Command AntiVirus for NetWare Administration Contents

Introduction

Using CSAV Admin

Reference Information

Technical Support

If you have Internet access and a browser, click here for access to Command Software Systems' web site.

Registered users of Command AntiVirus for NetWare can download the current version through this link. To use this service, you need a registered username, password and Internet access.

  Click here to find out more about Command AntiVirus, formerly known as Command's F-PROT Professional.

For Help on Help, Press F1


Administration

Command AntiVirus for NetWare Administration is a Windows program which provides the ability to easily access and customize the settings of Command AntiVirus for NetWare (CSAV).

One of the most powerful aspects of CSAV is the ability to provide instant protection for your valuable data. All you need to do is use the standard installation method and all the Default scanning options and methods are in place. If you wish to make changes to the existing settings you may do so through Command AntiVirus for NetWare Administration application.

Command AntiVirus for NetWare contains two levels of settings. The first level is the Global Default settings. These are user defined and provide the ability to override the predefined or hard coded values. The Global Default settings also allow the user to easily update all areas which contain the identical setting, without having to go into each and every scan selection and modify options. For example, if you wanted the action taken when a virus is found to be "Delete" rather than the default "Quarantine", by changing a Global setting the change would flow down to each type of scan throughout the program. You have the ability, through CSAV Administration, to revert to the default settings at any time.

CSAV provides Real-time, Manual and Scheduled Scan methods. The second level of settings in Command AntiVirus for NetWare allows you to configure each method individually, if you require a variety of scanning options.

Any setting configured for a particular method will supersede the Global Default settings, and the Global Default settings will supersede the predefined values.


Introduction

Congratulations on selecting Command AntiVirus for NetWare for unsurpassed security against viruses!   Benefits include:

·	Real-time monitoring of network traffic prevents infected programs from loading.

·	Real-time disinfection eliminates user disruption when a virus is found.

·	Uses state-of-the-art technology to scan for thousands of known viruses and variants without false positives.

·	NetWare Directory Service ( NDS ) and bindery independent.

·	Scans network drives on schedule or on demand, including migrated or compressed files.

·	Easy-to-use Windows interface and powerful console control.

·	Automatic quarantine, rename, or deletion of infected files.

·	Log results of scheduled and manual scans if a virus is found.

·	Simplified deployment and updating of multiple servers and workstations.

·	AlertTrack provides instant notification to users and groups.

·	Control of multiple servers.

See also: Command AntiVirus  Formerly F-PROT Professional


Using CSAV Admin

Servers

Administration

Realtime Statistics

Defining Manual Scans

Defining Realtime Scans

Defining Scheduled Scans

Enable Connection

ManagingScheduledScans

Managing the Include List

Managing the Exclude List

Deploying

Viewing the Log File

Reports

Changing the Password

Global Defaults

Unloading CSAV Administration

Reinitialize to Defaults

Synchronize CSAV Servers

The QUARANT.INE directory

The Command AntiVirus History file


Reference Information

Menu Commands

Frequently Asked Questions

Console Operation (load-time options)


Menu Commands

Task

Manual Scans

Real-time Scans

Scheduled Scans

Deploy

Apply Changes

Command AntiVirus for NetWare

Deploy selected files

View

View Log File

View Log File Settings

Setup

Notification

Change Password

Domain

Advanced

Global Defaults

Unload Command AntiVirus for NetWare

Reinitialize to Defaults

Synchronizing CSAV Servers

Help

Index

Using Help

About


Frequently Asked Questions

How do I select a primary server?	ANSWER

How do I edit the domain List?	ANSWER

How do I get information on the servers in my domain?	ANSWER

How do I view realtime statistics on a server in my domain?	ANSWER

How do I clear realtime statistics of a server in my domain?	ANSWER

How do I define a manual scan?	ANSWER

How do I define a realtime scan?	ANSWER

How do I define a scheduled scan?	ANSWER

How do I edit a scheduled scan?	ANSWER

How do I delete a scheduled scan?	ANSWER

How do I manage my includes list ?

ANSWER

How do I manage my excludes list ?	ANSWER

How do I apply the changes I've made to the servers in my domain?	ANSWER

How do I deploy CSAV to the servers in my domain?	ANSWER

How do I select a log file to view ?

              ANSWER

How do I change the password of a server in my domain?	ANSWER

How do I change my global default settings?

             ANSWER

How do I unload CSAVADMIN ?	ANSWER

How do I re-initialize CSAVADMIN?	ANSWER


Technical Support

If you run into a problem with the Command AntiVirus system that the online help or printed documentation does not address, please feel free to contact Command Software Systems.

Should you need to call the technical support team, please try to be at your computer to facilitate the call.

For additional information visit our Web Site.

Click here to visit the Command Software web site

To use this link you must have Internet access and a browser or navigator on your system.

Having the following information available will make it easier for your technical support representative to answer your questions:

·	Any specific error message.

·	Command AntiVirus system version number.  This is displayed on the system console after entering "MODULES".  You can also look at the main screen in CSAV Administration.

·	Computer make and model.

·	Network type and version.

If you prefer, you may write Command Software or contact any of our distributors.  Just move the cursor over a red dot on the map below.  When the cursor changes, click the area and contact information will be displayed for that region of the country.


Servers

In the "Servers" area of the Command AntiVirus for NetWare Administration main screen, you have the ability to view and select the Primary Server, edit the Domain list and view information pertaining to the servers in the domain.

See Also

Selecting a primary server

Editing the domain list

Viewing information on servers in the domain


Command AntiVirus for NetWare Main Interface

The main screen of CSAV Administration provides a current view of vital information on the servers in the Domain.  It is easy to navigate the program using the various controls available from this screen.

To get a brief description of the different controls on the main screen:

1.  Slide your cursor over the control.

2.  Press the left mouse button.

Information on the selected control will be displayed.

See Also

Selecting a primary server

Editing the domain list

Viewing information on servers in the domain

Viewing Realtime Statistics


Selecting a primary server

The purpose of a Primary Server is to provide a source from which the settings for other servers, within the Domain, are determined. The selected server is then used for deployment and is responsible for deploying changes made. Assign the Primary Server once and leave it unless you make sweeping hardware changes. Once a Primary Server is designated, administration can be accomplished quickly, easily and consistently. Plus, you will not need to visit each location.

The current Primary Server is displayed here. To see a list of  available servers, click on the Primary button. From the list of servers you can select a new Primary Server.

To select a primary server:

1.  Click on the button labeled Primary in the Servers section on the main

screen.

2.	 Select a server name from the list.

3. Click on OK.

Your Primary Server has now been selected.


Editing the domain list

When editing the domain list, a dialog box appears which allows you to move (add/remove) available servers to and from the domain list.

From the Setup menu, select Domain or select the Edit Domain List... button from the main screen.

This displays a dialog box that allows you to edit the domain list.

When a server is selected, you are asked for a password. By default the password is "password". Passwords can be changed by selecting Setup and then Change Password. There is a check box on this screen  which reads Remember this password.  If you have it selected, the password is written to the INI file so that you do not have to enter it repeatedly.  We recommend that you do not check this since a password provides an important security measure.

To add a server to the domain:

1.	Highlight a server name from the list of Available CSAV Servers.

2.	Click the Add button.

3.  Enter the server password, if prompted to do so.

4.	Click OK.

The server has now been added to the Domain.  The new server name will display in the server list box of the main screen.

You can also add a server by double-clicking on one of the names listed under "Available CSAV Servers". The name will move to the "Servers in Domain" list. When finished, click OK.

To remove a server from the domain:

1.  Highlight a server name from the Servers in the Domain list.

2.  Click the Remove button.

3.  Press OK.

The server has now been removed from the domain server list.  The deleted server name should not appear in the server list box of the main screen.

You may also remove a server by double-clicking on one of the names listed under "Servers in Domain". The name will move to the "Available CSAV Servers" list. Press OK.

Multiple servers can be added or removed from the domain. Multiple selection is achieved through the normal Windows' key and mouse combinations such as CTRL-click or SHIFT-click.  If multiple servers are selected when the Add or Remove buttons are clicked, then all of the selections are moved to the other pane.


Available CSAV Servers

This is a list of servers that are running Command AntiVirus for NetWare NLM.


Servers in the Domain

The Domain refers to a group of servers that is managed by the same system administrator.  The Domain contains the servers that are automatically re-configured when changes, such as settings and updates, are made.  To avoid conflicts, administrators should not share servers.


Add Server to Domain List

To add a server to the domain:

1.	Highlight a server name from the list of Available CSAV Servers.

2.	Click the Add button.

3.  Enter the server password, if prompted to do so.

4.	Press OK.

The server has now been added to the Domain.  The new server name will display in the server list box of the main screen.

You may also add a server by double-clicking on one of the names listed under "Available CSAV Servers". The name will move to the "Servers in Domain" list. Press OK.


Remove Server from Doamin List
Remove Server from Domain List

To remove a server from the domain:

1.  Highlight a server name from the Servers in the Domain list.

2.  Click the Remove button.

3.  Press OK.

The server has now been removed from the domain server list.  The deleted server name should not appear in the server list box of the main screen.

You may also remove a server by double-clicking on one of the names listed under "Servers in Domain". The name will move to the "Available CSAV Servers" list. Press OK.


Viewing information on servers in the domain

The sever window on the Main Screen of CSAV Administration provides useful information about the servers in your domain. Each field is described below:

Server Name

The names of the servers you have included in your domain are displayed here.

NOS

The version of the NetWare Operating System on the selected server is displayed here.

CLIB

The version of CLIB on the selected server displays here.

CSAV

The Command AntiVirus for NetWare version number, on the selected server, displays here.

VSE

The VSENGINE.NLM version number that is installed on the selected server is displayed in this column.

SCN

This column displays the version of the Command AntiVirus virus scanner engine.

MDEF

This column displays the release date of the F-MACRO.DEF file. The format used shows the year, month and date. (YY-MM-DD)


Server Name ( Definition )

This area indicates the names of the servers you have included in your domain.


NOS ( Definition )

This shows the NetWare Operating System version on the selected server.


CLIB ( Definition )

This shows the version of CLIB on the selected server.


CSAV ( Definition )

This indicates the version of Command AntiVirus for NetWare installed on the selected server.


VSE (Definition)

This indicates the version of VSENGINE.NLM that is currently installed on the selected server.


