Page 2
For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that McAfee, Inc. provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein.
McAfee reserves the right to change Upgrade & Support Plans and policies at any time without notice. McAfee and its product names are registered trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries.
Page 4
Acrobat Reader installed; if Go to http://www.mcafee.com/ for pricing not, install it now from the McAfee product CD. of an additional year of filter updates. Insert your product CD into your CD-ROM McAfee Internet Security Suite updates for drive.
Getting Started Welcome to McAfee VirusScan. McAfee VirusScan is an anti-virus subscription service offering comprehensive, reliable, and up-to-date virus protection. Powered by award-winning McAfee scanning technology, VirusScan protects against viruses, worms, Trojan horses, suspect scripts, hybrid attacks, and other threats.
Supported e-mail programs POP3 (Outlook Express, Outlook, Eudora, Netscape) Supported instant messaging programs AOL Instant Messenger 2.1 or later Yahoo Messenger 4.1 or later Microsoft Windows Messenger 3.6 or later MSN Messenger 6.0 or later McAfee® VirusScan® software version 10.0...
Before you can test Scan, you must disable ActiveShield to prevent it from detecting the test files before Scan does, then download the test files. To download the test files: Disable ActiveShield: Right-click the McAfee icon, point to , then VirusScan...
Page 10
VSO Scan Folder Save Save As box. When you are finished downloading the files, close Internet Explorer. Enable ActiveShield: Right-click the McAfee icon, point to , then VirusScan click Enable To test Scan: Right-click the McAfee icon, point to...
Windows desktop and contains the clock. If one or more of the McAfee applications installed on your computer are disabled, the McAfee icon changes to black To open the McAfee SecurityCenter:...
Page 12
Getting Started McAfee® VirusScan® software version 10.0...
Windows starts. Enabling ActiveShield To enable ActiveShield for this Windows session only: Right-click the McAfee icon, point to , then click . The McAfee icon VirusScan...
Using McAfee VirusScan Disabling ActiveShield To disable ActiveShield for this Windows session only: Right-click the McAfee icon, point to , then click VirusScan Disable Click to confirm. The McAfee icon changes to black If ActiveShield is still configured to start when Windows starts, your computer will be protected from threats again when you restart your computer.
Page 15
ActiveShield temporarily to install new files. When the Update prompts you to click , ActiveShield starts again. Wizard Finish To start ActiveShield automatically when Windows starts: Right-click the McAfee icon, point to , then click VirusScan Options dialog box opens (Figure 2-1 on page 14).
Page 16
By default, ActiveShield scans both inbound and outbound e-mail. However, for enhanced control, you can set ActiveShield to scan only inbound or outbound e-mail. To disable scanning of inbound or outbound e-mail: Right-click the McAfee icon, point to , and then click VirusScan Options...
Page 17
To set ActiveShield to scan sent e-mail messages for worm-like activity: Right-click the McAfee icon, point to , then click VirusScan...
Page 18
Alerting when 5 or more e-mails are sent within 30 seconds NOTE If you modify the number of recipients or seconds for monitoring sent e-mails, it might result in invalid detections. McAfee recommends that you click to retain the default setting. Otherwise, click to change the default setting to your setting.
Page 19
Use this option to get the most thorough scan possible. To set ActiveShield to scan all file types: Right-click the McAfee icon, point to , and then click VirusScan...
Page 20
The latest virus signature file ( file) determines which file types that ActiveShield will scan.To set ActiveShield to scan program files and documents only: Right-click the McAfee icon, point to , and then click VirusScan Options...
Page 21
To set ActiveShield to scan running scripts for worm-like activity: Right-click the McAfee icon, point to , then click VirusScan...
Page 22
Using McAfee VirusScan Scanning for Potentially Unwanted Programs (PUPs) NOTE If McAfee AntiSpyware is installed on your computer, it manages all Potentially Unwanted Program activity. Open McAfee AntiSpyware to configure your options. If you set ActiveShield to use the default...
You can then choose how to manage infected files, infected e-mail, suspect scripts, potential worms, or PUPs, including whether to submit infected files to the McAfee AVERT labs for research. For added protection, whenever ActiveShield detects a suspect file, you are prompted to scan your entire computer immediately.
