VirusScan 4.0 Needs Its Shots

Users of Network Associates' VirusScan 4.0 antivirus software have flooded the company's discussion forums with complaints about conflicts with America Online and an inability to download updated program and virus definition files, among other grievances. Network Associates technicians responding to the complaints have found that the problems appear to be mostly irritating glitches rather than serious flaws. Still, sorting out the confusion ain't easy.

First, the AOL glitch. According to VirusScan product manager Ryan McGee, versions 4.0 of both VirusScan and AOL arrived at about the same time, and due to "bad timing and bad luck," they clashed. Specifically, McGee says, new online technology in VirusScan prevented the AOL 4.0 client software from connecting to the AOL network. The VirusScan 4.01 update fixed this problem, and a subsequent 4.02 version addressed other conflicts with corporate network installations.

However, many users could not get the program updates they needed because their downloads were cut off before the files finished transferring. Others found that the Web site wouldn't accept their valid VirusScan update product codes and passwords. Version 4.01 users who attempted to update the program or virus definitions received this charming error message: 'Validation code failed for ECOMMS.DLL--Re-install VirusScan'. Makes you want to put your machine out of its misery with a good dose of the Concept or Wazzu virus.

McGee admits that some of the company's Web server problems may have interrupted downloads. The VirusScan frequently-asked-questions file reports that the password and validation code problems have been fixed. But if you upgrade to version 4.01 and receive the nasty error message cited above, you'll need to work around it. First make sure you're connected to the Internet. Then go into the VirusScan folder on your hard drive (it should be under c:\program files\network associates\mcafee virusscan) and double-click on the file called ecengine.exe. The program will automatically download a new file and then perform program or virus definition updates. For more details, go to the Network Associates Internet Support Forum (support.nai.com/forums/ page1.htm). Once there, look for the Internet Services section and click on the Download Support link.

Even Excel Is a Bit Insecure

Software security, or the lack of it, has received a lot of attention lately, including in this column. Security holes, usually found in browsers, are logical flaws in a program's design that allow smart programmers with nothing better to do to access your files, crash your PC, or upload a nasty program to your computer and run it.

Microsoft recently admitted that both Excel 95 and 97 are vulnerable to these kinds of exploits, too. The problem, known as the Russian New Year Bug, concerns the program's Call function, which allows an Excel worksheet to run another external program. It sounds innocuous enough, until you consider that the external program could delete files, infect your system with a virus, or wreak other havoc. Unfortunately, Call doesn't warn you before running the external program. A disgruntled employee can simply create a nasty program, Call it in a worksheet's Autostart macro, and then attach the worksheet and the external program to an e-mail message.

Microsoft says no one has exploited this loophole yet, but the company offers a 132KB patch (available at officeupdate.microsoft.com/downloadDetails/xl97cfp.htm) that disables the Call function in worksheets. The patch requires that you've already installed Office 97 Service Release 2. However, the patch does not disable Call when used in a macro (such as the Autostart macro). For more details, visit support.microsoft.com/support/kb/articles/q196/7/91.asp.

Quicken 99 Now More Divine

Intuit has released Quicken 99 version2. The company says the update resolves many of the problems reported in January's column, providing better file conversions for upgrades from Quicken 98 and fixes to online payment glitches. For instructions on how to install the update, see www.intuit.com/support/quicken/index/ndxw_8_ updates.html.

WordPerfect Suite 8, Service Pack 5

A gold star to Corel for supplying another timely collectionof fixes for its flagship suite (too bad the software was so buggy in the first place). Download the 14MB patch from ftp.corel.com/pub/WordPerfect/wpwin/8/wp8sp5.exe. For a complete list of Service Pack 5's updates, see ftp.corel.com/pub/WordPerfect/wpwin/8/wp8sp5_readme.htm.