SCN (Definition)

This indicates the version of the Command AntiVirus virus scanner that is installed on the selected server.


MDEF (Definition)

This indicates the date, in YY-MM-DD format, of F-MACRO.DEF that is installed on the selected server.


Buffers / Scan ( Definition )
Buffers / Scans ( Definition )

The first number in this area will display the size of the buffer setting for the server selected. The default is 5 and may be increased or decreased. The second number refers to scans currently taking place. This includes Manual and Scheduled as well as Real-time scans. However, Real-time scans occur so quickly you may not see them. You can watch the numbers change as files are scanned.


Deploying ( Definition )

This will display "no", "send" or "receive". This is very helpful for monitoring deployment activity.


About the Domain List

The Domain refers to a group of servers that are managed by the same system administrator. This grouping represents the servers that are automatically re-configured when changes are made. For this reason, Administrators should not share servers.


Real-time Statistics

Viewing Realtime Statistics

Clearing Realtime Statistics


Viewing Realtime Statistics
Viewing Real-time Statistics

The Real-time Statistics area provides valuable information on the status of your network. The numbers shown provide a history which starts at the beginning date and time displayed in the Since: area. You can view how many files were scanned on opens and closes, the detection of any suspicious or infected files, the Action on Infection, and the number, if any, of delayed scans. The number of buffers that are allotted are displayed and if any scans are in progress on the selected server you can see them in this area. However, real-time scans occur so quickly you may not see them. You can also monitor deployment activity from this screen.

To view real-time statistics:

1.  Click once on a server name in the list box of the Main Screen

You will see Real-time Statistics for opens and closes of files displayed below in the area called Real-time Statistics.

See Also

Clearing Realtime Statistics

Realtime Statistics Format


Clearing Real-time Statistics

Real-time statistics are cumulative.  If you double click on a server name in the server list box on

the main screen, you will see the following message:

If you choose Yes, then the information displayed for the selected server will be reset. If you choose No the information will continue to accumulate.


Realtime Statistics Format
Real-time Statistics Format

The format for this information shows the opens first then the closes, separated by a forward slash, e.g. "Scaned:125/120"

Since: This area shows the date and time the statistics history began.

Scanned: This indicates the number of files scanned.

Infected: If any infected files were discovered you would see the number displayed in this area.

Suspicious: If CSAV finds any files which might be infected the number will be displayed here.

Renamed: The Renamed field allows for two fields to be displayed and reflects the Action on Infection for Real-time scans. Rename is the default, but you may see Quarantined or another selected setting.

Quarantined: This area allows for two fields to be displayed and reflects the Action on Infection for Real-time scans. Rename is the default, but  the selected action is displayed.

Delayed Scans: This will indicate if any scans had to wait because of buffer limitations. Normally this should reflect 0. A low number will not hurt, but if you notice this frequently you. may need to increase your buffers.

Note:  If you do not have enough buffers allocated, see the section on Load Time Options in Chapter 4 of the manual.

Buffers: This shows the number of buffers that are currently provided. The default is 5.

Scans: This location displays the number of scans in progress. Real-time scans occur very quickly, so you are unlikely to see them.

Deploying: This area is useful for monitoring deployment activity. No displays when there is no deployment, Send indicates that the selected server is sending information and Receive means that the selected server is accepting information.


Since

Since: This area shows the date and time the statistics history began.


Since:

This area shows the date and time the statistics history began.


Scanned

Scanned: This indicates the number of files scanned.


Scanned:

This indicates the number of files scanned.


Infected

If any infected files were discovered you would see the number displayed in this area.


Infected:

If any infected files were discovered you would see the number displayed in this area.


Suspicious

If CSAV finds any files which might be infected the number will be displayed here.


Suspicious:

If CSAV finds any files which might be infected the number will be displayed here.


Quarantined

This area allows for two fields to be displayed and reflects the Action on Infection for Real-time scans. Rename is the default, but you may see Report or whatever other setting you have selected.


Renamed

The Renamed field allows for two fields to be displayed and reflects the Action on Infection for Real-time scans. Rename is the default, but you may see Quarantined or another selected setting.


Delayed Scans

This  indicates if any scans had to wait because of buffer limitations. Normally this should reflect 0. A low number will not hurt, but if you notice this frequently you may need to increase your buffers.


Delayed Scans:

This  indicates if any scans had to wait because of buffer limitations. Normally this should reflect 0. A low number will not hurt, but if you notice this frequently you may need to increase your buffers.


Buffers

This shows the number of buffers that are currently provided. The default is 5. The number of buffers determines the number of scans that can be performed simultaneously.


Buffers:

This shows the number of buffers that are currently provided. The default is 5. The number of buffers determines the number of scans that can be performed simultaneously.


Scans

This location displays the number of scans in progress. Real-time scans occur very quickly, so you are unlikely to see them.


Scan:

This location displays the number of scans in progress. Real-time scans occur very quickly, so you are unlikely to see them.


Currently Deploying

Deploying: This area is useful for monitoring deployment activity. No displays when there is no deployment, Send indicates that the selected server is sending information and Receive means that the selected server is accepting information.


Currently Deploying:

Deploying: This area is useful for monitoring deployment activity. No displays when there is no deployment, Send indicates that the selected server is sending information and Receive means that the selected server is accepting information.


Defining Manual Scans

From the Task menu, select Manual Scans or select [image] from the toolbar.  This opens a dialog box where you can define the parameters of a Manual Scan.

This dialog box contains three tabbed pages, Settings, Include Listand Exclude List.

To define a manual scan:

1.  From the settings page, select an action to take upon infection.

2.  Select the  you want implemented in the scan.

3.  Select the Volume/path to scan.  A browse button has been supplied as an easier method for choosing the correct Volume/path.

Optional

4.  Select Remove all macros if variant is found. This is available only if you have selected the Disinfect option.

5. Select Inherit Default if you want the global scan settings to be passed to the scan.

6.  Select Include Sub directories if you want to scan all sub-directories below the Volume/path chosen.

7.	Select the Include List page.  Add the files you want included in the scan.

8.	Select the Exclude List page.  Add any files you want excluded from the scan.

Finishing Step

9.	At this point, you can do one of three things:

a.	Choose Begin Scan to begin a scan based on the selections you have just entered. These settings will not be permanent unless you select apply.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Defining Real-time Scans

The Real-time Scans Settings allow you to choose the method or action you want CSAV to take should a virus be encountered.  Keep in mind, real-time scans occur throughout the workday so the action you select here should reflect the needs of your environment.  In most cases this means you do not want the users work disrupted, but you do want to be aware of how, when and where viruses attempt to infect your network.

From the Task menu, select Real-time Scans.  This will open a dialog box dialog box where you may then define the parameters of a Real-time Scan.

This dialog box contains three tabbed pages, Settings, Include Listand Exclude List.

To define a real-time scan:

1.  From the settings page, select an action to take upon infection.

2.  Select the Skip Options  you want implemented in the scan.

3.  Select the Scan On options.  You can scan on opens, closes, or both. No selection at all disables real-time scanning. For optimum performance the default is set to scan on closes only.

Optional

4.  Select Inherit Default if you want the global scan settings to be passed to the scan.

5.  Select Kill workstation connection if you want disable any attached workstation if a virus is found. After a workstation has been disinfected, you will need to enable the station using the Enable Station console command.

6.	Select the Include List page.  Add the files you want included in the scan.

7.	Select the Exclude List page.  Add any files you want excluded from the scan.

Finishing Step

8.	At this point, you can do one of three things:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Defining Scheduled Scans

You may wish to leave the default scheduled scan, which is once a day at midnight, or add your own Scheduled Scan..  You may schedule multiple scans to occur at different intervals, with different settings.  Each scheduled scan must have a unique name.

From the TASK menu, select Scheduled Scans or select [image] from the toolbar.

To define a scheduled scan:

1.	Select the Add button.  This displays a dialog box that allows you to create and name a scheduled scan.  The entry is case insensitive and may contain spaces and alphanumeric characters. Keeping the names concise is preferable.

2.  Click OK or press Enter and a new Scheduled Scans screen will appear showing the name

     of the scan.

This dialog box contains four tabbed pages, Settings, Schedule, Include List and Exclude List.

1.  From the settings page, select the action to take upon infection.

2.  Select the SKIP options you want implemented in the scan.

3.  Select the Volume/path to scan.  A browse button has been supplied as an easier method for      choosing the correct Volume/path.

Optional Settings

4.  Select Inherit Default if you want the global scan settings to be passed to the scan.

5.  Select Include Sub directories if you want the scan to effect all sub- directories below the Volume/path chosen.

6.	Select the Schedule page. Choose a schedule option .

a. 	If Schedule by frequency

1.	Choose frequency of scan, i.e. Daily, Weekly, Monthly, or Quarterly.

2.	Select day or days desired.

3.	Select start time.

4.	Select stop time if the scan must be completed by a specific time.  It is not necessary to select a stop time.

5.	If you have selected a stop time, then select from Options, i.e. Finish, Wait, Quit.

6.	Select Notify if you wish notification to be enabled when Time Option is reached.

b.	If Schedule by period

1.	Choose period of scan, i.e. Hours, Days, Weeks, or Months, and its numeric value.

2.	Select day or days desired.

3.	Select start time.

4.	Select stop time if the scan must be completed by a specific time.  It is not necessary to select a stop time.

5.	If you have selected a stop time, then select from Options, i.e. Finish, Wait, Quit

6.	Select Notify if you wish notification to be enabled when Time Option is reached.

Optional

7.	Select Inherit Default if you want the global scan settings to be passed to the scan.

8.	Select the Include List page.  Add the files you want included in the scan.

9.	Select the Exclude List page.  Add any files you want excluded from the scan.

Finishing Step

10. At this point, you can do one of three things:

a)	Choose Close to store the changes in memory so you can deploy all changes at once.

b)	Choose Cancel to cancel this operation.

c)	Choose Apply and the changes are saved permanently and all servers in the Domain are updated immediately.

A help button has been supplied if you need help on any item in the dialog box.

See Also

Deleting a scheduled scan

Editing a Scheduled Scan


Managing Scheduled Scans

You may wish to leave the default scheduled scan, which is once a day at midnight, or add your own Scheduled Scan..  You can schedule multiple scans to occur at different intervals, with different settings.  Each scheduled scan must have a unique name.