Page 24
Stop this e-mail delete it from your message queue. If you are sure that you trust the e-mail activity, click Continue what I was doing ignore the alert and let the e-mail be sent. McAfee® VirusScan® software version 10.0...
Page 25
PUPs" for details. Managing trusted PUPs The programs that you add to the Trusted PUPs list will not be detected by McAfee VirusScan. If a PUP is detected and added to the Trusted PUPs list, you can later remove it from the list if necessary.
Potentially Unwanted Program. If Scan cannot clean the file, you can quarantine or delete the file. Manually scanning for viruses and other threats To scan your computer: Right-click the McAfee icon, point to , then click VirusScan Scan...
Page 27
Manually scanning your computer The files in Figure 2-9 are the only files scanned if you deselect the Example: checkbox. The folders and their contents are not scanned. Scan subfolders To scan those folders and their contents, you must leave the checkbox selected.
Page 28
Scan counts a compressed file (. , etc.) as one file within the number. Also, the number of files Files Scanned scanned can vary if you have deleted your temporary Internet files since your last scan. McAfee® VirusScan® software version 10.0...
Windows Scheduler to thoroughly check your computer for viruses and other threats at specified intervals. To schedule a scan: Right-click the McAfee icon, point to , then click VirusScan Options dialog box opens.
Page 30
- Specify which day of the month to scan. Click Monthly Select Months specify which months to scan, and click - Specify which date to scan. Once McAfee® VirusScan® software version 10.0...
For most viruses, Trojans, and worms, Scan automatically tries to clean the file. You can then choose how to manage detected files, including whether to submit them to the McAfee AVERT labs for research. If Scan detects a potentially unwanted program, you can manually try to clean, quarantine, or delete it (AVERT submission is unavailable).
Creating a Rescue Disk on page 34 for details. For more help, consult McAfee Customer Support at http://www.mcafeehelp.com/. Managing quarantined files The Quarantine feature encrypts and temporarily isolates suspect files in the quarantine directory until an appropriate action can be taken. Once cleaned, a quarantined file can then be restored to its original location.
Page 33
Delete If VirusScan cannot clean or delete the file, and if it is not a Potentially Unwanted Program, you can submit the file to the McAfee AntiVirus Emergency Response Team (AVERT ) for research: Update your virus signature files if they are more than two weeks old.
Scan to ensure that both the computer and the floppy disk are virus-free. (See Manually scanning for viruses and other threats on page 26 details.) Right-click the McAfee icon, point to , then click VirusScan Create Rescue Disk...
Automatically reporting viruses When the message “Rescue disk created” appears, click , then close the dialog box. Create Rescue Disk Remove the Rescue Disk from the drive, write-protect it, and store it in a safe location. Write-protecting a Rescue Disk To write-protect a Rescue Disk: Turn the floppy disk label-side down (the metal circle should be visible).
Figure 2-14. Virus Map Reporting Options Accept the default to anonymously send your virus Yes, I want to participate information to McAfee for inclusion in its World Virus Map of worldwide detection rates. Otherwise, select to avoid sending No, I don’t want to participate your information.
Viewing the World Virus Map Whether or not you participate in the World Virus Map, you can view the latest worldwide detection rates via the McAfee icon in your Windows system tray. To view the World Virus Map: Right-click the McAfee icon, point to...
Automatically checking for updates McAfee SecurityCenter is automatically configured to check for updates for all of your McAfee services every four hours when you are connected to the Internet, then notify you with alerts and sounds. By default, SecurityCenter automatically downloads and installs any available updates.
Page 39
Updating VirusScan Figure 2-16. Updates dialog box Log on to the web site if prompted. The installs the update Update Wizard automatically. Click when the update is finished installing. Finish NOTE In some cases, you will be prompted to restart your computer to complete the update.
Page 40
Using McAfee VirusScan McAfee® VirusScan® software version 10.0...
(Scan) stopping testing alerts McAfee SecurityCenter for detected e-mail Microsoft Outlook for detected files for potential worms for PUPs new features for suspect scripts for viruses AVERT, submitting suspect files to...
Page 42
Scan within compressed files option Update Wizard testing updating Scan all files option (Scan) a Rescue Disk Scan for new unknown viruses option (Scan) VirusScan Scan for Potentially Unwanted Programs option automatically (Scan) manually using a Rescue Disk McAfee® VirusScan® software version 10.0...
