----------------------------------------------------------------------------- SecurityPlus for MDaemon v4.X Release Notes ----------------------------------------------------------------------------- SecurityPlus for MDaemon provides AntiVirus protection for all MDaemon users. It also provides "Zero Hour" (real-time) Virus and Spam protection for MDaemon PRO users. The product represents an evolution of MDaemon AntiVirus (MDAV) which is no longer marketed under that brand name. SecurityPlus is distributed under the same license terms and license key as MDAV. For more information on SecurityPlus visit http://www.altn.com/SecurityPlus/ ----------------------------------- SecurityPlus v4.13 - March 15, 2011 ----------------------------------- o Updated AVUpdate.exe with Kaspersky Updater component version 8.0.4.31 which addresses a number of important improvements to delivery, reliability and robustness. o Changed to use simple key licensing mode in the updater component to address the 'AppInfo' error. o Fix to AV engine initialization error after the SecurityPlus key expires. ----------------------------------- SecurityPlus v4.12 - June 15, 2010 ----------------------------------- o [5348] Added measures to ensure cfengine.exe and avupdate.exe concede CPU usage to other processes during updates and reloads. o [5335] Fix to AVUpdate.exe not initializing or failing during defintion install. o [5201] Fix to AVUpdate.exe causing CFEngine.exe to use up a huge amount of resource after an update. ----------------------------------- SecurityPlus v4.11 - March 18, 2010 ----------------------------------- o [5083] Fix to AV updater restarting cfengine.exe. o [5084] Removed SecurityPlus auto-updater feature. ---------------------------------- SecurityPlus v4.10 - March 10, 2010 ---------------------------------- * [4850] KASPERSKY ENGINE UPDATE * The Kaspersky engine has been updated to version 8.0.1.33. This update allows better detection rates and overall improved performance. The signature update process was also revised to version 8.0.1.33. The new engine no longer offers the ability to enumerate the specific threats a particular update covers. So, our old AVApp program has been discontinued. Also, it is no longer possible to list the threats any particular update covers within the emails to admins. So, this has been removed. A complete list of threats covered by Kaspersky can be found at http://www.viruslist.com. o [4738] MDaemon, SecurityPlus, and Outlook Connector no longer self-generate trial keys. The trial key is now provisioned during the installation process for these products and is generated by the web site and emailed out while the install process waits. o [4419] OP usually signals MDaemon to drop the connection immediately following detection of spam, virus, IWF content. A new switch has been added to not close the connection. This new switch does nothing unless you are using MDaemon 11 or higher. --------------------------------------- SecurityPlus v4.02 - November 18, 2008 --------------------------------------- o [8036] Added an option to specify when auto-updates are downloaded and installed. o [8035] fix to SP not initializing on some systems running Kaspersky AV --------------------------------------- SecurityPlus v4.01 - September 24, 2008 --------------------------------------- o Fix to CFEngine.exe lockup/crash after updater from a previous version of SecurityPlus. o Fix to AVUpdate.exe crash when auto-update is not selected. --------------------------------------- SecurityPlus v4.00 - August 26, 2008 --------------------------------------- o Updated Kaspersky AV Engine to version 7.0.3.13 and will now work with Windows Vista and Server 2008. o The updater now uses Kaspersky's Updater SDK 7 which improves download speed and provides a more reliable definition update. o fix to lingering *.tmp files in \MDaemon\CFilter folder o Updater configuration editor changed to work with new updater. --------------------------------------- SecurityPlus v3.06 - January 15, 2008 --------------------------------------- o [6989] fix to manual updater issue when running SP on an expired key (could rarely cause scanning errors) o [5644] fix to poorly formatted/corrupt avp.klb file obtained in an update could rarely cause AV scanning errors o [7011] fix to rarely seen issue with reload function could cause scanning errors ---------------------------------- SecurityPlus v3.05 - July 5, 2007 ---------------------------------- o Updated Outbreak Protection to 1.20 which includes some important new capability. See the relnotes_op.txt for complete details. o [6329] The updater will revert back to last working definitions if update fails. o [6280] fix to scanning error after a definition download failure -------------------------------------- SecurityPlus v3.04 - January 8, 2007 -------------------------------------- o [5553] Updated Kaspersky AV Engine to version 5.0.0.64 o [5552] Added on option for the updater to send notifications only after a failed update. The option is in