From the TASK menu, select Scheduled Scans or select [image] from the toolbar.  This will open a dialog box that allows you to add new scheduled scans and edit or delete existing scheduled scans.

See Also

Defining Scheduled Scans

Editing a Scheduled Scan

Deleting a scheduled scan


New Scheduled Scan Name

Enter the name of the new scheduled scan you wish to define.


Schedule by frequency

The frequency option allows you to choose between daily, weekly, monthly, and quarterly scans.  For example, if you want a scan to take place weekly on Sunday at 9:00 AM you can define it here.


Schedule by period

The scan period specifies the amount of time between scans. Scheduling by period allows more specific entry options than scheduling by frequency. For example, scans could be scheduled with an interval of 3 hours, 10 days or 12 weeks.

First, select the option button and then type in the desired number from the allowed ranges shown in the table below.  Then, select the period from the drop-down list box.

Period / Frequency	Range
Hours	1 to 48
Days	1 to 200
Weeks	1 to 30
Months	1 to 10


Days to Scan

You can select one, some, or all of the named day(s) check boxes here.  If you select  Anyday, then you cannot select the named days.  These check boxes are not active if you have chosen a daily scan.


Start time

Enter the time to start the scan in 24 hour format with 00 indicating midnight.  For example, if you want the scan to begin at 10:00 at night, you would enter 22:00. If you do not enter a start time the scan will begin immediately.  Thereafter, the time will "float", beginning again after the specified interval.

This is very useful when you want to schedule other events around the scan such as a back up.


Stop time

Stop time is very useful for scheduling other events around the scan, such as a backup.  Time is entered in 24 hour format with 00 indicating midnight.  For example, if you want a scan to end at 2:30 in the morning, you would enter 2:30. It is not necessary to enter a stop time.


Options

This drop-down list contains the following options which allow you to select what the scan will do, if and only if, a stop time is set and the scan is not completed prior to the stop time.

Finish:

This allows the scan to finish even if it goes past the stop time.

Wait:

This allows the scan to stop and remember the files that still need to be

scanned. The next time the scan is scheduled to run, it will continue from where it left off.

Quit:

When the stopped time is reached scanning stops.  The next scan will start from the beginning.


Notify

The Notify check box pertains to the scan option you have selected.  If "Notify" is selected, then when the scan has stopped running, notification is made to the report areas, which are set up in Reports, including notification to AlertTrack.


Editing a Scheduled Scan

From the Task menu, select Scheduled Scans or select [image] from the toolbar.  This opens a dialog box that allows you to add new scheduled scans and edit or delete existing scheduled scans.

From this screen you can scroll through existing scheduled scans.

To edit a scheduled scan:

1.  Select the scan you want to change, from the list of scheduled scans, by clicking on the name of the scan.

2.  Select the Edit button.  This will open a tabbed dialog box where you may edit the current parameters of a scheduled scan.

Note:	You can also double click on the name to edit the scan.  Either method displays the Scheduled Scans dialog box.

3.  After editing the desired pages, do one of the following:

a)	Choose Close to store the changes in memory so you can deploy all changes at once.

b)	Choose Cancel to cancel this operation.

c)	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.

See Also

Defining Scheduled Scans

Deleting a scheduled scan


Deleting a scheduled scan

From the TASK menu, select Scheduled Scans or select [image] from the toolbar.  This will open a dialog box dialog box that allows you to add new scheduled scans, edit existing scheduled scans, and delete existing scheduled scans.

To delete a schedule scan:

1.  Select the scan to edit from the list of scheduled scans.

2.  Select the Delete button.  This removes the scan from the dialog box.

3. Choose OK to store the changes in memory so that  it and all other changes are deployed at once.

See Also

Defining Scheduled Scans

Editing a Scheduled Scan


Managing the Include List

The include list is comprised of those files you want included in a scan.  It is possible to add or delete volumes, files and directories on the scan list.  Sub-directories are scanned by default.  To access this screen, click on the tab for "Include List" from your scan selection.

The include list looks the same for Manual Scans, Scheduled Scans, and Global Defaults, except for the title which indicates the type of scan.

The default file extensions scanned by Command AntiVirus for NetWare include: .SYS, .PGM, .OV?, .FON, .EXE, .DRV, .DO?, XL? and .COM. Files to be scanned may be specified by WildCard extensions and/or WildCard File Names.  You can add additional files or delete files from this list, but only files that are in the list are scanned.

Directories to be scanned may be specified by the full path, either Universal Naming Conventions (UNC) or a NetWare path; wild cards and file names are not allowed in the path, except for a "*" as the last character.  The default is to scan all directories; specifying a particular directory results in all other directories being skipped.  All sub directories below the included directory are scanned, unless the scan sub directories option is off.  If a File Server is specified, then the include only affects the specified File Server, i.e., other servers will ignore the specification.

Valid syntax is shown here. The text in parenthesis is optional:

1.	NetWare Paths: (server\)volume:(path)

e.g.:

SYS:  Scan only the SYS volume.

SYS:,VOL2:  Scan volumes SYS and VOL2.

SYS:USER  Scan the USERS directory on the volume SYS.

SYS:USERS*  Scan any directory beginning with "USERS" on the volume SYS:. For example, SYS:USERS, SYS:USERS1, and SYS:USERS2 would be scanned if this entry were used.

FS1\SYS:USERS  On File Server "FS1" scan only the directory USERS on the volume SYS; on all other servers scan all directories.

2.	UNC Paths: \\server\volume\(path)

e.g.:

\\FS1\SYS\LOGIN  On File Server "FS1" scan only the directory LOGIN on the volume SYS; on all other servers scan all directories.

WildCard extensions begin with a period ".", are two to four characters long, and may contain one to three question marks "?"; ".*" is a special case and results in all files being included.

For example:

.DO?	All files with extensions beginning with ".DO" such as 	"ABC.DOC" and "DEF.DO!", and "GHI.DO".

.EXE	All files with extensions .EXE such as "ABC.EXE" and 	"DEF.EXE".

.?	All files with no extensions and one character extensions such as "ABC" and "DEF.G".

.??	All files with no extensions and one and two character 	extensions such as "ABC", "DEF.G" and "HIJ.KL".

.* or .???	All files.

WildCard File Names contain legal file names, i.e., up to eight characters optionally followed by a dot "." and up to three characters. You can also use the WildCards "*", matching any characters, and "?" matching any single character.  File Names cannot contain the path separator characters ":" and "\".

For example:  If you have the files "ABC", "ABC.D". "ABC.DE", "ABC.DEF", "ABZ.X" "ABCZ.D", "ABCZ.DE", AND "BCZ.DEF" on your server,  then the include list entry would match (and scan) as follows:

ABC	Would match "ABC".

ABC.?	Would match "ABC.D" and "ABC".

AB?.?	Would match "ABC", "ABC.D" and "ABZ.X."

AB??.?	Would match "ABC",  "ABC.D",  and "ABZ.X".

* or ????????	Would match "ABC", i.e., all files without extensions.

a*.??	Would match  "ABC",  "ABC.D", "ABC.DE", "ABZ.X", 	"ABCZ.D", and "ABCZ.DE".

Add

When you choose the Add button, you are prompted to enter the volume, path or directory to include.

Delete

To Delete an entry, highlight by clicking on the name, and select delete.

Inherit  Defaults

If this check box is selected, changes made to the Global Default settings are passed to the scan.


Managing the Exclude List

The exclude list allows you to exclude filenames, directories or volume names from a scan.  When you specify an exclusion, directories and sub directories below are also excluded.  To access this screen, click on the tab for Exclude List from your scan selection.

You can scroll through the existing entries in the list which are displayed in the center of the screen.

The exclude list will look the same for Manual Scans, Scheduled Scans, and Global Defaults, except the header will indicate the particular type of scan.

The default Exclude list does not display in this area.  This list is as follows and cannot be overridden:

SYS:BACKOUT.TTS

SYS:SYSTEM/{Bindery}

ANY Quarantine directory

Directories to be excluded may be specified by the full path, either Universal Naming Conventions (UNC) or a NetWare path; wild cards and file names are not allowed in the path, except for a "*" as the last character. All subdirectories below the excluded directory will be excluded. If a File Server is specified, then the exclude will only affect the specified File Server, i.e., other servers will ignore the specification. If an identical entry exists in both the include list and the exclude list it will be excluded.

Valid syntax is shown here. The text in parenthesis is optional:

1.	NetWare Paths: (server\)volume:(path)

For example:

SYS:  Exclude only the SYS volume from the scan.

SYS:,VOL2:  Do not scan volumes SYS and VOL2.

SYS:USER  Do not scan the USERS directory on the volume SYS.

SYS:USERS*  Do not scan any directory beginning with "USERS" on the volume SYS:. For example, SYS:USERS, SYS:USERS1, and SYS:USERS2 would not be scanned if this entry were used.

FS1\SYS:USERS  On File Server "FS1" do not scan the directory USERS on the volume SYS; on all other servers scan all directories.

2.	UNC Paths: \\server\volume\(path)

e.g.:

\\FS1\SYS\LOGIN  on File Server "FS1" do not scan the directory LOGIN on the volume SYS; on all other servers scan all directories.

Files to be excluded can be specified using a WildCard extension and/or a WildCard file name.

WildCard extensions begin with a period ".", are two to four characters long, and can contain one to three question marks "?"; ".*" is a special case and results in all files being excluded.

For example:

.DO?	All files with extensions beginning with ".DO" such as "ABC.DOC" and "DEF.DO!", and "GHI.DO".

.EXE	All files with extensions .EXE such as "ABC.EXE" and "DEF.EXE".

.?	All files with no extensions and one character extensions such as "ABC" and "DEF.G".

.??	All files with no extensions and one and two character extensions such as "ABC", "DEF.G" and "HIJ.KL".

  .* or .???    All files.

Add

When you choose the Add button, you are prompted to enter the volume, path or directory to exclude.

Delete

To Delete an entry, highlight by clicking on the name, and select delete.

Inherit  Defaults

If this check box selected, changes made to the Global Default settings are passed to the scan.


Deploying

The following selections offered under the Deploy menu, enable updates to be implemented quickly and easily.

