NAHLPz ViruShell Help Index General key usage DeskTop SCAN CLEAN Misc About ViruShell How to register General Key usage F1 - Access the on-line help. Cursor keys - Move cursor to select. PgUp,PgDn - Move up/down while in scrollwindow Enter - Accept entered data or selections. Esc - Abandon entered data or selections. Space - Toggles topics in listing. Key usage in the Help window F1 - Goto help index F2 - Back to last topic read (Backs up to 10 levels) Cursor keys - Move highlighted topic Enter - Goto highlighted topic Esc - Quit Help. Go to Help index How to Register This program is distributed as ShareWare, meaning that you can test this program for a period of 30 days without any obligations. If you like this program and want to use it after the trial period you have to register. Registration is handled by Virus Help Centre HB, Sandviken, Sweden. Use the registration form distributed with this program, the file is named VIRUSHEL.REG and contains further instructions on registration. Thanks for supporting the ShareWare concept! Go to Help index SCAN - The program SCAN (also known as VIRUSCAN) is a virus detection and identification program for the IBM PC and compatibles, manufactured by McAfee Associates, U.S.A. SCAN searches your computer for known viruses in memory, boot sector, partition table and selected files on your diskettes and hard disks. SCAN detects known viruses by comparing your files to specific signatures strings stored in the SCAN executable file. SCAN can optionally protect your system against new, unknown viruses by appending validation codes to .COM and .EXE files and later check these values against any changes, warning you of any changes taken place. Go to Help index 'CLEAN' - The program CLEAN (also known as CLEAN-UP) is a virus disinfection program for the IBM PC and compatibles, manufactured by McAfee Associates, U.S.A. CLEAN searches through the boot sector, partition table, or files of your computer and removes a specified virus. Normally CLEAN is able to repair the infected area of your computer and restore it to the preinfected status. However, some specific viruses is working by physically overwriting the file infected, thus making it impossible to restore the file. In this case SCAN asks you if it is OK to overwrite and delete the file. You are advised to do this to stop further infections from the virus. Go to Help index McAfee Associates SCAN and CLEAN are manufactured by McAfee Associates and is distributed as ShareWare software. As such you are required to register the program after the initial trial period. Contact either McAfee Associates or one of their authorized agents to register. McAfee Associates (408) 988-3832 office 4423 Cheeney Street (408) 970-9727 fax Santa Clara, CA 95054 (408) 988-4004 BBS 2400 bps U.S.A (408) 988-5138 BBS HST 9600 (408) 988-5190 BBS v32 9600 CompuServe GO VIRUSFORUM InterNet mcafee@netcom.com Go to Help index NewAge Productions All suggestions and bugreports for ViruShell should be sent to Jonny Bergdahl, NewAge Productions. I can be reached on any of the following addresses: Phone : +46-36-121345 Fax : +46-26-275720 (VHC) BBS : +46-36-121323 (8n1, TTY/ANSI) Mail : NewAge Productions Lillgatan 34 B S-554 51 J Sweden InterNet : vhcna@abacus.hgs.se FidoNet : 2:204/503 VirNet : 9:463/101 Go to Help index Virus Help Centre Registration of ViruShell is handled by Virus Help Centre. VHC can be reached on any of the following addresses: Phone : +46-26-100518 Fax : +46-26-275720 BBS : +46-26-275710 (8n1, TTY/ANSI) Mail : Virus Help Centre Box 7018 S-811 07 Sandviken Sweden InterNet : vhc@abacus.hgs.se FidoNet : 2:205/204 VirNet : 9:461/101 Videotex : 26262626-1 Go to Help index Desktop The Desktop menu option lets you save and load different setup files, display program information, shell to a secondary Command shell and to quit the program. Save Setup Load Setup Shell to DOS Quit ViruShell Select menu option to display detailed help. Go to Help index Save Setup This option lets you save different setups under different names, for later loading. The setup saved includes all settings of the program including On/Off flags, paths and drive selections. Use this to create some useful setups to use on different occasions, for instance you can setup a complete scan for use once a week, and a setup for scanning only memory and the DOS directory for a fast scan every day. Different setup files can be loaded by the Load Setup command found in the DeskTop menu. Go to Help index Load Setup This option lets you load different setups previously saved with the Save setup in the DeskTop menu. The saved setup includes all settings of the program including On/Off flags, paths and drive selections. You can use this to create some useful setups to use on different occasions, for instance you can setup a complete scan for use once a week, and a setup for scanning only memory and the DOS directory for a fast scan every day. Go to Help index Shell to DOS This option lets you temporarily shell out to DOS without actually leaving the program. To return to the program, just type EXIT at the DOS-prompt. Note that available memory is somewhat limited because the program is still in memory, thus it might be problems to execute some memory hungry programs while shelled out. Note: Do not load any TSR-programs while shelled to DOS, this makes it impossible to return to the program without rebooting the computer. The prompt reminds you of the fact that you are running in a secondary command shell. Go to Help index Quit ViruShell