Page 43
Index viruses alerts allowing suspect scripts cleaning deleting deleting detected files detecting detecting with ActiveShield quarantining quarantining detected files reporting automatically stopping potential worms stopping suspect scripts VirusScan getting started reporting viruses automatically scanning via Microsoft Outlook toolbar scanning via Windows Explorer scheduling scans testing updating automatically...
Page 45
For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that McAfee provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein.
Page 46
McAfee reserves the right to change Upgrade & Support Plans and policies at any time without notice. McAfee and its product names are registered trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries.
Page 47
Acrobat Reader installed; if Go to http://www.mcafee.com/ for pricing not, install it now from the McAfee product CD. of an additional year of filter updates. Insert your product CD into your CD-ROM McAfee Internet Security Suite updates for drive.
Page 50
Contents 6 Frequently Asked Questions ......51 SpamKiller is unable to communicate with its server ......51 Starting the SpamKiller server manually .
Page 51
Contents ® ® viii McAfee SpamKiller software version 7.0...
Getting Started Welcome to McAfee SpamKiller. McAfee SpamKiller software helps stop spam from entering your e-mail Inbox. With it, you get the following features: User options Block spam using filters, and quarantine spam outside of your Inbox View blocked and accepted messages Monitor and filter multiple e-mail accounts Import friends’...
Click to open the online Support page for McAfee, which provides Support hot topics on SpamKiller and other McAfee products, answers to frequently asked questions, and more. You must be connected to the Internet to access the Support page. Click...
Understanding the Summary page Understanding the Summary page Click the tab to open the Summary page (Figure 1-1). Summary - indicates if filtering is enabled, when a Overview of your SpamKiller status Friends List was last updated, and the number of spam messages you received today.
MAPI (Outlook) Web (MSN/Hotmail, or e-mail account with POP3 access) Required for the toolbar plug-in Outlook Express 6.0 or later Outlook 98, 2000 with SP3, 2003, or XP Internet Explorer 6.0 or later ® ® McAfee SpamKiller software version 7.0...
Windows system tray (Windows XP notification area). If one or more of the McAfee applications installed on your computer are disabled, the McAfee icon changes to black: To open the McAfee SecurityCenter: Right-click the McAfee icon...
Page 57
Getting Started ® ® McAfee SpamKiller software version 7.0...
Using SpamKiller When you install SpamKiller, the McAfee icon appears on your system tray located near your system clock. From the McAfee icon, you can access SpamKiller, McAfee SecurityCenter, and other McAfee products installed on your computer. Disabling SpamKiller You can disable SpamKiller and prevent e-mail from being filtered.
Page 59
Using SpamKiller ® ® McAfee SpamKiller software version 7.0...
Managing E-mail Accounts and Users Adding e-mail accounts You can add the following e-mail accounts: Standard e-mail account (POP3) most home users have this type of account MSN/Hotmail account - MSN/Hotmail Web-based accounts NOTE If your computer runs Windows 2000 or Windows XP, and you plan to add multiple users to SpamKiller, you must add users before you can add e-mail accounts to their user profiles.
MSN/Hotmail e-mail Select Account as a POP3 account in SpamKiller, point your e-mail client to SpamKiller by changing the incoming e-mail server. For example, if your incoming e-mail server is “mail.mcafee.com”, change it to “localhost”. ® ®...
Deleting e-mail accounts Deleting e-mail accounts Delete an e-mail account from SpamKiller if you no longer want SpamKiller to filter it. Deleting an e-mail account from SpamKiller Click the tab, and then select . The Settings E-mail Accounts E-mail Accounts dialog box appears and displays all e-mail accounts added to SpamKiller.
Page 63
Blocked E-mail page. - (POP3 port number) POP3 server handles incoming messages. POP3 port - (SMTP port number) SMTP server handles outgoing messages. SMTP port ® ® McAfee SpamKiller software version 7.0...
Page 64
Editing e-mail account properties - length of time SpamKiller waits to receive e-mail before Server timeout timing out and stopping. Increase the server time-out value if you have problems receiving mail. Your e-mail connection might be slow; therefore, increasing the server time-out value allows SpamKiller to wait longer before timing out.