Applying Changes to the Server

Deploying Command AntiVirus for Netware

Deploying selected files


Applying Changes to the Server

Whenever you make changes to any of the scans you are given the choice to either Apply or to select Close.  If you have selected Close, then those settings are temporarily saved or remembered so that they may all be applied at the same time.  This allows you to configure your settings and apply them at a time when system resources are less in demand.

When you select the Apply Changes option you will see the following screen.  You can then select, from the Available CSAV Servers list, the server(s) you wish to send changes to. You may add or remove servers from this screen to facilitate deployment.

To apply changes:

1.  Highlight the server you want included in the update.

2.  Select Add.  The selected server moves to the Servers to Update list.  This can also be accomplished by double-clicking on the server name.

3.  If you do not want the server included in the update, then reverse this by using the Remove button or by double-clicking on the server name.

4. Select OK to complete the process or Cancel to abort.


List of Available CSAV Servers

This list contains the names of all servers running Command AntiVirus for NetWare.


List of Servers to Update

This list contains the names of the servers running Command AntiVirus for NetWare that can receive modified or updated information.


Remove ( Deploy )

This button removes the highlighted server name from the list of  "Servers to Update" and places it back in the list of Available CSAV Servers .


Add ( Deploy )

This button adds the highlighted server name in the list of "Available CSAV Servers" to the list of "Servers to Update" .


Deploying Command AntiVirus for NetWare

This sends an update of all the files associated with CSAV, to all servers in the domain.  If you watch the domain list box at the main screen, you can see this activity occur.  When all the servers are updated, the "Deploying" column will display "No", instead of "Receive".

To deploy Command AntiVirus for NetWare:

1.  Select the Deploy menu.

2.  Select Deploy Command AntiVirus for NetWare

Note:  This can also be accomplished by clicking [image] on the toolbar.


Deploying selected files

This option allows selected files to be sent to any or all servers in the domain that are running Command AntiVirus for NetWare. By default we have included a predefined list of files which are normally deployed during an update. These files are stored in FPNADMIN.INI in the [Deploy] section.

Any file, not just Command AntiVirus files, can be added to this list and deployed to any of the CSAV servers. This functions like the NCOPY command except that you can deploy to multiple servers.

Note: In FPNADMIN.INI, if the file0= line in the [Deploy] section is deleted, the default list is recreated when CSAV Administration either starts or terminates. It is important to be aware of this, for an easy recovery, should you accidentally delete one of the files in the default list.

To deploy selected files:

1.  Select the Deploy menu.

2.  Select Deploy Selected Files.

3.  Select a file from the list or Add the file you wish to deploy.

4.  Click OK.

5.  Add or Remove servers from the Available CSAV Servers list to the Selected servers list.

6. Click OK.

Note: Deploying selected files can also be started by clicking [image] on the toolbar.


Viewing the Log File

From the View menu you can view a specific log file.  The servers to choose from are

the same as the servers in the domain list. When View and then Log File is selected a dialog box opens.

To view a log file:

1.	Select a server from the list box that corresponds to the log file you wish to view.

2.	Select OK.

You can close this view by either by selecting the close log file button from the toolbar or selecting view setting from the main menu.


The Command AntiVirus History file

The only location of the FPROT.HST file is on the SYS: volume, usually as shown below, unless you have placed Command AntiVirus in a location other than SYS:SYSTEM.

SYS:SYSTEM\FPROT\QUARANT.INE\FPROT.HST

The F-PROT.HST file is a history of files that have been disinfected, quarantined or deleted. In the example shown, if you look at the first number on the line where the file is located you will notice the number 0. There could also be a 1 or a 2. The purpose of these numbers is to indicate the action on infection that caused the file to be recorded.

0 means the file was quarantined.

1 means the file was deleted.

2 means the file was disinfected.

The next group of numbers are the hexadecimal name of the file. This is followed by the file extension. If possible the original extension is used. If there are two or more files that were saved at the same time, then the extension will become 000, 001 and so on.

The path and original name of the file is then recorded on the line. This enables you to locate files when you only have the hexadecimal number.


The QUARANT.INE directory

If a virus is detected, the infected file is moved to the quarantine sub-directory. The default path is:

SYS:SYSTEM\F-PROT\QUARANT.INE

Each volume has its own quarantine directory. If the quarantine sub-directory is under a different volume it will be :

VOL:F-PROT\QUARANT.INE

Note: The F-PROT\QUARANT.INE portion of the directory structure which is the default, cannot be altered. In the event that CSAV cannot quarantine the file, it will rename the file and report the infection.

Use this option with caution. Once a file has been quarantined, the name of that file is changed to a hexadecimal number. We do this to allow files with the same name to be stored, without the risk of a file overwriting another file.

To obtain the file after it has been quarantined you need to first view the FPROT.HST file. This will enable you to correctly identify a file by looking at the path of that file, and associating it with the hexadecimal number shown in the QUARANT.INE directory.


Notification

From the notification screen a tabbed dialog box displays which allows you to select and configure the areas that have to do with virus notification.  Choices include Alert Track Initialization, Log File Maintenance, and Reports. This area also provides the ability to set the parameters for the size of the log file.

See Also

Alert Track Initialization

Log File Maintenance

Report Options


Server to alert

Select the server to notify (from a list of servers that are running AlertTrack software) when an infection is found.


Available receipients
Available recipients

A list of previously created recipients who can receive messages sent from the selected AlertTrack server.


Recipients to alert

A list of recipients you want messages broadcast to from the selected AlertTrack server.


Alert All

Places the names of all the recipients of the selected AlertTrack server to the list of recipients to alert. The text  All Recipients replaces any names that are in the list of recipients to alert.


Add ( Alert Track Initialization )

This button adds the highlighted recipient name, from the list of available recipients, to the list of recipients to alert.


Remove ( Alert Track Initialization )

If you highlight a recipient name, clicking this button will remove that name from the list of recipients to alert and place it back into the list of available recipients.


Alert Track Initialization

Command AntiVirus for NetWare uses e.g. Software's AlertTrack to broadcast messages to virus response teams.

Note:  The AlertTrack NLM must be loaded ( LOAD ALERTTRK ) for this to function.  Please consult the AlertTrack manual for details.

From the Setup menu, select Notification or select [image] from the toolbar.  This will open the Notification  dialog box. Select the Alert Track Initialization tab :

Network broadcasts, Numeric Pager, AlphaNumeric Pager, MHS electronic mail, Pegasus Mail, SNMP traps, and Fax Ware are among the broadcast devices that can be called. The number of recipients is unlimited and all messages are indexed and logged for future reference.

Note:	Command AntiVirus will automatically return a code that Alert Track can capture/broadcast.  If a virus

is encountered, alerts can be forwarded indicating time, NetWare user name and network

address.

To send an alert to recipients of a specific server:

1.  Select a Server to Alert.  Once selected a list of recipients for that server will display.

2.  Select from the list of available of recipients.

3.  Click the  Add or the Alert All button to add the selected recipient(s) to the Recipients to alert list.

4.  Select one of the following to complete the process:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Log File Maintenance

The log file contains scan information for each scan completed which has been directed to the Command AntiVirus log file.  The Log File Maintenance dialog box allows the size of the log file, and how frequently it is checked and adjusted, to be modified. If the Log File is not checked it may exceed the size allotted.  When it is adjusted, it will be reduced size ( "shrunk") on a FIFO (first in, first out) basis.

From the Setup menu, select Notification or select [image] from the toolbar.

This will open a dialog box that allows you to click on the Log File Maintenance tab

To adjust log file size:

1.  Enter the low water size of the log file (between 64KB and 1MB).

2.  Enter the high water size of the log file (between 100KB and 10MB).

3.  Enter the time span for adjusting the log file sizes. Choose between 1-24 hours or 1-7 days.

4.  Do one of the following to complete the process:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

b.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Low Water

The low water level is the setting which will determine the smallest size this file may become.  The default setting sets the minimum value at 100K and there is an allowed range of 64KB to 1MB.


High Water

The high water level is the maximum size you want the Log File to become.  The default setting for the maximum is 1M with a range of 100KB to 10MB allowed.


Adjust log file

The adjustment to the log file is set in terms of time span with a default adjustment every 4 hours.  This may range from every hour up to 7 days.  The major limitation is the available space your system has.


Report Options

The "Reports" area lets you define where you would like reports of Infected files, Scan summaries, and Scan progress to be sent.  They may then be viewed at the file server console.  By default they will be sent to the Command AntiVirus screen, but you may also send them to the log or not have them at all.

Reports


Reports

The "Reports" area lets you define where you would like reports of Infected files, Scan summaries, and Scan progress to be sent.  They may then be viewed at the file server console.  By default reports will be sent to the Command AntiVirus screen, but you may also send them to the log or not have them at all.

Additionally, the "Reports" area lets you select one server as your "Master Log Server" which acts as a central report station to collect scan information.

From the Setup menu, select Notification or select [image] from the toolbar.

To select where reports are to be sent:

1.  Select where you want to send reports on infected files by clicking on the associated check box so there is an "X" in it.

2.  Select where you want to send reports on scan summaries by clicking on the associated check box so there is an "X" in it.

3.  Select where you want to send reports on scan progress by clicking on the associated check box so there is an "X" in it.

4.  Do one of the following to complete the process:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Infected Files

Reports of infected files will, by default, be sent to the Command AntiVirus screen and the Command AntiVirus log file.  They may also be sent to AlertTrack.  You may use this screen to turn the listed areas off or on.


Scan Summaries

Allows scan summary reports to go to the Command AntiVirus screen and the Command AntiVirus log file. You may select either, both , or none.


Scan Progress

Allows scan progress reports to go to the Command AntiVirus screen and the Command AntiVirus log file. You may select either, both, or none.


Infected Files ( Global Defaults )

Reports of infected files are by default, sent to the Command AntiVirus screen and the Command AntiVirus log file.  They may also be sent to Alert Track.

The Action taken on infected files will, by default, be sent to the Command AntiVirus Screen and the Command AntiVirus logfile.


Scan Summaries ( Global Defaults )

Allows reports of scan summaries, for manual and scheduled scans, to go to the system console, the system log file, the Command AntiVirus screen and the Command AntiVirus logfile.  You may select all, some or none.  By default these reports go to the Command AntiVirus screen and the Command AntiVirus logfile.


Master Log Server ( Global Defaults )

The Master log server allows you to select a server to act as a central information area to gather reports, of Infection and Action taken, from all servers.  There is a drop down list box available to use for your selection.  It is not necessary to have a master log server, but it is a great convenience for a large network.


