News



CyberSoft News For June 2005

CyberSoft Announces the Release of VSTK/P 169

CyberSoft Announces the Release of VSTK/P 169

CyberSoft is pleased to announce the immediate availability of VSTK/P 169. Here’s What's New in VFind Security Toolkit Version 169
(This information applies to VSTK and VSTKP)

Here is a brief summary of the changes for each component in this release of the toolkit. If a component is not listed here, then it is unchanged in this release.

VFind Version 15.4.5

  • The multi-threaded version of VFind, vfind-mt, is available on all supported platforms except the following:
    • AIX 4.1 and 4.3
    • RedHat Linux 8
    • HPUX 10.20
    • BSDI-x86 4.1
    • IRIX 6.2
    • OSF 3.2
    • SCO OpenServer 5
  • Improved the performance of the CVDL construct, WP1, for matching white space and punctuation characters.
  • Added --no-smartscan-types (-nosst) command line option to disable the skipping of VDL signatures due to file type restrictions.
  • Added large file support for Linux platforms.
  • Made a fix to the emulator engine to stop emulating when the HLT instruction is encountered.

VFind Library Version 2.1.0

  • The VFind Library has been re-structured. Review the following manual pages for details: vfapi, vf, vfconf, vf_config_defaults, vfsetup, vf_setup_defaults, vf_init, vf_queue, vfstat, vf_wait, vf_cleanup, vf_uad_version.
  • The VFind Library works with gcc 2.95.

UAD Version 3.14.4

  • The text expander detects and decodes encoded data in mail message headers based on RFC 2047, "MIME Part Three: Message Header Extensions for Non-ASCII Text".
  • A CAB archive expander has been added.
  • UAD identifies GRIB2 (grid weather data) files in JPEG 2000 code stream format.
  • Added large file support for Linux platforms.
  • The gzip expander and the external expander use the base name of the file for the name of the first level component.

CIT Version 4.3.3
Improved performance of the CIT dangerfile database check.

MvFilter 5.1.4

  • Bug fix to stop creating a zero-length log file.
  • Example Scripts: All scripts that use VFind now have the capability of using multi-threaded vfind (vfind-mt). The options to the scripts are:
    • m use multi-threaded vfind
    • p <path> scan starting at this path name (default is /)
    • v'vfind options' command line options for vfind
    • u'uad options' command line options for uad
    • c'cit options' command line options for cit

New Platforms

  • IBM AIX 4.3 (for AIX 4.3 and above)
  • SUSE Linux
  • RedHat Linux ES 3
  • RedHat Linux AS 2.1
  • SCO OpenServer 5 (re-established support for this platform)

CyberSoft Announces VSTK Turbo and VSTKP Turbo

CyberSoft is pleased to announce the availability of VSTK Turbo and VSTKP Turbo along with the release of VSTK/P 169. VSTK/P Turbo provides user applications, virus scanning and detection services at a higher rate of speed by utilizing a daemon process.

Current VSTK/P users may purchase the Turbo upgrade, which will convert their VSTK and VSTKP licenses to VSTK Turbo and VSTKP Turbo licenses.

CyberSoft Announces Avatar as a Standalone Product

CyberSoft is pleased to offer our Avatar product as a standalone product. Avatar maintains the system Baseline Configuration by executing system security policies that act as an intrusion detection and response system. The most important function of Avatar is response. If the system Baseline Configuration is modified for any reason, it will be detected by Avatar and returned to the correct Baseline Configuration.

Avatar combined with VSTK is our VSTKP product. Current VSTK customers may purchase the Avatar upgrade, which will convert their VSTK licenses to VSTKP licenses.

CyberSoft Announces Price Increase Effective July 1, 2005

CyberSoft announces that there will be a price increase effective July 1, 2005. The new price schedule may be viewed here

Customers who wish to purchase new product or renew Maintenance & Support (M&S) contracts based on our current price schedule should request a quote from Neil Woodland at 610-825-4748 or woodland@cyber.com. Customers who are renewing M&S contracts may request that the quote be valid through the expiration date of their current contracts.

Wisconsin Office Consolidation

CyberSoft announces that effective April 20, 2005 that it has consolidated its Brookfield, Wisconsin operations back into its Corporate Headquarters in Conshohocken, PA.

Phone calls should now be directed to 610-825-4748, and faxes should be sent to 610-825-6785. Emails to the Wisconsin office are being forwarded to the appropriate people in Conshohocken.

CyberSoft values its customers and looks forward to continuing relationships with its Wisconsin customers. Feel free to call with any concerns.

VSTK/P Training Manual Available Online for Free Download

CyberSoft has made our “Quick Training Handbook for the VFind Security ToolKit(s)” available in a downloadable .pdf format. You can go to www.cybersoft.com/training/index.shtml and click on Download The Quick Training Handbook for the Security Handbook.

CyberSoft’s “CVDL Manual” will be available online in the near future.

Important Message to All VSTK/P Users

Please read this important message concerning virus signatures!

As virus writers push the envelope and create new methods for hiding the presence of their viruses, it becomes more difficult to develop signatures to detect those viruses and still maintain 100% backward compatibility with earlier versions of VSTK and VSTKP.

In order to provide our customers who use the latest version of VSTK/VSTKP with the highest level of protection possible, we have added two new VDL sets that require at least VSTK/VSTKP version 166 (VFind version 13.11.3) and another two that require at least VSTK/VSTKP version 168 or 169 (VFind version 15.1.0). In order to activate these new VDL sets, you will have to download a replacement vdl.list file and replace the one included in the TAR file every time you update.

USE OF EITHER OF THESE FILES IN EARLIER VERSIONS WILL CAUSE ERRORS!

CYBERSOFT STRONGLY RECOMMENDS YOU UPGRADE TO THE LATEST VERSION OF VSTK/VSTKP TO ACHIEVE THE MAXIMUM LEVEL OF PROTECTION. Please note that this upgrade is free as part of a current Maintenance & Support contract.

Please contact Neil Woodland for information on upgrading at 610-825-4748 or woodland@cyber.com

To enable these these new VDL sets and download the latest Virus Definitions. Please go to http://update.cyber.com

For customers using the vdlupdate script to download and install the latest updates, we have updated the script to automaticaly download the updated vdl.list file. Follow these steps to update your copy of the script:

  1. Go to http://update.cyber.com and download vdlupdate.tar
  2. cd to VSTK_HOME (this is usually /opt/vstk but your local installation may be different)
  3. tar -xf vdlupdate.tar

This should replace bin/vdlupdate with a new copy that is 4770 bytes long with a date of April 4, 2005 and time of 14:10. The MD5 checksum is 883146a4bdcc18c5c3b6bc63b75b085a

This can be verified by executing the following command from VSTK_HOME: bin/cit bin/vdlupdate

IF YOU ARE USING A VERSION OF VSTK OR VSTKP OLDER THAN 166, DO NOT DOWNLOAD OR USE THIS VERSION OF vdlupdate.

IF YOU ARE USING VERSION 166 OR 167 OF VSTK OR VSTKP, COMMENT OUT LINE 47 IN THE SCRIPT AND UNCOMMENT LINE 44.



View CyberSoft On-line Magazine Archive

Copyright (c) 2005 by CyberSoft, Inc. All rights reserved world wide.

This product is marketed exclusively under license by the CyberSoft Operating Corporation and it's wholly owned division, CyberSoftInternational. Copyright 2000 - 2005