VirusScan Enterprise software version 7.0