Scan Progress ( Global Defaults )

Allows reports of all scans to go to the Command AntiVirus screen and/or the Command AntiVirus logfile.   You may select either, both or none.  By default, they go to the Command AntiVirus screen.  From this area, you may direct the different scan reports individually.


Changing the Password

Command AntiVirus for NetWare Administration allows you to change the server password.

From the Setup menu, select Change Password. A dialog box opens to allow you to change the password of the primary server. Passwords are case sensitive. The default password included with CSAV is "password" (all lower case).

To change the password of the primary server:

1.  Type in the old password.

2.  Type in the new password.

3.  Type in the new password again to confirm your new password.

4.  Select OK.


Old Password

The current password of the server.


New Password

The new password you want to assign to the server.


Confirm Password

The new password you want to assign to the server.  It is requested a second time to ensure the entry is correct.


Global Defaults

When you choose this menu item a dialog box with four tab choices opens.  Changing a Global setting allows the change to flow down to each type of scan throughout the program, as long as the Inherit Defaults check box is on in the individual scan.

From the Advanced menu, select Global Defaults.  A dialog box displays which allows you to set global default settings for Settings, Schedule, Include List, and Exclude List.

To define global default settings:

1.  Select the Settings Page and set desired settings.

2.  Select the Schedule Page and set desired settings.

3.  Select the Include List Page and set the desired settings.

4.  Select the Exclude Page and set the desired settings.

5. Do one of the following to complete the process:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply and the changes will be saved permanently and all servers in the Domain will be updated immediately.

A help button has been supplied if you need help on any item in the dialog box.


Settings ( Global )

This option allows you to choose the action on infection, SKIP options, the quarantine path, and whether or not sub-directories will be included in scans.  From this screen you can reset all global values to their original state before any modifications were made or to the active values which are the current settings.

You can also select Remove all macros if a variant is found.

See also:

Global Defaults


Quarantine Path

Path of the directory where infected files are moved if the Action on infection is set to Quarantine.  The default quarantine path is:

SYS:SYSTEM\F-PROT\QUARANT.INE


Default Values

If you select this button all the settings, for this page, are returned to their original state before any modifications were made. Select either Apply or Close to save the settings.


Active Values

If you select this button, your current settings will be displayed.


Schedule ( Global )

You may choose the general parameters to apply to all of the scheduled scans you create. The Inherit Defaults checkbox, located in the Settings dialog box,  must be selected for these changes to be passed to the individual scans.

From the Advanced menu, select Global Defaults.

To define the global default for scheduled scans:

1.	Select the Schedule page. Choose a schedule option .

a. If Schedule by frequency

1.	Click on the drop down list to select how often the scan should occur. You can choose Daily, Weekly, Monthly, or Quarterly.

2.	Select day or days desired.

3.	Select Start time. You do not necessarily need to enter a  Stop time.

4.	Select a Time option. You can choose Finish, Wait, or Quit.

5.	Select Notify if you wish notification to be enabled when desired time option is reached.

b. If Schedule by period

1.	Choose the period of time to pass before a scan occurs. You can select  Hours, Days, Weeks, or Months. By default the period is always one but you can enter a different numeric value.

2.	Select day or days desired.

3.	Select Start time. You do not necessarily need to enter a  Stop time

4.	Select a Time option. You can choose Finish, Wait, or Quit.

5.	Select Notify if you wish notification to be enabled when desired Time Option is reached.

2. Do one of the following to complete the process:

a.	Choose Close to store the changes in memory so you can deploy all changes at once.

b.	Choose Cancel to cancel this operation.

c.	Choose Apply  and the changes will be saved permanently and all servers in the Domain will be updated immediately.

See also:

Global Defaults


Unloading CSAV Administration

This selection allows you to unload Command AntiVirus for NetWare NLM.

From the Advanced menu, select Unload NLM.  This will open an add/remove dialog box.  You may then select the server(s) from which to unload Command AntiVirus.

To unload Command AntiVirus NLM:

1.  Choose the server(s) you want to unload Command AntiVirus.

2.  Select Add.

3.  Do one of the following to complete the process:

a.  Choose Cancel to abort this operation.

b.  Choose OK to accept these changes.

A help button has been supplied if you need help on any item in the dialog box.


Add ( Unload NLM )

Adds the selected server to the list of "Selected Servers". Command AntiVirus for NetWare will be unloaded from all servers on this list.


Remove ( Unload NLM )

Removes the selected server from the list of "Selected Servers" to the list of "Available CSAV Servers".


Servers to Unload

This is a list of the servers that have been selected to unload F-PROT.NLM.


Reinitializing to Defaults

If you select this, every change you have made will revert to the original "ready-to-go" settings.  This includes all scans, report options, schedules, and include and exclude lists.  In essence, the program will be the way it was when first installed.  This is a very useful and powerful option, but care must be taken that you do not use it by mistake.

From the Advanced menu, select Reinitialize to Defaults.  This will open a dialog box where you can choose the servers to reinitialize.

To reinitialize a server or servers:

1.  Select the server(s) to reinitialize from Available CSAV Servers.

2.  Select Add. The server name should now be in the Selected Servers list box.

3.  Do one of the following to complete the process:

a.  Choose Cancel to abort this operation.

b.  Choose OK to accept these changes.

A help button has been supplied if you need help on any item in the dialog box.


Add ( Reinitialize Servers )

Adds an available server to the Selected Servers list box. Servers in this list will be reinitialized.


Remove ( Reinitialize Servers )

Removes the selected server from the Selected Servers list box, to the list of Available

CSAV servers.


Servers to Reinitialize

This list of servers will be reinitialized.


Synchronize CSAV Servers

Synchronizing servers allows all servers in the domain to be synchronized with the Primary Server.  In other words, the Primary Server becomes a model and the INI file ( which contains all the scan and report settings ) on all the servers in the domain becomes the same.

Normally the servers are synchronized.  This feature is particularly helpful if you add a new server, or if you have hardware problems with a server and you want to make sure it is properly synchronized.

The only exceptions are Scheduled Scans.  If a scheduled scan on another server has the same name as the one on the Primary server, then it will be updated.  If there is a unique scheduled scan name on a receiving server it will remain as is.  Any named scans unique to the Primary Server will be added.

From the Advanced menu, select Synchronize CSAV Servers.  This will open a dialog box where you can choose the server(s) to synchronize.

To synchronize a server or servers:

1.  Choose the server(s) to synchronize with the Primary Server from Available CSAV Servers.

2.  Select Add. The server name should now be in the Selected Servers list box.

3.  Do one of the following to complete the process:

a.  Choose Cancel to abort this operation.

b.  Choose OK to accept these changes.

A help button has been supplied if you need help on any item in the dialog box.


Add ( Synchronize Servers )

Adds an available server to the Selected Servers list box. Servers in this list will be synchronized.


Remove ( Synchronize Servers )

Removes the selected server from the list of Selected Servers to the list of Available CSAV Servers.


Servers to Sychronize
Servers to Synchronize

This list of servers will be synchronized with the settings of the Primary Server.


Enable Connection

For security measures, Command AntiVirus can disable infected workstations if the Disable connection option has been selected.   Once the workstation has been disabled, it can no longer attach or do anything using the networks resources.  You can enable a connection from within CSAVADMIN by choosing Enable Connection from the Advanced menu.

To enable a connection:

1.  Choose the server you wish to connect to from the drop down list box.

2.  Enter a connection number.

3.  Do one of the following to complete the process:

a.  Choose Cancel to abort this operation.

b.  Choose OK to accept these changes.

A help button has been supplied if you need help on any item in the dialog box.


Quebec, Canada

Dolphin Developments

2690 Pitfield Blvd., Suite 100

St. Laurent, Quebec H4S1G9

Canada

Phone:	( 514 ) 333-7240

Fax:	( 514 ) 333-7165

E-mail:  sbddm@montrealnet.ca


United Kingdom

Command Software Systems, Inc. - U.K.

Ground Floor

Millbank Tower

Millbank

London, England SW1P 4QP

Phone:	+44-171-931-9301

Fax:	+44-171-931-9302

BBS:	+44-171-931-9303

E-mail:  COMMAND@COMMAND.CO.UK


Florida, United States

Command Software Systems, Inc.

1061 E. Indiantown Road, Suite 500

Jupiter, Florida 33477

Phone:	( 561 ) 575-3200	9:00 a.m. to 5:00 p.m. EST/EDT.

Fax:	( 561 ) 575-3026

BBS:	( 561 ) 575-1281

CIS:	75300,3645	( Type GO FPROT )

FTP:    FTP.COMMANDCOM.COM

E-mail:  SUPPORT@COMMANDCOM.COM

Web site:  http://www.commandcom.com


Australia

Computer Virus Clinic

P.O. Box 5127, Prestons, NSW 2170

176 Hoxton Park Rd.

South Liverpool

Australia N.S.W.  Australia 2171

Phone:	+61-2-606-9394

Fax:	+61-2-606-9704

E-mail:  cvc@geko.com.au

Web site: www.geko.net.au/~cvc


Columbia
Colombia

Solosoft Ltda.

Carrera 7

No. 72 - 64,  Oficina 2 - 22

Bogata, Colombia

Phone:	+57-1-217-7849

+57-1-345-3064

Fax:	+57-1-235-5347

E-mail:  solosoft@impsat.net.co


Germany

Percomp Verlag GMBH

Viren Service Hamburg

HolzmuhlenstraBe 84 D-22041

Hamburg, Germany

Phone:	+49-40-693-2033

Fax:	+49-40-695-9991

E-mail:  PERCOMP@INFOHH.RMI.DE


Argentina

Zampatti Maidi & Asociados

Juan Carlos Zampatti Maida

Larrea 1011 Piso 8 (1117)

Buenos Aries, Argentina

Phone:	+54-1-825-1602

Fax:	+54-1-825-7692

E-mail:  zampatti@zma.com.ar

JOTAFI

Roque Perez 3694

Primer Piso, Loft "E"

(1430) Buenos Aires, Argentina

Phone:	+54-1-544-2500

Fax:	+54-1-545-6782

E-mail: jotafi@interprov.com


Ontario, Canada

Dolphin Developments

904 South Sheridan Way, Suite 101

Oakville, Ontario

Canada  L6J-7L7

Phone:	( 905 ) 829-4344

Fax:	( 905 ) 829-4380

Toll free:( 800 ) 668-7434

E-mail:  jreid@dolfin.com


Brazil

Maple Informatica Ltda.