SpamKiller to check the account every time SpamKiller starts. — Select this option if you have a dial-up Check when a connection is dialed connection, and you want SpamKiller to check the account every time you connect to the Internet. ® ® McAfee SpamKiller software version 7.0...
Editing e-mail account properties Click the tab to specify how SpamKiller dials an Internet Connection connection so that it can check your Inbox for new messages to filter. - SpamKiller does not automatically dial a Never dial a connection connection for you. You must first manually start your dial-up connection. - when an Internet connection is not available, Dial when needed SpamKiller automatically attempts to connect using your default dial-up...
Page 67
- SpamKiller automatically attempts to connect using the Always dial dial-up connection you specify. - your computer stays connected to the Stay connected after filtering is done Internet after filtering is finished. Click ® ® McAfee SpamKiller software version 7.0...
View message text of blocked messages View message text of accepted messages Manage Global Filters and the Global Friends List Report spam to McAfee Send complaints and error messages Manage complaints and error messages (create, edit, and delete message templates)
SpamKiller user profile. You can add e-mail accounts to the user profile if you are logged on to SpamKiller as the user and have the necessary e-mail account information. For details, see Adding e-mail accounts on page ® ® McAfee SpamKiller software version 7.0...
Adding users Editing SpamKiller user profile Click the tab, and then click . A list of SpamKiller users appears. Settings Users Select a user, and then click Edit Type a new name and password. Deleting a SpamKiller user profile WARNING When you remove a user profile, you also remove the user’s e-mail accounts from SpamKiller.
Page 71
Managing E-mail Accounts and Users ® ® McAfee SpamKiller software version 7.0...
Using the Friends List We recommend that you add your friends’ names and e-mail addresses to a Friends List. SpamKiller does not block messages from those on the list; therefore, adding friends helps ensure that legitimate messages get through. SpamKiller enables you to add names, e-mail addresses, domains, and mailing lists to the Friends Lists.
Automatic import enables SpamKiller to check your address books regularly for new addresses and automatically import them into a Friends List. You can import address books from the following e-mail programs: Microsoft Outlook (version 98 and later) Microsoft Outlook Express (all versions) ® ® McAfee SpamKiller software version 7.0...
Importing address books Netscape Communicator (version 6 and earlier versions if exported as an LDIF file) Qualcomm Eudora (version 5 and later) IncrediMail Xe MSN/Hotmail Any program that can export its address book as a plain text file Importing an address book by automatic import You can update your Personal Friends List regularly by creating a schedule for importing addresses from address books.
Click the tab, and then click Settings Address Books Select an address book, and then click . A confirmation dialog box Delete appears. Click to remove the address book from the list. ® ® McAfee SpamKiller software version 7.0...
Adding friends Adding friends To ensure that you receive all e-mail from friends, add your friends’ names and addresses to a Friends List. You can add friends from the Friends page, the Blocked E-mail page, the Accepted E-mail page, and from Microsoft Outlook or Outlook Express.
If your computer runs Windows 2000 or Windows XP, and multiple users were added to SpamKiller, only administrators can access the Global Friends List. Select an address from the list, and then click Edit ® ® McAfee SpamKiller software version 7.0...
Deleting friends Edit the appropriate information, and then click Deleting friends Remove addresses you no longer want in a Friends List. Click the tab, and then click the , or Friends E-mail Addresses Domains Mailing tab. Lists The Global Friends List appears. To view your Personal Friends List, click the down arrow on one of the tabs, and then select Personal Friends List...
Page 79
Using the Friends List ® ® McAfee SpamKiller software version 7.0...
Working With Blocked and Accepted Messages Click the tab to open the Messages page (Figure 5-1) and access your Messages blocked and accepted messages. The Blocked E-mail and Accepted E-mail pages have similar features. Figure 5-1. Messages page Blocked E-mail page Click the tab in the Messages page to view blocked messages.
Page 81
- an error message was sent to the reply address in the spam message. Complaint and error messages sent - both a complaint and error message were sent. For more information on where blocked messages are, see Where are the blocked messages on page ® ® McAfee SpamKiller software version 7.0...