Use this option when you want to quit ViruShell. Your current setup will automatically be saved, so the next time you run ViruShell, the different options will be retained. Thanks for using ViruShell. Go to Help index Enter File Name Enter a valid filename (leaving out the extension) for the setup file. A valid filename should be between 1 and 8 valid characters. Press Enter when you are through entering the file name. The file will be saved, and you will be returned to the DeskTop menu. To load the setups saved with this option, select the Load Setup option in the DeskTop menu. Go to Help index Load Setup Select a setup file in this window by using the up and down cursor keys and press Enter to load the selected file. The setup files is previously saved from the Desktop menu, by selecting the Save Setup option. Go to Help index About ViruShell This window shows you some information about this program. To exit the window, just press Enter. More about ViruShell Go to Help index Scan Menu The Scan menu options lets you setup all options for Scan and NetScan, as well as to start the scanning. Scan NetScan AV functions > Set Options > pUtput options > Overlay extensions > Scan path/drives > Select menu option to display detailed help. Go to Help index Scan Select this option to execute the SCAN program with the flags and other options selected in the Set options, Overlay extensions and Scan Path/Drives options of the Scan menu. Set the Autorun Clean option to ON prior to selecting this option to automatically run Clean to disinfect any infected files found. Scan is run in a window showing the progress of the program. Press Ctrl-C to stop the execution of Scan. Go to Help index NetScan Select this option the execute the NETSCAN program with the flags and other options selected in the Set options, Overlay extensions and Scan Path/Drives options of the Scan menu. Set the Autorun Clean option to ON prior to selecting this option to automatically run CLEAN to disinfect any infected files found. NETSCAN is run in a window showing the progress of the program. Press Ctrl-C to stop the execution of NETSCAN. Go to Help index AV Functions In order to maximize protection against new, unknown virus it is possible to insert checksums in executable files. These checksums can later be checked by setting the Check validation codes option in the Scan menu to ON. To insert the checksums in your programs, just setup the path as if you should scan the disk, and then select the Add AV to files under this option. Note that all files will have their size increased by 10 bytes to hold the checksums. To remove the checksums, use the Remove AV from files option under this option. Go to Help index Set Options Select this option to reveal a menu that lets you setup all flags that change the behaviour of SCAN. Go to Help index Output Options Select this option to reveal a menu that lets you setup behaviour regarding the output of SCAN. Go to Help index Set Scan overlay extensions By default SCAN will only scan executable programs when run. However, certain programs uses overlay files to store additional program code in. To scan those files for viruses, set the flag Scan overlay files to On in the Set options menu. The overlays scanned is determined by this option, here you can enter up to three overlay extensions. Normally these are called .OVL, .OVR or similar extension names. Go to Help index Scan Path/Drives This option leads you to a menu that lets you select whether you wish to scan only one specific path or scan one or more disks in full. Go to Help index Clean Menu The Clean menu options lets you setup all options for CLEAN as well as running CLEAN. Run Clean Set Options > Overlay extensions > Scan path/drives > Select menu option to display detailed help. Go to Help index Clean Select this option the execute the CLEAN program with the flags and other options selected in the Set options, Overlay extensions and Clean Path/Drives options of the Clean menu. Note that Clean is automatically run after SCAN if any infected files is found and if you have also set the Autorun Clean option in the Scan menu to ON prior to running Scan. Clean is run in a window showing the progress of the program. Press Ctrl-C to stop the execution of Scan. Go to Help index Set Options Select this option to reveal a menu that lets you setup all flags that change the behaviour of CLEAN. Go to Help index Output Options Select this option to reveal a menu that lets you setup behaviour regarding the output of CLEAN. Go to Help index Set overlay extensions By default CLEAN will only clean executable files when run. However, certain programs uses overlay files to store additional program code in. To clean those files for viruses, set the flag Clean overlay files to On in the Set options menu. The overlays scanned is determined by this option, here you can enter up to three overlay extensions. Normally these are called .OVL, .OVR or similar extension names. Go to Help index Clean Path/Drives This option leads you to a menu that lets you select whether you wish to clean only one specific path or clean one or more disks in full. Go to Help index Misc Menu The Misc menu options lets you access assorted functions from the ViruShel program. Display Virus info Last Scan results Last Clean results Run VSumX About ViruShell Select menu option to display detailed help. Go to Help index Display virus info This option lets you read the VIRLIST.TXT textfile that is being distributed with the McAfee line of programs. This file lists