Rua Maranhao 554-20 andar

01240-000

Sao Paulo - SP, Brazil

Phone:	+55-11-826-5311

Fax:	+55-11-826-5375

E-mail:  maple@mandic.com.br


CHILE

SONDA

Teatinos 574

Santiago, Chile

(562) 696-2277

FAX (562) 671-4666

E-mail: v_melo@sonda.cl

EBOSA

General Del Canto 292

Santiago, Chile

(562) 362-0210

FAX: (562) 362-0212

E-mail: ebosa@entelchile.net


COSTA RICA

SASSO y SOTO

400 Mts. Northe de La Fuente de la Hispanidad

San Pedro de Montes de Oca

Apto. 2050

San Jose, Costa Rica

Phone: 011-506-234-0000

Fax: 011-506-253-9797

E-mail:ariana@sasso.co.cr


HOLLAND/NETHERLANDS

ANUBIS PC SECURITY

Piusplein 62- 41/42

Tilburg

5038 WP, Netherlands

Phone: +31 (0) 13 543 0055

FAX +31 (0) 13 543 9649

E-Mail: anubis.pcs@inter.nl.net

CBE CONTROL BREAK EUROPE

Portengen 27

Kockengen

3628 EB

Netherlands

Phone: +31 (0) 346 24 2412

FAX: +31 (0) 346 24 2472

E-mail: paul.grootaers@controlbreak.nl

WWW: www.controlbreak.nlMALTA


MALTA

DIX COMPUTERS

1, Triq N. Tomasucci

B'kara

BKR 06

Malta

Phone: +356 44 6371

Fax: +356 49 6279

E-mail: sales@dixcomp.com


SOUTH AFRICA

SOURCERY TECHNOLOGY, LTD. (SOURCE TECH)

27 Maree Street

Bramley Park, Johannesburg

P.O. Box 1044, Saxonwold 2132, South Africa

Phone: +27 (11) 885 3211

Fax: +27 (11) 786 6448

E-mail: fappunn@eafrica.co.za

WWW: www.dixcomp.com


Mexico

ITASA (Ingenieria y Tecnologia Avanzada),

Vanegas #212

Mitras Centro Monterey

NL, Mexico 64460

Phone:	+52-8-347-6840

+52-8-347-6817

Fax:	+52-8-346-9865

E-mail:  fprotmex@intercable.net

ITASA (Ingenieria y Tecnologia Avanzada),

Luz Savignon 2002

Colonia Navarte

Del B. Juarez

Mexico City, D.F. 03020

Phone:	+52-5-669-2812

+52-5-669-2798

Fax:	+52-5-682-0697

E-mail:  fprotmex@netmex.com


Bolovia
Bolivia

Dima Ltda.

Sanchez Lima # 2626

LA PAZ, 	Bolivia

Phone:	+591-2-37-5150

Fax:	+591-2-39-1346

E-mail: dimalpz@unbol.bo


New Zealand

Applied Insight, Ltd.

P.O. Box 68-607, Newton

Auckland, New Zealand

Level 7 Lumley House

7 City House

Aukland Central, New Zealand

Phone:	+64-9-376-4850

Fax:	+64-9-376-4874

E-mail:  fpsales@applied-insight.co.nz


Cayman Islands

Megatron LTD

1 Paddington Place, Suite 5

Georgetown, Grand Cayman, BWI

Phone:	809-949-8263

Fax:	809-949-9578

E-mail:  MEGATRON@CANDW.KY


Puerto Rico

UNISYS - Puerto Rico

268 Muñoz Rivera Avenue

Hato Rey, Puerto Rico, 00918

P.O.Box 363308

San Juan, Puerto Rico, 00936

Phone:  787-758-2266

Fax:	787-767-6110

E-mail:	isaacramirez@unn.unisys.com

Transdata Corporation

Metro Office Park

Building #18

Suite 401

Guaynabo, Puerto Rico  00968

Phone: 787-273-7070

Fax:     787-793-4885

E-mail:  kstein@transdatapr.com


Tortola, British Virgin Islands

Island Care Electronics

Road Reef Marina

P.O. Box 136

Roadtown, Tortola

British Virgin Islands

Phone:	809-494-3998

Fax:	809-495-4049

E-mail:  DICKW@CARIBSURF.COM


Ecuador

Asesoria y Sistemas

Avenida Francisco Bolona #103

y Avenida Kennedy

Guayaquil, Ecuador

Phone:  593-4-296-165

Fax:     593-4-296-163

E-mail:  jsanchez@gu.pro.ec

Soleincol Cia. Ltda

Luis Vernaza #205 y Esmeraldas

Guayaquil, Ecuador

Phone:  593-4-292-743

Fax:      593-4-296-107

E-mail:  soleinco@gye.satnet.net


Dominican Republic

Sistemas y Tecnolgia, S.A.

Pedro Fco. Bono Esq. Juan Pablo Duarte

Edificio Franco Penzo 3er. Piso

Apartado Postal 1007

Santiago, Republica Dominicana

Phone: 809-580-1583

Fax:     809-971-4651

E-mail: sistec.prk@codetel.net.do


Paraguay

Sistematica SRL

Mcal. Estigarribia 1319

Asuncion, Paraguay

P.O. Box 593

Phone:  595-21-208-106

Fax:      595-21-214-151

E-mail: sistemat@infonet.com.py


Peru

UMG Asociados S.R.L. LTDA.

Jose Gonzales 543 Miraflores

Lima 18, Peru

Phone:  511-241-7057

Fax:      511-447-5588

E-mail: umg@amauta.rcp.net.pe


Phillipines

Apexs Inc. - Applied Expert Systems & Software

3rd Floor Dumaguete City Development Building

Pusok, Lapu-Lapu City

6015 Phillipines

Phone: 63-32-340-2774

Fax:     63-32-340-1979

E-mail: apexsinc@mozcom.com


BBS Access

The Command Software Systems bulletin board system (BBS) allows users to upload and download files. A modem and communication software must first be properly installed to perform this task. A user ID and password are required for access. Most of the standard files are compressed with PKZIP for faster download. Please contact your customer service representative for further information.

To access our BBS call:  561-575-1281


FTP Access

A user ID and password are required for the Command Software Systems Internet site. This provides access to the latest versions of our software without the expense of a long-distance call. Please contact your customer service representative for information.

   ftp.commandcom.com


Web Site

http://www.commandcom.com

You will find a wealth of fascinating information on our Web Site. We provide information on viruses, products, events, employment opportunities and much more. Be sure to visit this exciting extension of Command Software Systems' services.

Registered users of Command AntiVirus can obtain product updates from our web site.


Begin Scan ( Toolbar )

When you select this button, a scan starts based on the settings of the manual scan.


Apply Changes ( Toolbar )

This button applies or permanently saves the changes that are made to the scan settings when Close is selected rather than Apply.  This is the preferred way to implement changes.


Deploy Command AntiVirus For Netware ( Toolbar )

This button allows you to send updates for the NLM to all selected servers.


Deploy Selected Files ( Toolbar )

This button allows you to choose a file and then copy that file to a selected server. This is similar to using NCOPY.


View Log File (Toolbar )

This button allows you to view the selected log file.


Close Log File (Toolbar )

This button allows you to close the log file currently loaded in the view.


Notification ( Toolbar )

This button opens the Alert Track Initialization dialog box. You may then select the servers and the recipients you wish to alert if a virus is detected.  You may also configure the Reports and Log File Maintenance dialog boxes by selecting their tabs.


Manual Scans ( Toolbar )

 This button opens a dialog box where you may define the parameters of a Manual Scan.


Scheduled Scans ( Toolbar )

This button opens a dialog box where you may name and define the parameters of Scheduled Scans.


Globals( Toolbar )

This button opens the dialog box which allows you to configure the Global Defaults for Settings, Schedule, Include List and Exclude List.

See also:

Global Defaults


About ( Toolbar )

This button displays program information, the version of Command AntiVirus for NetWare and copyright date.


Help Pointer ( Toolbar )

When you click this button a large question mark will attach to the mouse pointer.  You can then move this context sensitive help pointer to an area of the screen you would like explained.


Primary Server Button

Use this button to select a new Primary Server. To see a list of  available servers, click on the Primary button. From the list of servers you can select a new Primary Server. The current Primary Server is displayed to the right of this button.

The purpose of a Primary Server is to provide a source from which the settings for other servers, within the Domain, are determined. The selected server is then used for deployment and is responsible for deploying changes made.


Edit Domain List Button

This button opens a dialog box which allows you to move (add/remove) available servers to and from the domain list.


Domain List ( Main Screen )

This control lists all of the servers and information about the servers in the domain list.


Real-time Statistics Area ( Main Screen )

The Real-time Statistics area provides valuable information on the status of your network.


Settings ( Manual )

This option allows you to choose the action on infection, Skip options, volume/path to scan, whether or not to inherit defaults and whether or not sub-directories will be included in a scan.


Include List

The Include List is comprised of those servers, trees, and file extensions you want included in a scan.  It is possible to add or delete volumes, files and directories on the scan list.  Sub-directories are scanned by default.

The default file extensions scanned by Command AntiVirus for NetWare include: .SYS, .PGM, .OV?, .FON, .EXE, .DRV, .DO?, XL? and .COM. Files to be scanned may be specified by WildCard extensions and/or WildCard File Names.  You can add additional files or delete files from this list, but only files that are in the list are scanned.

Managing the Include List


Exclude List

The exclude list allows you to exclude filenames, directories or volume names from a scan.  When you specify an exclusion, directories and sub directories below are also excluded.  To access this screen, click on the tab for Exclude List from your scan selection.

The default Exclude list does not display in the dialog box.  This list is as follows and cannot be overridden:

SYS:BACKOUT.TTS

SYS:SYSTEM/{Bindery}

ANY Quarantine directory

Managing the Exclude List


Action to take upon Infection

This list of actions to take if an infection is found include Quarantine, Delete, Rename, Disinfect, and Report.  The Report option is not available in Real-time scans.


Quarantine

If a virus is detected, the infected file is moved to the quarantine sub-directory.  The default

path is :

SYS:SYSTEM\F-PROT\QUARANT.INE

If the quarantine sub-directory is under a different volume use the syntax below:

VOL:F-PROT\QUARANTINE

Note:  The F-PROT\QUARANTINE portion of the directory structure, which is the default, cannot be altered.


Delete

This removes the infected file from the server.


Rename

This changes the first letter of the infected file's extension to a "V"; unless it already starts with one, then CSAV uses an exclamation point "!".  For example:

.EXE becomes .VXE

.COM becomes .VOM

.VLM becomes .!LM


Disinfect

This removes the virus from the infected file.  This process will not interrupt the user.  In the event Command AntiVirus cannot disinfect the file, it will move it to the quarantine directory and report the infection.


Report

Generates a report to the group or users selected in AlertTrack, if you are running AlertTrack (recommended).  A report is also sent to the Command AntiVirus screen and the Command AntiVirus log file This option is not available in Real-time Scans.


Skip Options

The skip options control whether or not compressed and migrated files are scanned and permit you to skip previously scanned files. It is recommended that the administrator perform an initial scan of compressed and migrated files, and thereafter only if they are accessed and written to.  Since both types pose little threat to the server, skipping them results in less scanning time.

You can select any combination of the check boxes or clear them all.


Unavailable Skip options

Skip options do not apply to real-time scans and therefore are not available. If any of the compressed or migrated files are accessed (opened or written to) they are checked the same way as other files.


Skip Compressed Files

If this is selected, compressed files are not scanned.


Skip Migrated Files

If this is selected, migrated files are not scanned.


Skip previously scanned

If this option is selected, unmodified files that have already been scanned by CSAV are not scanned again.

Each time VSEngine.NLM is loaded the scan history information is reset. Thus a previously scanned file is scanned again. This is for two reasons. First, there is a possibility that while the engine was unloaded the file became infected. Second, if the engine has been updated to check for new viruses, all files should be scanned again.


Remove all macros

If Remove all macros if variant is found is selected and a new or modified variant of a macro virus is detected, all macros are removed from the file. This option is available only when the Action to take is Disinfect. If this option is not selected and the Action to take is Disinfect, files are renamed if they contain remnants or are variants of macro viruses.


Volume /path to Scan

You may type in the volume and path to scan.


Include Sub-directories

If you select this box, the scan checks all sub directories below the volume/path you have chosen.


Inherit Defaults

This check box normally should be selected (have an "x" in it).  Simply move your mouse pointer to this location and click to toggle it off and on.

Inherit Defaults allows you to take advantage of Command AntiVirus for NetWare's ability to accept changes made through the Global Default Settings. If it is on, then the individual scan settings can be changed in Global Defaults.  If it is off, then the values entered in the Global Default Settings will not alter the scan. You will have to change each of them individually.


Begin Scan button

When you select this button a scan, based on the selections you have entered in Manual scans, starts.


Cancel button

If you select this button, you are returned to the previous dialog box.  All changes are lost.


Apply button

When you select this button, changes are saved permanently and the server is updated immediately.


Help button

This button opens a help screen.


Scan On Opens

Scans whenever a file is opened.  This occurs whenever a file is either read or executed.  For optimum performance the default is to leave this off.


Scan On Closes

Scans whenever a file, which has been written to, is closed.


Disable connection

If this box is selected and a virus is found, the offending workstation is disabled.  This demands attention, and can be an important security measure.  Once the workstation is disabled, it cannot attach or do

anything using the networks resources.

After the workstation has been disinfected, you need to re-enable the workstation.  To enable the connection choose Advanced then Enable Connection from the menu bar.


Close button

When you are satisfied with your selections choose Close.  This is the preferred way to make changes if you are going to be changing a number of areas.  Your changes will be put in memory so that you can deploy all of them at one time.  This prevents unnecessary usage of your servers' system resources.


OK button

Accepts the newly made changes.


Manual Scan

A manual scan is executed on demand.


Real-time Scan

A real-time scan is the scan which occurs automatically throughout the workday when a program attempts to load as well as during copies and closes.  By default files are scanned they are closed.


Settings ( Real-time )

This option allows you to choose the action on infection, Skip options, Scan on options, whether or not to inherit defaults, and whether or not to disable workstation connections.


Scheduled Scan

A scheduled scan is a scan that is configured to run at a certain time of the day, week, or month.


Add button

Allows you to add a new item to the list box.


Edit button

Allows you to modify the selected item.


Delete button

Allows you to remove the selected item.


Scan List

Display a list of scheduled scans.


Settings ( Scheduled )

This option allows you to choose the action on infection, HSM options, volume/path to scan, whether or not to inherit defaults, and whether or not sub-directories will be included.


Schedule

Allows you to set up a timetable for scans.


Low Water size

Low water size refers to the smallest size the log file may become.  The range is 64KB to 1MB.

The default is 100K.


High Water size

High water size is the largest size the log file may become.  The range is 100KB to 10MB. The default is 1MB.


Scan On

This is a unique option for Real-time scans which allows you to configure when and even if, files are scanned.  If you remove the check from the box for both Scan on 'Opens' and Scan on 'Closes' , then real-time scans are disabled.


Manual Scans

  This button opens a dialog box where you may view or edit the parameters of the manual scans section of the initialization file.

See Also

Defining Manual Scans


Real-time Scans

Views or edits the real-time scan section of the initialization file.

See Also

Defining Realtime Scans


Scheduled Scans

This button opens a dialog box where you can name, define or view the parameters of the scheduled scans section of the initialization file.

See Also

Defining Scheduled Scans


Apply Changes

This button applies or permanently saves the changes made to scan settings when Close rather than Apply is chosen in any of the settings dialog boxes.  This is the preferred way to implement changes.

See Also

Applying Changes to the Server


Command AntiVirus for NetWare

This button allows you to send updates for the NLM to all selected servers. It deploys Command AntiVirus for NetWare to selected servers.

See Also

Deploying Command AntiVirus for Netware


Deploy selected files

This button allows you to choose a file and then copy that file to a selected server. This is similar to using NCOPY.

See Also

Deploying selected files


View Log File

 This button allows you the view the contents of the log file for the selected server.

See Also

Viewing the Log File


View Settings

 This button closes the log file and returns you to the settings view.


Notification

This button opens the Alert Track Initialization dialog box where you may select the servers and the recipients you wish to alert if a virus is detected.  You may also configure the Reports and Log File Maintenance dialog boxes by selecting their tabs.

See Also

Alert Track Initialization

Log File Maintenance

Reports


Change Password

Changes the password of the currently attached server.

See Also

Changing the Password


Domain

Maintains the list of servers to administer.

See Also

Editing the domain list


Global Defaults

This button opens the dialog box that allows you to configure the Global Defaults for Settings, Schedule, Include List and Exclude List.

See Also

Settings ( Global )

Schedule ( Global )

Managing Includes

Managing Excludes


Unload Command AntiVirus for NetWare

Unloads F-PROT.NLM from the selected server(s).

See Also

Unloading CSAV Administration


Reinitialize to Defaults

Restores all settings to their original default or hard-coded values.  Use with caution.

See Also

Reinitializing to Defaults


Synchronizing CSAV Servers

Copies all settings from the primary server to the destination server or servers.

See Also

Synchronize CSAV Servers


Index

A list of help topics.


Using Help

Displays instructions about how to use the Help files.


About

This button displays program information, the version of Command AntiVirus for NetWare and the copyright date.


Title Bar

Displays the name of the active application and document along the top of a window.

To move a window or dialog box, drag the title bar.


Status Bar

Shows information and messages at the bottom of the CSAV Administration Window that help you use CSAV Administration.

NUM	Num Lock is active.

CAP	Caps Lock is active.

SCRL	Scroll Lock is active.

Status bar messages:

Action	Message

You select a command.	Word describes the command.

You point to a toolbar button.	Word describes the button.

Idle.	Word suggests Pressing F1 for Help.


Move command (Control menus)
Restore command ( Control menus )

Returns the active window to its original size and position. Once you restore a window to its original size, you can fill the entire screen with a window or reduce the window to an icon. See Minimize command or Maximize command.

_____________

See also

Move command (Control menus)

Size command (Control menus)

Minimize command (Control menus)

Maximize command (Control menus)

Close command (Control menus)


Move command (Control menus)

Moves the active window or dialog box. When you choose Move, the insertion point becomes a four-headed arrow. You can then use the arrow keys to move the window. When the window is in the location you want, press ENTER.

This command is unavailable if you maximize the window.

_____________

See also

Restore command (Control menus)

Size command (Control menus)

Minimize command (Control menus)

Maximize command (Control menus)

Close command (Control menus)


Size command (Control menus)

Changes the size of the active window. When you choose Size and the insertion point becomes a four-headed arrow, you can use the arrow keys to select the border you want to move. When the border is in the position you want, press ENTER

This command is unavailable if you maximize the window.

_____________

See also

Restore command (Control menus)

Move command (Control menus)

Minimize command (Control menus)

Maximize command (Control menus)

Close command (Control menus)


Minimize command (Control menus)

Reduces the CSAV Administration window to an icon.  You can also reduce the CSAV Administration window to an icon by clicking the Minimize button in the upper-right corner of the application window .

__________

See also

Restore command (Control menus)

Move command (Control menus)

Size command (Control menus)

Maximize command (Control menus)

Close command (Control menus)


Maximize command (Control menus)

Enlarges the active window to fill the available space.  The CSAV Administration application window expands to fill the entire screen.  You can also maximize the active window by clicking the Maximize button in the upper-right corner of the window.

__________

See also

Restore command (Control menus)

Move command (Control menus)

Size command (Control menus)

Minimize command (Control menus)

Close command (Control menus)


Close command (Control menus)

Closes the active document or application or an open dialog box.

_____________

See also

Restore command (Control menus)

Move command (Control menus)

Size command (Control menus)

Minimize command (Control menus)

Maximize command (Control menus)


Active Window

The window in which you are working.  The active window contains the insertion point or a selection of text or graphic.  The title bar in the active window is highlighted.


How to Select a Primary Server

This dialog box allows you to select a primary server if you have never set one, or select a new one if  your original primary server connection has been lost.

To select a primary server:

  1.  Select a server name from the list box.

2.  Select OK.

The Display all servers option reveals a list of all CSAV servers.  It is possible to select a new primary server that is not in your domain by choosing Display all servers.