MDaemon's cfilter.ini file... [NotifyAVUpdate] OnlyOnFailure=Yes (default No) o [5536] fix to ScanningProcess.exe memory leak -------------------------------------- SecurityPlus v3.03 - November 20, 2006 -------------------------------------- o [5288] fix to uninstallfix being used and causing a crash for some o [5348] fix to possible avupdate.exe crash after sending notification o [5410] fix to installer overwriting existing OP configuration settings o [5378] fix to reload problems after an update ------------------------------------- SecurityPlus v3.02 - October 31, 2006 ------------------------------------- o [5288] fix to uninstallfix being used and causing a crash for some ------------------------------------- SecurityPlus v3.01 - October 25, 2006 ------------------------------------- * INTRODUCING OUTBREAK PROTECTION (MDaemon PRO only) * Outbreak Protection is a revolutionary real time antispam, antivirus, and antiphishing technology capable of proactively protecting an MDaemon email infrastructure automatically and within minutes of an outbreak. OP requires no heuristic rules, content filtering, or signature updates. Instead, it relies on the analysis of “patterns” associated with an email transmission and compares them to similar patterns collected from millions of email messages sampled daily from thousands of spam traps worldwide. The resulting analysis can detect outbreaks in “Zero Hour” – much faster than traditional filter and signature based solutions. SecurityPlus' OP feature is completely content agnostic relying on mathematical analysis of message structure and message distribution charac- teristics over SMTP rather than strict lexical analysis of the message content itself. Therefore it is not fooled by the addition of seed text, clever spelling changes, social engineering tactics, language barriers, or differences in encoding techniques. Protection is provided in real time and within minutes - often seconds - of a new outbreak. For viruses this level of protection is critical since it often takes hours for a traditional antivirus vendor to verify and submit a signature update following a new outbreak and even longer for that update to be put into production use. During this interval MDaemon users are vulnerable without SecurityPlus. Similarly, for spam messages, it often takes time and effort to analyze the spam and create a safe filtering rule for traditional heuristic based systems. SecurityPlus' OP feature adds to the existing signature based antivirus capability powered by Kaspersky providing an additional layer of antivirus protection. In addition, OP provides antispam and antiphishing services – and all this in real-time. SecurityPlus integrates directly into MDaemon’s UI and SMTP processing chain using MDaemon’s own SDK and custom plugin capability. For complete details about how to use and configure SecurityPlus' Outbreak Protection feature see the MDaemon Users Manual or the UI within MDaemon (Security|Outbreak Protection). This feature requires MDaemon PRO. * ADWARE/SPYWARE/PROXY-PROGRAM/PORNO-DIALERS/STARTPAGE PROTECTION * SecurityPlus is capable of detecting numerous forms of malware (assuming they are transmitted via email) including: o Adware - any software application displaying advertising banners on users' computers. These programs are often a part of the officially distributed products whose producers provide free versions of their software. o Spyware - spying programs that monitor the user's computer. For example, the IP-address of the computer, the version of the operating system and Internet browser installed, the list of the most frequently visited Internet-resources, search inquiries and other information that can be used for further advertising campaigns (Spyware often accompanies Adware). o Proxy-programs - use your computer as a “zombie” to receive and/or transfer files or emails (spam). o Porno-dialers - programs granting access to porno resources for a fee using Dial Up connection. This connection price is incredibly high. o Riskware - software that can be risky for the user (FTP, IRC, MIrc, RAdmin, utility of remote administration). o StartPage - software that changes the address of InterNet Explorer's start page. To enable this extra level of protection switch on the use of "extended virus and malware signature definitions" which you will find in Ctrl+F5| AV Updater|Configure Updater. For more information on using these extended virus and malware definitions as well as some cautionary information visit: http://www.kaspersky.com/extraavupdates * NEW, MORE ROBUST MULTI-THREADED KASPERSKY AV ENGINE * SecurityPlus features the latest Kaspersky antivirus engine which is multi- threaded and designed for todays demanding email applications. * NEW COMPONENT AND SIGNATURE UPDATER * SecurityPlus has been embedded with a new updater which is capable of updating engines, dlls, and other critical files in addition to the standard updating of virus signatures. -----------------------------------------------------------------------------