Sophos software Sophos training What the press say What customers say Request further info How to buy Products & updates Latest virus identities Beta products Virus analyses Hoaxes & scares Viruses explained Articles White papers Top ten viruses Email notification Virus info feed Company profile Contacting Sophos Sophos news Our customers Industry partners Careers Events Press contacts Press releases Press resources Image gallery Find a partner Become a partner Partners website Why Sophos? Strategic alliances           Support
 

IDE Update Guidance

Installation of virus identity (IDE) files

1.   Sophos Anti-Virus for Windows NT/2000/XP
2.   Sophos Anti-Virus for Windows 95/98/Me
3.   Sophos Anti-Virus for Unix
4.   Sophos Anti-Virus for NetWare
5.   Sophos Anti-Virus for DOS/Windows 3.1x
6.   Sophos Anti-Virus for Macintosh
7.   Sophos Anti-Virus for OpenVMS
8.   Sophos Anti-Virus for OS/2
9.   Sophos Anti-Virus for Lotus Notes/Domino
10. SAVI (Sophos Anti-Virus Interface) used by gateway programs, e.g. MIMEsweeper

Important: Please ensure that you are using the correct IDEs for your version of Sophos Anti-Virus.

1. Sophos Anti-Virus for Windows NT/2000/XP

Note: If you have installed Sophos Anti-Virus for use by a gateway program, e.g. MIMEsweeper, see Windows NT/2000/XP central installation: automatic updating with virus identity (IDE) files below.

Windows NT/2000/XP local installation (single user): updating with virus identity (IDE) files

  1. Copy the IDE files to the Sophos Anti-Virus directory on your workstation (by default, C:\Program Files\Sophos SWEEP for NT).
  2. At the taskbar, click Start|Programs|Sophos Anti-Virus|Sophos Anti-Virus. On the 'Options' menu click 'Purge checksums'. Click 'Yes' when asked if you want to purge the checksum files. Close Sophos Anti-Virus.
  3. Reboot the computer. Sophos Anti-Virus will automatically recognise the new IDEs.

Detailed instructions can be found in the 'Adding new virus identities' section of the Windows NT or 2000 single user installation guide.

Windows NT/2000/XP central installation: automatic updating with virus identity (IDE) files

Auto-upgrade must have been selected during installation for this to work. See the Windows NT server, Windows 2000 server and Windows NT peer-to-peer installation guides for details. These instructions assume a default installation on one server. Your setup may be more complex.

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

Updating Windows NT/2000/XP workstations

  1. At the server, copy the IDE files to the CID for Windows NT/2000/XP workstations. The default on an Intel based system is C:\Program Files\Sophos SWEEP for NT\NTInst\i386.
  2. At the Windows taskbar, select Start|Run.
  3. Browse to Setup.exe in your CID (see above) and select it.
  4. At the very end of the path in the Run window type a space followed by /update.
  5. Click OK.
  6. The workstations will update when they next check for a central update.

The final path in step 4 should take the form "C:\Program Files\Sophos SWEEP for NT\NTInst\i386\setup.exe" /update if you update on the server. If you update from a workstation it will be \\<servername>\Interchk\NTInst\i386\Setup.exe /update where <servername> is the name of your server.

Updating Windows 95/98/Me workstations

  1. At the server, copy the IDE files to the CID for Windows 95/98/Me workstations. The default on an Intel based system is C:\Program Files\Sophos SWEEP for NT\W95Inst.
  2. At the Windows taskbar, select Start|Run.
  3. Browse to Setup.exe in your CID (see above) and select it.
  4. At the very end of the path in the Run window type a space followed by /update.
  5. Click OK.
  6. If necessary, click on the Done button.
  7. The workstations will update when they next check for a central update.

The final path should take the form "C:\Program Files\Sophos SWEEP for NT\W95Inst\setup.exe" /update if you update on the server. If you update from a workstation it will be \\<servername>\Interchk\W95Inst\Setup.exe /update where <servername> is the name of your server.

Updating Macintosh workstations

  1. At the server, copy the IDE files to the CID for Macintosh workstations. The default on an Intel based system is C:\Program Files\Sophos SWEEP for NT\Macinst\IDE.
  2. SWEEP checks for new IDE files each time it is launched. The InterCheck on-access scanner checks each time the Macintosh is started.
  3. You will be prompted to restart the Macintosh, or re-launch SWEEP, as appropriate.

You can also place IDE files in the macinst|IDE folder on the server from a Macintosh.

Windows NT/2000/XP central installation: manual updating with virus identity (IDE) files

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

Manually updating workstations with new IDEs:

  1. Copy the IDE files to the CID on the server. See automatic updating for the default paths.
  2. Open a command prompt on your workstation. Go to the local installation directory for Sophos Anti-Virus (by default, C:\Program Files\Sophos SWEEP for NT on Windows NT/2000/XP and C:\Program Files\Sophos SWEEP on Windows 95/98/Me).
  3. At the command prompt, type setup.

The workstation will update from the CID on the server.

How to confirm that the IDE files have been loaded in Windows NT/2000/XP

  • The IDE files loaded are listed in the SWEEP log (by default C:\Program Files\Sophos SWEEP for NT\SWEEP.LOG) and in the on-screen log.
  • In the Sophos Anti-Virus window, select 'About Sweep...' from the 'Help' menu. 'Total viruses' should have changed.
  • SAVAdmin can display which IDE files are present on centrally installed computers.

[TOP]

2. Sophos Anti-Virus for Windows 95/98/Me

Local installation (single user): updating with virus identity (IDE) files

  1. Copy the IDE files to the Sophos Anti-Virus directory on your workstation (by default, C:\Program Files\Sophos SWEEP).
  2. Restart the workstation. Sophos Anti-Virus will automatically recognise the new IDEs.

Detailed instructions can be found in the 'Adding new virus identities' section of the Windows 95/98/Me single user installation guides.

Windows 95/98/Me central installation: automatic updating with virus identity (IDE) files

Auto-upgrade must have been selected during installation for this to work. See the Windows 95/98/Me peer-to peer installation guide for details.
These instructions assume a default installation. If you are installing a Windows 95/98/Me Central Installation Directory (CID) on a Windows NT/2000/XP server, see Windows NT/2000/XP central installation.

Note: Old IDE files are not automatically deleted from CIDs. You should delete them and replace them with IDEs for the correct version.

Automatic updating of workstations with new IDEs:

  1. Copy the IDE files to the CID on the server. The default CID is C:\Program Files\Interchk\W95Inst.
  2. At the Windows taskbar, select Start|Run.
  3. Browse via the Network Neighbourhood to \\<servername>\Interchk\W95Inst\Setup.exe where <servername> is the name of your server.
  4. Select Setup.exe.
  5. At the very end of the path in the Run window type a space followed by /update.
  6. Click OK.
  7. If necessary, click on the Done button.
  8. The workstations will update when they next check for a central update.

The final path in step 5 should take the form \\<servername>\Interchk\W95Inst\Setup.exe /update where <servername> is the name of your server.

Windows 95/98/Me central installation: manual updating with virus identity (IDE) files

Manually updating workstations with new IDEs:

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Copy the IDE files to the CID on the server. The default CID is C:\Program Files\Interchk\W95Inst.
  2. Open a command prompt on your workstation. Go to the local installation directory for Sophos Anti-Virus (by default C:\Program Files\Sophos SWEEP).
  3. At the command prompt, type setup.

The workstation will update from the CID on the server.

How to confirm that the IDE files have been loaded in Windows 95/98/Me

  • The IDE files loaded are listed in the SWEEP log (by default C:\Program Files\Sophos SWEEP\SWEEP.LOG) and in the on-screen log.
  • In the Sophos Anti-Virus window, select 'About Sweep...' from the 'Help' menu. 'Total viruses' should have changed.

[TOP]

3. Sophos Anti-Virus for Unix

The paths used here are those described in the Unix with Windows 95/98/Me clients and Linux single user installation guides. These instructions assume a default installation. Your setup may be more complex.

Updating the Unix computer with virus identity (IDE) files

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Delete the old IDEs from /usr/local/sav
  2. Copy the new IDEs into /usr/local/sav

The new IDEs will be used when sweep is next loaded.

Updating Windows 95/98/Me workstations

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. From a workstation, copy the IDE files to the CID for Windows 95/98/Me workstations. The default is \\<servername>\Sophos\W95Inst where <servername> is the name of your server.
  2. At the Windows taskbar, select Start|Run.
  3. Browse to Setup.exe in your CID (see above) and select it.
  4. At the very end of the path in the Run window type a space followed by /update.
  5. Click OK.
  6. If necessary, click on the Done button.
  7. The workstations will update when they next check for a central update.

The final path in step 4 should take the form \\<servername>\Sophos\W95Inst\Setup.exe /update where <servername> is the name of your server.

How to confirm that the IDE files have been loaded in Unix

  • If a sweep log has been specified using the -p switch it will list the IDE files loaded.
  • Running sweep -v will report which IDE files are in use.

[TOP]

4. Sophos Anti-Virus for NetWare

Updating the NetWare server with virus identity (IDE) files

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Copy the IDE files into the SWEEP working directory on the server (SYS:SWEEP by default).
  2. At the server console enter the commands UNLOAD SWEEP and then LOAD SWEEP (plus any required parameters such as -DS).
  3. Purge the central checksum file. At the main menu on the SWEEP screen at the server, select 'Central checksums' followed by 'Purge checksums' followed by 'Yes'.

Updating Windows NT/2000/XP workstations

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. From a workstation, copy the IDE files to the CID for Windows NT/2000/XP workstations. The default is \\<servername>\SYS\SWEEP\NTInst\i386.
  2. At the Windows taskbar, select Start|Run.
  3. Browse to Setup.exe in your CID (see above) and select it.
  4. At the very end of the path in the Run window type a space followed by /update.
  5. Click OK.
  6. The workstations will update when they next check for a central update.

The final path should take the form \\<servername>\SYS\SWEEP\NTInst\i386\Setup.exe /update where <servername> is the name of your server.

Updating Windows 95/98/Me workstations

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. From a workstation, copy the IDE files to the CID for Windows 95/98/Me workstations. The default is \\<servername>\SYS\SWEEP\W95Inst where <servername> is the name of your server.
  2. At the Windows taskbar, select Start|Run.
  3. Browse to Setup.exe in your CID (see above) and select it.
  4. At the very end of the path in the Run window type a space followed by /update.
  5. Click OK.
  6. If necessary, click on the Done button.
  7. The workstations will update when they next check for a central update.

The final path should take the form \\<servername>\SYS\SWEEP\W95Inst\Setup.exe /update where <servername> is the name of your server.

Updating Macintosh workstations

  1. From a Macintosh, place IDE files in the macinst|IDE folder on the server.
  2. SWEEP checks for new IDE files each time it is launched. The InterCheck on-access scanner checks each time the Macintosh is started.
  3. You will be prompted to restart the Macintosh, or re-launch SWEEP, as appropriate.

How to confirm that the IDE files have been loaded in NetWare

  • The IDE files loaded are listed in the SWEEP log (SYS:SWEEP\SWEEP.LOG by default).
  • Select 'Virus library' from the 'Administration' menu. Check the number of viruses and that the new viruses appear in the list.

[TOP]

5. Sophos Anti-Virus for DOS and Windows 3.x

Updating SWEEP for DOS with virus identity (IDE) files

Updating a single workstation

  1. Copy the IDE files into the directory containing SWEEP.EXE.
  2. Run SWEEP, restarting it if necessary.

How to confirm that the IDE files have been loaded in DOS/Windows 3.x

  • Running SWEEP -VV will report which IDE files are in use.
  • When SWEEP is run, the number of viruses reported as known should have changed.
  • If a SWEEP log has been specified using the -p switch it will list the IDE files loaded.

[TOP]

6. Sophos Anti-Virus for Macintosh

Updating a single workstation

  1. Copy the IDE files into the System Folder|Preferences|Sophos folder.
  2. If InterCheck is installed, restart the Macintosh to load the new identities.
  3. If SWEEP only is installed, launch it (or re-launch it) to load the new identities.

Updating a server

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Copy the IDE files into the macinst|IDE folder on the server from which the central installation was made.
  2. SWEEP checks for new IDE files each time it is launched. The InterCheck on-access scanner checks each time the Macintosh is started.
  3. You will be prompted to restart the Macintosh, or re-launch SWEEP, as appropriate.

[TOP]

7. Sophos Anti-Virus for OpenVMS

Used as an InterCheck Server

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. If INTERCHECK_AUX_DIR is defined then copy the IDE files into the specified directory. Otherwise copy them into the directory containing the VSWEEP executable.
  2. Restart the InterCheck Server with the commands IC_STOP and IC_START.

Used for on-demand scanning

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. If VSWEEP_AUX_DIR is defined then copy the IDE files into the specified directory. Otherwise copy them into the directory containing the VSWEEP executable.
  2. Run VSWEEP, restarting any instances if necessary.

How to confirm that the IDE files have been loaded in OpenVMS

  • When VSWEEP is loaded it will display 'Using additional viruses from <n> IDE files'.
  • This message is also generated by the InterCheck server on startup if the reporting level is set to 5.

[TOP]

8. Sophos Anti-Virus for OS/2

Local installation (single user): updating command line and GUI Sophos Anti-Virus for OS/2 with virus identity (IDE) files

  1. Copy the IDE files into the directory containing OSWEEP.EXE.
  2. Run OSWEEP, restarting any instances if necessary.

Central installation: automatic updating with virus identity (IDE) files

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Copy the IDE files to the Central Installation Directory (CID) on the server (there may be more than one). The default CID for OS/2 servers is C:\SAVCID\OS2INST.
  2. Open a command prompt on your server. Go to the CID (as above) and type

    setup -update

    The workstations will update when they next check for a central update.

Detailed instructions can be found in the 'Adding the latest virus identities' section of the OS/2 Network installation guide.

Central installation: manual updating with virus identity (IDE) files

Note: Old IDE files are not automatically deleted from Central Installation Directories (CIDs). You should delete them and replace them with IDEs for the correct version.

  1. Copy the IDE files to the Central Installation Directory (CID) on the server (there may be more than one). The default CID for OS/2 servers is C:\SAVCID\OS2INST.
  2. Open a command prompt on your workstation. Type

    s:\setup

    where s: is a drive letter mapped to the CID. The workstation will update from the CID.

How to confirm that the IDE files have been loaded

Command line Sophos Anti-Virus for OS/2:

  • Running OSWEEP -V will report which IDE files are in use.
  • When OSWEEP is run the number of viruses reported in the library should have changed.
  • If an OSWEEP log has been specified using the -P switch it will list the IDE files loaded.

GUI Sophos Anti-Virus for OS/2:

  • Select 'About Sweep...' from the 'Help' menu, then press 'More >>'. The IDE files should be listed under 'Version information'.

[TOP]

9. MailMonitor for Lotus Notes/Domino

All configurations

  1. Copy the IDE files into the SWEEP for Windows NT directory.
  2. Restart the MailMonitor for Notes/Domino tasks using the server console:
     

    tell savdb quit
    load savdb
    tell savmail quit
    load savmail

How to confirm that the IDE files have been loaded

  • The IDE files are listed in the SWEEP log.

[TOP]

10. SAVI (Sophos Anti-Virus Interface) used by gateway programs, e.g. MIMEsweeper

Running under MIMEsweeper, WEBsweeper and MAILsweeper

Sophos Anti-Virus for Windows NT/2000/XP must be installed on the server running these services, normally from a Central Installation Directory on the same computer.

Updating this central installation is described in Central installation: automatic updating with virus identity (IDE) files.

It is advisable to re-start the MIMEsweeper, WEBsweeper and MAILsweeper services immediately after updating.

How to confirm that the IDE files have been loaded

  • The IDE files loaded are listed in the SWEEP log.
  • The number of viruses in the library reported in the MIMEsweeper log when SAVI is loaded should have changed.

[TOP]