Display only domain servers is the default setting. When this is selected only those servers that are currently designated as part of your domain will display.


Console Operation (load-time options)

As an alternative to using Command AntiVirus for NetWare Administration, the administrator can control Command AntiVirus for NetWare (CSAV) from a server console or RCONSOLE.

Load time Options

Option	Description/Example
SYS: workDir	Specifies working directory other than the default SYS:SYSTEM\F-PROT.   LOAD SYS:F-PROT
-BROADCAST	This stops CSAV from broadcasting error messages on file open failures.   LOAD F-PROT -B
-DAILY SCAN	When CSAV is first loaded or if the INI file has been deleted a scan called "Daily" is created and begins. This option prevents the daily scan from being created and starting. (DO NOT TYPE SPACES).   LOAD F-PROT -DAILY
UTILIZATION=	The utilization setting may be a number from 20-100.  By default it is set to 40.  This means that if server utilization goes above 40%, CSAV will be restricted and run slowly.  If 100 is used then CSAV will not be restricted and will run regardless of system utilization. The settings apply to manual, scheduled, and real-time (on close) scans. Real-time opens are not restricted.   LOAD F-PROT U=50
BUFFERS=	Buffers are dynamically allocated as needed.  They each take 53K and determine the number of scans that can be performed simultaneously.  The load option specifies either the maximum number of buffers allowed or a range.  The range is 2 to 200.  The default maximum is 20.  If you do not specify a minimum it will be one fourth (.25) of the maximum.  The minimum number is buffers reserved for real-time scans on open.   LOAD F-PROT B=20 OR LOAD F-PROT B= 10,40
-PURGE	By default CSAV purges deleted files, and the SALVAGE utility cannot recover them. Using -PURGE prevents permanent removal.    LOAD F-PROT -PURGE
-SAVE INFECTED FILES	This setting keeps CSAV from saving an infected file before deleting or disinfecting.   LOAD F-PROT -SAVE
QUIET	This turns off the status screen.   (This may also be used as a command).   LOAD F-PROT Q
-VERIFY LOG FILE	When CSAV is started the log file is verified and all non-printable characters are replaced with printable characters. If this setting is used, CSAV will not verify the log file.   LOAD F-PROT -VERIFY


Note: If there are not enough buffers, then the real-time scan will be delayed until they are available. This will affect file server performance. To determine if this is occurring, type:

F-PROT realtime statistics

This will display the date, time and number of scans that were delayed since the specified date.


Console Operations (manual scan options)

Note: The letters in ( ) parentheses indicate optional text entries. For instance, you can type SC, SCA or SCAN for the scan option, but you never include the actual ( ) symbol.

The Real-time commands will temporarily allow changes to various options. If you unload Command AntiVirus the settings will revert to their previous state. To save the changes permanently use the Windows program Command AntiVirus for NetWare Administration or enter the items directly to the .INI file.

Syntax/Example(s)	Description
SC(an)   F-PROT SC	This scans the entire server.
SC(an) (path)   F-PROT SC SYS:LOGIN	This scans a particular path. (F-PROT scans the LOGIN directory)
SC(an) (path) ((-)S(ubdirectories))   F-PROT SC SYS:LOGIN -S	This scans a particular path with or without subdirectories as above, but the - prevents scanning of subdirectories.
SC(an)(path) Q(uarantine)   F-PROT SC SYS:LOGIN Q   F-PROT SC * Q	When a virus is detected, the infected file is moved to the quarantine subdirectory. By default the quarantine subdirectory is SYS:SYSTEM\F-PROT\QUARANT.INE * Scans the entire server and if a virus is found it is moved to the quarantine directory.
SC(an) (path) DE(lete)   F-PROT SC SYS:LOGIN DE   F-PROT SC SYS * DE	When a virus is detected, the infected file is deleted.  *Scans the entire server and deletes infected files.
SC(an) (path) REN(ame)   F-PROT SC SYS:LOGIN REN   F-PROT SC * REN	If the file extension begins with a "V" then it is replaced with an exclamation point (!).  Any other letter will be replaced with a "V".  For example:   .VXD becomes .!XD   .EXE becomes .VXE   .COM becomes .VOM * Scans the entire server and renames all infected file
SC(an) (path) DI(sinfect)   F-PROT SC SYS:LOGIN DI   F-PROT SC * DI	This will remove the virus from the infected file. *Scans the entire server and removes the virus from the infected file.
SC(an) (path) REP(ort)   F-PROT SC SYS:LOGIN REP   F-PROT SC * REP	No action is taken when an infected file is found.  This provides a report  only. *Scans the entire server and provide a report if an infection is found.


Console Operations (real-time options)

Note: The letters in ( ) parentheses indicate optional text entries. For instance, you can type SC, SCA or SCAN for the scan option, but you never include the actual ( ) symbol.

The Real-time commands will temporarily allow changes to various options. If you unload Command AntiVirus the settings will revert to their previous state. To save the changes permanently use the Windows program Command AntiVirus for NetWare Administration or enter the items directly to the .INI file.

COMMAND ANTIVIRUS COMMANDS

Syntax/Example(s)	Description
REA(ltime) A(ction)=Q(uarantine)   F-PROT REA A=Q	Temporarily controls the action taken when a virus is detected by a real-time scan.  The infected file is moved to the quarantine subdirectory.
REA(ltime) A(ction)=DE(lete)   F-PROT REA A=DE	Temporarily controls the action taken when a virus is detected by a real-time scan.  The infected file is deleted.
REA(ltime) A(ction)=REN(ame)   F-PROT REA A=REN	Temporarily controls the action taken when a virus is detected by a real-time scan.  This renames the infected file.  If the extension begins with the letter "V" then it is replaced with an exclamation point (!).  Any other letter is replaced with a "V". .VXD becomes .!XD .EXE becomes .VXE .COM becomes .VOM
REA(ltime) A(ction)=DI(sinfect)   F-PROT REA A=DI	Temporarily controls the action taken when a virus is detected by a real-time scan.  This will remove the virus from the infected file.
REA(ltime) O(pen)=S(ecure) | N(one)   F-PROT REA O=S   F-PROT REA O=N	Temporarily controls if a file is scanned or not, by a real-time scan, when opened.  The file will be scanned if the secure option is specified and it has not been scanned since the scan engine was last loaded.
REA(ltime) CL(osed)=S(ecure) | N(one)   F-PROT REA CL=S   F-PROT REA CL=N	Temporarily controls if a file is scanned or not, by a real-time scan, when closed.  This includes any file that is written to the server.  This is used to detect if a file was infected while it was open.
CLO(se) S(can) D(elay) = MM:SS   F-PROT Clo S D = 23:21	Adjusts the delay time between a file closing and being scanned.  The default is 5 min.  May be set between 2 sec. And 60 min.
REA(ltime) S(tatistics)   F-PROT REA S REA(ltime) S(tatistics) R(eset)   F-PROT REA S R	Displays the current status of real-time scanner. Values shown are prior to reset. You can reset the status screen with the [R]eset option.
A(bort) A(ll) S(cans)   F-PROT A A S	Cancels all scans currently running.
A(bort) M(anual) S(cans)   F-PROT A Man S	If a manual scan is running it will be canceled.  This will not affect scheduled scans.
A(bort) S(cheduled) S(can) {scheduled name}   F-PROT Abort S S Daily	Allows you to cancel a specific scheduled scan. The name of the scan must be included.
LI(st) SC(ans)   F-PROT L Sc	Displays a list of active and idle scans.
LI(st) SE(ttings) G(lobal)   F-PROT L Se G	Displays the current global settings.
LI(st) SE(ttings) M(-anual)   F-PROT List Se M	Displays the current settings for Manual scans.
LI(st) SE(ttings) R(ealTime)   F-PROT L Settings R	Displays the current settings for Real-time scans.
LI(st) SE(ttings) S(cheduled) {scan name}   F-PROT L Se S Monthly	Displays the current settings for specific scheduled scans. The name of the scan must be included.
LO(ad)   F-PROT Lo	Displays the Command AntiVirus Load options.
UT(ilization) C(urrent)   F-PROT UT C	Displays the utilization setting presently in use. (Always include the "C" or the help screen will show.)
UT(ilization) = {new setting}   F-PROT Ut = 20	Enables you to change the current utilization setting.  The range is 20 to 100, with a default of 40. Using 100 will prevent Command AntiVirus from being restricted.
REA(ltime) CO(nfig)   F-PROT REA CO	Displays the configuration of the real-time scanner.  For example:   F-PROT:  [DATE]  [TIME]      Real-time Options:   Action:                    Quarantine   Open Scan Type     Secure   Close Scan Type     Secure
REI(initialize)   F-PROT REI	This will reload the .ini file into memory.  Do this if modifying the .ini file with a text editor.
E(nable) C(onnection) n   F-PROT E C 3	This is used to enable a workstation after a virus has been detected, if "Disable Connection" has been used in CSAV Administration.
SH(rinkLogFile)   F-PROT SH	This reduces the log file to the LowWater mark (as defined in CSAV Administration) by deleting the oldest references.  This operation occurs automatically and periodically as specified by CSAV Administration.
Deinstall   F-PROT DEINSTALL	Removes Command AntiVirus for NetWare files and directories from the server.  DO NOT ATTEMPT BEFORE READING THE SECTION ON "DEINSTALL" IN THIS CHAPTER.
Q(uiet)   F-PROT Q = [Y/N]	Prevents or enables display of status screen  updates.


Command AntiVirus  Formerly F-PROT Professional

Command Software Systems is updating its antivirus product line - inside and out.  The first and most visible change is our new name:  Command AntiVirus.  This change better reflects what our product does and what you, our users, have grown to call it.

Command AntiVirus still offers the superior virus detection and disinfection provided by the F-PROT Professional engine.  And, our "Service that Never Sleeps"  is always available to help you through those difficult times when a virus occurs.

In the coming months, you will also notice:  new packaging and advertising, new web site look, product feature enhancements including more management functions and easier updating, and a redesigned and standardized interface across all platforms.

In the near future, we will also introduce new products.  As a result, our tradition of providing superb computer antivirus protection will expand to provide protection for Lotus Notes and Microsoft Exchange.  As you can see by the changes we are making to our product line, Command Software Systems continues its commitment to providing you with the best available virus protection!  Visit our web site at http://www.commandcom.com for more information.