Accepted E-mail page Accepted E-mail page Click the tab in the Messages page to view accepted messages. Accepted E-mail The Accepted E-mail page displays all Inbox messages in all of your e-mail accounts. However, for MAPI accounts, the Accepted E-mail page does not contain internal e-mail.
Add a friend to a Friends List. - create a filter. Add a filter - inform McAfee of specific spam messages you receive. Report to McAfee - send a complaint about spam to the administrator of the Send a complaint sender’s domain or to another e-mail address you type.
Rescuing messages Rescuing messages If the Blocked E-mail page or the SpamKiller folder in Microsoft Outlook and Outlook Express contains legitimate mail, you can put those messages back in your Inbox. From the Blocked E-Mail page Click the tab, and then click the tab.
SpamKiller folder, if you have Microsoft Outlook or Outlook Express. Blocking The message is removed and placed in the SpamKiller Blocked E-mail page. If legitimate mail is blocked, you can rescue the message (see Rescuing messages). ® ® McAfee SpamKiller software version 7.0...
(e-mails soliciting you to provide personal information to a known or potential scam Web site). The McAfee AntiPhishing filter helps protect you from Web sites that are blacklisted (confirmed phishing or related scam Web sites), or graylisted (contain some dangerous content or links to blacklisted Web sites).
Also look in formatting codes condition is defined to search the message text. If you select this checkbox, SpamKiller searches both the message text and the message formatting codes for the text you indicated. ® ® McAfee SpamKiller software version 7.0...
Page 88
Adding filters - allows SpamKiller to detect common deliberate Match variations misspellings used by spammers. For example, the word “common” might be misspelled as “c0mm0n” to evade filters. - allows you to specify character patterns Regular Expressions (RegEx) used in filter conditions. To test a character pattern, click Test RegEx - this option only appears for conditions in which you typed Case-sensitive...
Matches any single character except a new line character. (pattern) Matches pattern and remembers the match. The matched substring can be retrieved from the resulting Matches collection, using Item [0]...[n]. To match parentheses characters ( ), use “\(“ or “\)“. ® ® McAfee SpamKiller software version 7.0...
Page 90
Adding filters Matches either x or y. For example, “z|wood“ matches “z“ or “wood“. “(z|w)oo“ matches “zoo“ or “wood“. The n is a non negative integer. Matches exactly n times. For example, “o{2}“ does not match the “o“ in “Bob,“ but matches the first two o's in “foooood“. {n,} The n is a non negative integer.
Page 91
“\001“ & “1“. Octal escape values must not exceed 256. If they do, only the first two digits comprise the expression. Allows ASCII codes to be used in regular expressions. ® ® McAfee SpamKiller software version 7.0...
For example, “\x41“ matches “A“. “\x041“ is equivalent to “\x04“ & “1“. Allows ASCII codes to be used in regular expressions.” Reporting spam to McAfee You can report spam to McAfee, where they analyze it to create filter updates. Click the tab, and then click the tab.
A list of messages appears. To send an error message about a specific spam message, select the message, and then click . An error message is sent to the reply address in the Send error spam message. ® ® McAfee SpamKiller software version 7.0...
This section only applies to Microsoft Windows 2000 and XP users. Click and select Start Type SERVICES.MSC and click Right-click the McAfee SpamKiller Server and select . The server service Start starts. SpamKiller server is blocked by firewalls or internet filtering programs If the SpamKiller Server service is already started and running, follow these steps.
Continue what I was doing Verify that you are connected to the Internet by surfing to a site. Verifying the POP3 server address for SpamKiller Right-click the McAfee icon in the system tray (lower right hand corner), point , and select SpamKiller...
Friends List tasks where are the blocked messages working with blocked messages logging on to SpamKiller in a multi-user environment Blocked E-mail page blocking messages McAfee SecurityCenter Messages page e-mail accounts adding deleting passwords editing pointing your e-mail client to SpamKiller...
Page 97
Index regular expressions reporting spam to McAfee rescuing messages SecurityCenter Settings page SpamKiller Accepted E-mail page Blocked E-mail page disabling filtering enabling filtering Summary page Support icon Switch User icon switching users system requirements tasks for blocked and accepted messages...
Need help?
Do you have a question about the VLF09E002RAA - VirusScan Professional 2005 and is the answer not in the manual?
Questions and answers