瑞星卡卡安全论坛技术交流区系统软件 【转贴】McAfee PreScan 1.0 Release Candidate

1   1  /  1  页   跳转

【转贴】McAfee PreScan 1.0 Release Candidate

【转贴】McAfee PreScan 1.0 Release Candidate


http://www.mcafee.com/us/downloads/beta/psc/psc.htm

Overview
Clarification on the differences between McAfee PreScan and McAfee CleanBoot

McAfee PreScan is a product suited for enterprise environment where a mass deployment is required through ePO - McAfee CleanBoot is a stand alone product.

McAfee PreScan runs in native mode within the windows operating system during system start-up while CleanBoot runs earlier in the boot sequence during the Boot Loader sequence.

In view of the difference in the scan timing of the products during the loading sequence McAfee PreScan is not a replacement for CleanBoot.

McAfee PreScan and CleanBoot should be considered as complimentary products in providing system protection against malware.

What is McAfee PreScan ?

PreScan is an anti-virus product that operates in the native mode of MS Windows when the system is starting up. PreScan will run an on-demand scan when MS Windows is executing its startup sequence.

For example, this is the same phase of system startup as an MS Windows automatic checkdisk will typically execute. PreScan is designed to be used in a virus outbreak situation, where other methods of detection and cleaning may not be as effective. PreScan adds a new layer to the multi-tiered approach to anti-virus protection that McAfee products currently offer.

PreScan is deployed and managed only via ePolicy Orchestrator or Protection Pilot. PreScan runs before the system has been logged into the network by scheduling a system reboot and then a scan. It should not be used as a replacement for VirusScan Enterprise as it does not provide the same level of functionality that VirusScan Enterprise provides, rather it is a tool to provide an additional level of scanning in critical situations.

Why scan the computer at startup?

It is simpler to scan and clean the computer at startup for the following reasons:
The Win32 subsystem is not loaded
NT services are not running
Software applications other than native mode programs are not loaded at startup

Who should use McAfee PreScan?

Enterprise network administrators, who use McAfee ePolicy Orchestrator to maintain their network computers.

Note:
McAfee PreScan integrates with McAfee ePolicy Orchestrator software version 3.0.2a and later. This enables you to roll out PreScan across a number of computers simultaneously and initiate anti-virus scanning by rebooting the client computer.

When should I use McAfee PreScan?

You should use McAfee PreScan if you suspect a virus outbreak, and want to take corrective steps. By initiating anti-virus scanning on the client computer, you can reboot and scan individual, group or all computers on your enterprise network managed by McAfee ePolicy Orchestrator.

Note:
McAfee PreScan is a disaster recovery tool for occasional use. It should be used to determine if network system machines have been infected with stealthing malware that is difficult to remove using conventional McAfee products.

McAfee PreScan can detect and clean all stealthing malware that regular McAfee products detect and clean. However, due to the timing of the scan in the boot sequence McAfee PreScan can sometimes be better placed to remove the more difficult malware than regular products that scan and detect latter in the system boot sequence.

It is advisable to ensure that PreScan is pre-deployed on your network via ePO / Protection Pilot (as per the product documentation) so that in the event of an outbreak you are prepared to invoke McAfee PreScan on rebooting your system.

In summary:
McAfee PreScan is a disaster recovery tool that should be used in conjunction with the regular McAfee products to ensure your systems’ maximum security.
McAfee Prescan should not be considered a replacement for the regular products able to provide protection via an On Demand Scan.
McAfee PreScan should be run in disaster recovery situations and when advised by the McAfee AVERT research group.(http://vil.nai.com/vil/default.asp)

New Product Features
Startup time scanning for MS Windows platform in native mode
Integration with the latest engine release – 4400
Support for scanning / cleaning file systems on FAT & NTFS partitions
Protection against Potentially Unwanted Software
Integration with ePolicy Orchestrator
Integration with /dependency on VSE (for DAT file usage)
Scanning removable devices
PreScan Beta Schedule
Release Candidate - Dec
RTW - Jan


Supported Platforms
Win2003
WinXP
W2K
WinNT

Supported Versions of ePolicy Orchestrator
3.02a
3.5
3.6
Supporting Documentation
Release Notes
PreScan Product Guide
Beta Feedback
To submit general feedback to all Beta participants and the McAfee Security development team, send an e-mail to: prescan@feedback.nai.com (You will need to subscribe to the list first). To subscribe, send a blank e-mail to join-prescan@feedback.nai.com and reply to the auto response. Subscribing to the list is also an option on the Beta Download form.

To submit specific product feedback to the McAfee Security development team only, send e-mail to: prescan_beta@mcafee.com


http://rapidshare.de/files/11578771/McAfee.P.Scan.1.0.rar.html
最后编辑2006-01-23 09:14:02
分享到:
gototop
 

谁应该使用McAfee PreScan?

企业网络管理员, 使用McAfee ePolicy Orchestrator 维护他们的系统计算机。

注:
McAfee PreScan 集成以McAfee ePolicy Orchestrator 软件版本3 。0.2.a 和以后。 这使您同时滚动在PreScan 横跨一定数量的计算机和创始反病毒扫描之外由重新起动客户计算机。

何时我应该使用McAfee PreScan?

您应该使用McAfee PreScan 如果您怀疑病毒爆发, 并且想要采取矫正步骤。 由创始反病毒扫描在客户计算机, 您能重新起动和扫描个体、小组或所有计算机在您的企业网络由McAfee ePolicy Orchestrator 处理。

注:
McAfee PreScan 是一个灾害补救工具至于偶尔的使用。 它应该使用确定如果网络系统机器被感染难去除使用常规McAfee 产品的stealthing 的malware 。

McAfee PreScan 可能查出和清洗规则McAfee 产品查出和清洗的所有stealthing 的malware 。 但是, 由于扫瞄的时间在起动序列McAfee PreScan 能更好有时被安置取消更加困难的malware 比扫描和查出后者在系统起动序列的规则产品。

它是适当保证, PreScan 前部署在您的网络通过ePO/保护飞行员(正如每产品说明) 以便在爆发情形下您准备着祈求McAfee PreScan 在重新起动您的系统。

gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT