Notes to Users of IBM AntiVirus version 3.0 =========================================== This file contains important notes for all users of IBM AntiVirus, including a summary of highlights in this release and last-minute changes to the printed documentation. It is divided into these sections: Introduction Highlights of Version 3.0 Additions to the User's Guide Installing from CD-ROM Creating Installation Diskettes Installing from Diskettes Installation Troubleshooting Uninstalling IBM AntiVirus Updating Virus Signatures Upgrade Reminder Emergency Diskette For Reviewers and Testers System Requirements Introduction ------------ IBM AntiVirus is a comprehensive anti-virus product for all popular PC operating systems. It is designed to detect and remove viruses from your computer simply and reliably. It is the software that IBM uses to protect its own computers. IBM AntiVirus Desktop Edition includes support for DOS, Windows[1], OS/2[2], Windows 95, and Windows NT, plus the IBM AntiVirus Emergency Diskette. IBM AntiVirus Enterprise Edition includes all of these, plus support for NetWare[3] and additional applications for administering IBM AntiVirus in shared computing environments. For complete information about IBM AntiVirus, refer to the User's Guide or to the online help. The section titled "Version 3.0 Highlights" below in this file contains a list of features that are new in this version. A wealth of information about computer viruses and anti-virus technology in general can be found at http://www.av.ibm.com on the Internet. Highlights of Version 3.0 ------------------------- The following improvements have been incorporated into version 3.0 of IBM AntiVirus for all platforms: * Many more new viruses are now handled, including ShareFun, CAP, and variants of Wazzu and Laroux for Microsoft Office 97. * IBM AntiVirus now handles macro viruses in objects that are stored inside other objects, such as Word documents embedded within Excel spreadsheets. * IBM AntiVirus Desktop Edition now includes protection for Windows NT workstations. It provides both automatic virus shielding and scheduled virus scanning, whether or not you are logged on. Administrator privilege is needed to install or uninstall IBM AntiVirus for Windows NT. * IBM AntiVirus Desktop Edition is now distributed on a single compact disc (CD-ROM). If you need to install IBM AntiVirus on a system without a CD-ROM drive, you can create installation diskettes for it on any system which does have a CD-ROM drive, or you can obtain installation diskettes directly from IBM. * A printable version of the User's Guide is included on the IBM AntiVirus Desktop Edition CD-ROM. The \300\DOCUMENT\AVUGEA.PS file contains a PostScript level 1 document formatted for 8.5 inch by 11 inch paper. The following improvements have been incorporated into version 3.0 of IBM AntiVirus for Windows, Windows 95, and Windows NT: * The system shield now detects viruses in attachments to Lotus Notes[4] documents when the "Launch", "View", or "Detach" buttons are clicked. * A problem was corrected which interfered with virus detection on network drives in certain circumstances. The following improvement has been incorporated into version 3.0 of IBM AntiVirus for OS/2: * The IBM AntiVirus Standalone program has been renamed IBMAVSP2.EXE. The following improvement has been incorporated into version 3.0 of IBM AntiVirus for Windows 95 and Windows NT: * An icon in the system tray indicates that IBM AntiVirus is protecting your system. The icon animates during scheduled scans, flashes when the system shield is checking, and provides a convenient pop-up menu for configuring IBM AntiVirus. The following improvements have been incorporated into version 3.0 of IBM AntiVirus for DOS and Windows: * The new /NOTSR option of the installation program can be used to conserve conventional DOS memory on workstations that never run DOS without Windows. * New virus filter technology further reduces conventional DOS memory usage during scheduled and manual scans. Additions to the User's Guide ----------------------------- The following information was not included in the User's Guide: * On Windows NT release 4.0 with Windows NT Service Pack 2 installed, or on Windows NT release 3.51, boot records of removable media such as diskettes are not protected by the IBM AntiVirus System Shield, whether or not the "check diskette boot records when the diskette is used" setting is selected. All other functions of IBM AntiVirus for Windows NT, such as shielding of local and network drives, manual and automatic checking of all drives, and shutdown checking of diskette drives, work correctly. In particular, when "Check files when accessed" is enabled, infected files will be detected immediately if they are copied from a diskette to any local or network drive. The IBM AntiVirus for Windows NT install program will inform you if the System Shield cannot protect removable media on your system. To ensure that the IBM AntiVirus System Shield can protect all removable media as well as local and network drives on Windows NT 4.0 systems, install Windows NT Service Pack 3 or later, either before or after installing IBM AntiVirus. Windows NT Service Packs are available free of charge from Microsoft at http://www.microsoft.com on the Internet. After installing Windows NT Service Pack 3 or later, no changes to IBM AntiVirus are needed. Note that if you have Windows NT 4.0 Service Pack 2 and have already installed Microsoft hot fix Q141239 by downloading KRNL40I.EXE from the Microsoft FTP server, the IBM AntiVirus System Shield will work correctly and the IBM AntiVirus install program will not display a message about removable media. Installing from CD-ROM ---------------------- IBM AntiVirus Desktop Edition is distributed on a single compact disc (CD-ROM) that contains IBM AntiVirus for DOS and Windows, OS/2, Windows 95, and Windows NT. If your system has a CD drive, you can install IBM AntiVirus on any platform from this CD-ROM using any of the following procedures. If you need to install IBM AntiVirus on a system that does not have a CD drive, you can create installation diskettes for it on any system that does have a CD drive. Please refer to the next section in this document for diskette procedures. To install from CD-ROM via an icon, do this: 1. Insert the CD-ROM into your CD drive. 2. Open your CD drive folder and double-click on the SETUP icon (or for OS/2, the SETUPOS2 icon). 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. In Windows and Windows NT release 3.51, to install from CD-ROM via the Program Manager: 1. Insert the CD-ROM into your CD drive. 2. In Program Manager, select "Run" from the "File" menu. Use the "Browse" button to select the SETUP program in the root directory of your CD drive and then click the "OK" button. 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. In Windows 95 and Windows NT release 4.0, to install from CD-ROM via the Add/Remove Programs application, do this: 1. Insert the CD-ROM into your CD drive. 2. Launch the "Add/Remove Programs" application from the "Control Panel" folder and click the "Install..." button. 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. To install from CD-ROM via a command prompt, do this: 1. Insert the CD-ROM into your CD drive. 2. At a command prompt, type "x:\setup" (or for OS/2, "x:\setupos2"), where "x" is the drive letter of your CD drive. 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. If you have a previous version of IBM AntiVirus installed, then your current settings will be kept and your workstation will be upgraded to this new version. If you do not have a previous version of IBM AntiVirus installed on your workstation, then the default installation directory will be C:\IBMAV\ for DOS and Windows and OS/2, or C:\IBMAV95\ for Windows 95, or C:\IBMAVNT\ for Windows NT. By default, the System Shield will be loaded in DOS sessions, and automated checking will be done weekly. The default settings used when you choose "Express" installation provide appropriate protection for most workstations, and we recommend that you accept them. You may change any of the settings during installation by choosing "Custom" installation, or at any time afterwards by launching the IBM AntiVirus program and selecting "Setup" from the menu. If you frequently access programs or documents via a network, you should enable the "Check files when accessed" function of the System Shield. Some viruses affect the ability of Windows workstations to operate unless the proper anti-virus precautions are taken. In some cases, they can make it impossible to start Windows. For this reason, we recommend that Windows users enable the "Prevent common DOS viruses" feature of the System Shield at all times. IBM AntiVirus for DOS and IBM AntiVirus for OS/2 can use some of the same files. If you are using both on the same workstation, please upgrade both at the same time. Creating Installation Diskettes ------------------------------- If you need to install IBM AntiVirus on a system that does not have a CD drive, you can create installation diskettes for it on any system that does have a CD drive. The IBM AntiVirus Desktop Edition CD-ROM can be used to create installation diskettes for any supported platform on any supported platform. It can also be used to create additional Emergency Diskettes. To create diskettes on a DOS or Windows system, do this: 1. Insert the CD-ROM into your CD drive. 2. At a command prompt, type one of these commands, where "x" is the drive letter of your CD drive: x:\300\utility\ea\dos\diskette windows x:\300\utility\ea\dos\diskette os2 x:\300\utility\ea\dos\diskette win95 x:\300\utility\ea\dos\diskette winnt x:\300\utility\ea\dos\diskette emergency 3. Follow the instructions as the program prompts you to insert and remove diskettes. Please be sure to write-protect each diskette as you remove it from your diskette drive. To create diskettes on an OS/2 system, do this: 1. Insert the CD-ROM into your CD drive. 2. At a command prompt, type one of these commands, where "x" is the drive letter of your CD drive: x:\300\utility\ea\os2\diskette windows x:\300\utility\ea\os2\diskette os2 x:\300\utility\ea\os2\diskette win95 x:\300\utility\ea\os2\diskette winnt x:\300\utility\ea\os2\diskette emergency 3. Follow the instructions as the program prompts you to insert and remove diskettes. Please be sure to write-protect each diskette as you remove it from your diskette drive. To create diskettes on a Windows 95 system, do this: 1. Insert the CD-ROM into your CD drive. 2. At a command prompt, type one of these commands, where "x" is the drive letter of your CD drive: x:\300\utility\ea\win95\diskette windows x:\300\utility\ea\win95\diskette os2 x:\300\utility\ea\win95\diskette win95 x:\300\utility\ea\win95\diskette winnt x:\300\utility\ea\win95\diskette emergency 3. Follow the instructions as the program prompts you to insert and remove diskettes. Please be sure to write-protect each diskette as you remove it from your diskette drive. To create diskettes on a Windows NT system, do this: 1. Insert the CD-ROM into your CD drive. 2. At a command prompt, type one of these commands, where "x" is the drive letter of your CD drive: x:\300\utility\ea\winnt\diskette windows x:\300\utility\ea\winnt\diskette os2 x:\300\utility\ea\winnt\diskette win95 x:\300\utility\ea\winnt\diskette winnt x:\300\utility\ea\winnt\diskette emergency 3. Follow the instructions as the program prompts you to insert and remove diskettes. Please be sure to write-protect each diskette as you remove it from your diskette drive. Installing from diskettes ------------------------- If you need to install IBM AntiVirus on a system that does not have a CD drive, create installation diskettes for your platform using one of the procedures in the preceding section of this document. Or, obtain installation diskettes directly from IBM. Then use one of the following procedures to install IBM AntiVirus. To install from diskettes via an icon, do this: 1. Insert the first installation diskette for your platform into your A: drive. 2. Open your A: drive folder and double-click on the SETUP icon (or for OS/2, the SETUPOS2 icon). 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. In Windows and Windows NT release 3.51, to install from diskettes via the Program Manager: 1. Insert the first installation diskette for your platform into your A: drive. 2. In Program Manager, select "Run" from the "File" menu. Type "a:\setup" and then click the "OK" button. 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. In Windows 95 and Windows NT release 4.0, to install from diskettes via the Add/Remove Programs application, do this: 1. Insert the first installation diskette for your platform into your A: drive. 2. Launch the "Add/Remove Programs" application from the "Control Panel" folder and click the Install... button. 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. To install from diskettes via a command prompt, do this: 1. Insert the first installation diskette for your platform into your A: drive. 2. At a command prompt, type "a:\setup" (or for OS/2, "a:\setupos2"). 3. Follow the instructions in the installation dialogs. To install with the default settings, click the "Next" button on each dialog. If you have a previous version of IBM AntiVirus installed, then your current settings will be kept and your workstation will be upgraded to this version. If you do not have a previous version of IBM AntiVirus installed on your workstation, then the default installation directory will be C:\IBMAV\ for DOS, Windows, and OS/2, or C:\IBMAV95\ for Windows 95, or C:\IBMAVNT\ for Windows NT. By default, the System Shield will be loaded in DOS sessions, and automated checking will be done weekly. The default settings used when you choose "Express" installation provide appropriate protection for most workstations, and we recommend that you accept them. You may change any of the settings during installation by choosing "Custom" installation, or at any time afterwards by launching the IBM AntiVirus program and selecting "Setup" from the menu. If you frequently access programs or documents via a network, you should enable the "Check files when accessed" function of the System Shield. Some viruses affect the ability of Windows workstations to operate unless the proper anti-virus precautions are taken. In some cases, they can make it impossible to start Windows. For this reason, we recommend that Windows users enable the "Prevent common DOS viruses" feature of the System Shield at all times. IBM AntiVirus for DOS and IBM AntiVirus for OS/2 use some of the same files. If you are using both on the same workstation, please upgrade both at the same time. Installation Troubleshooting ---------------------------- Every effort has been made to ensure that IBM AntiVirus is compatible with your workstation. This section describes some problems that might be encountered during installation, and how you can deal with them. Please refer to the User's Guide for troubleshooting information on IBM AntiVirus in general. When IBM AntiVirus for DOS is being run immediately after installation, you may encounter a message like "Cannot initialize for virus checking". The log will contain the message "Could not open input file - VERV.VDB." This indicates that insufficient file handles were available on your workstation when installation began. The installation program will increase the number of file handles, but this increase will only take effect when you reboot. You should reboot and reinstall IBM AntiVirus for DOS. Problems during install might also indicate the presence of a virus. To check for viruses, power off your workstation, insert the IBM AntiVirus Emergency Diskette, and then power on your workstation. In most cases, the Emergency Diskette can remove active viruses which prevent the workstation's operating system from booting and running normally. However, The Emergency Diskette is not a substitute for installing and running IBM AntiVirus on the workstation. After using the Emergency Diskette to remove an active virus, you must install IBM AntiVirus and scan the system thoroughly to find and remove latent copies of viruses. If you encounter the message "Out of environment space" when your DOS system is booting, just after you have installed IBM AntiVirus for DOS, you may need to increase your DOS environment space. You can do this by increasing the numeric value after the /E parameter of the SHELL= command in your AUTOEXEC.BAT. See your DOS documentation for more information on the SHELL= command. The IBM AntiVirus System Shield installs itself as a resident extension in your DOS system if you request it. Although it is rare, some other resident extensions might conflict with the System Shield. If you encounter a problem with other resident programs, and the problem goes away when you omit the System Shield, this might indicate a conflict. In these cases, move the call to IBMAVDR (or IBMAVDS, for OS/2) further down in your AUTOEXEC.BAT file, after the calls to resident extensions with which it might conflict. Uninstalling IBM AntiVirus -------------------------- You can remove IBM AntiVirus from your workstation with the Uninstall program. All files and directories associated with IBM AntiVirus will be removed from your workstation. To uninstall IBM AntiVirus on Windows, Windows 95, Windows NT, and OS/2 workstations, double-click on the Uninstall icon in the IBM AntiVirus folder. For DOS, enter the command UNINSTD at a DOS prompt. With Windows 95 and Windows NT release 4.0, you can also uninstall IBM AntiVirus with Add/Remove Programs in the "Control Panel" folder. Updating Virus Signatures ------------------------- IBM is continually collecting and analyzing new viruses, and periodically publishes new virus signature files for IBM AntiVirus on the Internet. To ensure that your workstation is protected against newer viruses, you should periodically obtain these files and update IBM AntiVirus with them. To update IBM AntiVirus with the latest virus signatures, do this: 1. Launch your Internet browser and go to the IBM AntiVirus home page: http://www.av.ibm.com Go to the "Latest updates" page by clicking on "updates". 2. Compare the name of the latest virus signatures available from IBM with the name of the virus signatures installed on your workstation. To find the name of the virus signatures currently installed on your workstation, launch IBM AntiVirus and open the current log by selecting "Current Log" from the "Log" menu. You will find the name and date of the installed signatures in the "Data file id strings" section of the log. 3. When your installed virus signatures need to be updated, download the latest virus signature file from http://www.av.ibm.com and store it temporarily on your workstation. 4. Launch IBM AntiVirus, select the "Update..." menu, and enter the full path and name of the downloaded file in the dialog. For example, if you downloaded AV30B.ZIP and stored it on your Windows 95 desktop, type: c:\windows\desktop\av30b.zip Upgrade Reminder ---------------- IBM AntiVirus will display a warning message when you should upgrade to a new version. IBM AntiVirus may not be able to detect all viruses that are written after it has been released, even if you update it with the latest virus signature files. Upgrading to a newer version is essential for continued protection against newer viruses. IBM AntiVirus will continue to function normally when this message is displayed. It is just a reminder that it is time to upgrade. By default, IBM AntiVirus begins to display the upgrade reminder message seven months after it is released. This version of IBM AntiVirus will start displaying its upgrade reminder message on February 10, 1998. Emergency Diskette ------------------ IBM AntiVirus includes an Emergency Diskette. This is a bootable diskette containing a minimal DOS release 7.0 system plus part of the IBM AntiVirus System Shield and the entire IBM AntiVirus Standalone program. It is for use with workstations that cannot boot and run IBM AntiVirus due to a virus. In most cases, the Emergency Diskette can remove active viruses which prevent the workstation's operating system from booting and running normally. To use the Emergency Diskette, do this: 1. Turn the power off on your workstation. 2. Insert the IBM AntiVirus Emergency Diskette into the A: drive. 3. Turn the power on again. 4. Follow the instructions on the screen. The Emergency Diskette is not a substitute for installing and running IBM AntiVirus on your workstation. After using the Emergency Diskette to remove an active virus, you must install IBM AntiVirus and scan the system thoroughly to find and remove latent copies of viruses. In particular, the Emergency Diskette cannot scan compressed partitions, OS/2 HPFS partitions, or Windows NT NTFS partitions. You must use IBM AntiVirus to find and remove viruses in these partitions. You can make additional Emergency Diskettes from the IBM AntiVirus Desktop Edition CD-ROM. Please refer to the section "Creating Installation Diskettes" earlier in this document. For Reviewers and Testers ------------------------- IBM AntiVirus is optimized to perform best in a typical real-world incident, involving a small number of viruses in a typical number of files. If you would like to test IBM AntiVirus to see how many viruses in your collection it detects, we recommend you use the IBM AntiVirus Standalone program. The Standalone program is IBMAVSP for DOS, Windows, and Windows 95; it is IBMAVSP2 for OS/2; it is IBMAVSN for Windows NT. For example, you may copy your virus collection to your E: drive and then type: ibmavsp e: -allfiles -log -vlog -nrep -ywipe -scomp This will scan all files, including compressed files, erasing any files found to be infected. A log will be created in the current working directory. Of course, the raw number of viruses found is not alone a good measure of the quality of an anti-virus program. System Requirements ------------------- IBM AntiVirus for DOS requires requires an IBM PC, IBM PS/2, or 100% compatible system with an 80286 or higher processor, a minimum of 640KB of memory, and DOS version 3.3 or higher. IBM AntiVirus for Windows requires an IBM PC, IBM PS/2, or 100% compatible system with an 80386 or higher processor, and Windows 3.1 or Windows 3.11 or Windows for Workgroups. IBM AntiVirus for OS/2 requires an IBM PC, IBM PS/2, or 100% compatible system, and OS/2 version 2.11 or higher. IBM AntiVirus for Windows 95 requires Windows 95 release 1.0 or higher. IBM AntiVirus for Windows NT requires Windows NT release 3.51 or 4.0. IBM AntiVirus can also be used to scan Windows NT release 3.50 systems for viruses. IBM AntiVirus requires a minimum of 5 megabytes of disk space on each workstation where it is installed, and may use up to 5 megabytes of additional space temporarily during installation. The DOS Shield may occupy up to 40 kilobytes of memory, depending upon which settings you choose. When scanning for all known viruses, DOS memory requirements are: IBM AntiVirus for DOS: 475 kilobytes IBM AntiVirus Standalone program: 395 kilobytes When scanning only for viruses observed in actual virus incidents, as specified by the /ITW command switch, DOS memory requirements are: IBM AntiVirus for DOS: 475 kilobytes IBM AntiVirus Standalone program: 305 kilobytes ________________________________________________________________________ [1] Microsoft, Windows, Word and Excel are trademarks of Microsoft Corp. [2] IBM and OS/2 are trademarks of IBM Corp. [3] Novell and NetWare are trademarks of Novell Inc. [4] Notes is a trademark of Lotus Development Corp.