most of the virus that SCAN and CLEAN are able to detect, as well as generic information of how they infect computers. Use the arrow cursor keys to scroll the text up and down in the display window, press ESC to stop viewing the file. Go to Help index Last Scan results Every time you execute SCAN from ViruShell, the result is stored in a file on disk. This options let you view that file after the scan. Every time you run SCAN, this file is overwritten with fresh information. Go to Help index Last Clean Results Every time you execute CLEAN from ViruShell, the result is stored in a file on disk. This options let you view that file after the scan. Every time you run CLEAN, this file is overwritten with fresh information. Go to Help index Run VSumX This option lets you start the hypertext format "Virus Information Summary List" manufactured by Patricia Hoffman and distributed as Shareware. This program contains lots of useful information on almost all known viruses, and is highly recommended for anyone that wishes to obtain more knowledge on virus related topics. Go to Help index About ViruShell ViruShell is a program used to simplify the usage of the McAfee products Scan, NetScan and Clean, as well as function as a general frontend for other virus- related programs. ViruShell is (C) 1991, Jonny Bergdahl, NewAge Productions, J ping, Sweden, and Virus Help Centre, Sandviken, Sweden All rights reserved Go to Help index Display virus info This option lets you read the VIRLIST.TXT textfile that is being distributed with the McAfee line of programs. This file lists most of the virus that SCAN and CLEAN are able to detect, as well as generic information of how they infect computers. Use the arrow cursor keys to scroll the text up and down in the display window, press ESC to stop viewing the file. Go to Help index Last Scan results Every time you execute SCAN from ViruShell, the result is stored in a file on disk. This options let you view that file after the scan. Every time you run SCAN, this file is overwritten with fresh information. Go to Help index Last Clean Results Every time you execute CLEAN from ViruShell, the result is stored in a file on disk. This options let you view that file after the scan. Every time you run CLEAN, this file is overwritten with fresh information. Go to Help index Scan - Scan all files If you set this option to ON, Scan will check all files including data files on the referenced drive for viruses. Use this option when: A file-infecting virus has been detected on your system. Checking new disks prior to installing the programs contained. Use of this switch will increase the scanning time. Go to Help index Scan - Memory scan type Select if and how memory should be scanned by Scan. Selections : None : Skip memory check. Should only be used in 100% virus free environments. Normal : The normal DOS-memory is scanned for viruses. Himem : DOS, UMB and HMA is scanned for viruses. Memory types: Normal DOS memory (DOS) : (0-640 Kilobytes) Upper Memory Blocks (UMB) : (640-1024 kilobytes) High Memory Area (HMA) : (1024-1088 kilobytes) Go to Help index Scan - Check validation codes If you set this option to ON, Scan will check the files for previously inserted validation codes. If the validation codes don't match, Scan will report that the files has been modified and that a viral infection might have occurred. Certain programs writes their setup to the executable program file, thus making Scan report a false virus infection. Using this option adds 25% to the scanning time. Go to Help index Scan - Scan overlays When Scan is scanning program files for viruses, it looks for the normal program extensions, .EXE, .COM end .SYS. Some programs also store executable code in overlay files. If you set this option to ON, Scan will search files with other extensions. To add the names of the extension change them in the submenu Scan - Overlay names. Up to three different extensions can be added. Go to Help index Scan - Delete infected files This option tells Scan to prompt the user to overwrite and delete infected files when found. After deleting the file cannot be recovered. This option should only be used if Clean is not available, since Clean usually is able to safely remove the virus and recover the infected file. Boot sector and partition table infectors cannot be removed by this option, use Clean. Go to Help index Scan - Scan memory for all viruses This option tells Scan to search memory for all known viruses that can be memory resident. In normal use, Scan only checks memory for certain viruses that otherwise would infect all files during the scan, or otherwise causes damage during the Scan. Go to Help index Scan - Scan inside LZEXE files This option tells Scan to look inside files compressed with the LZEXE file compression program. If this option is off, Scan will still check these files for external infections. The only way a virus can be contained inside a LZEXE is if the program file was infected prior to packing with the LZEXE file compression program. Go to Help index Scan - Scan inside PKLite files This option tells Scan to look inside files compressed with the PKLite file compression program. If this option is off, Scan will still check these files for external infections. The only way a virus can be contained inside a PKLite compressed file is if the program file was infected prior to packing with the PKLite compression program. Go to Help index Scan subdirectories This options allows Scan to scan subdirectories under the specified path. Example: Drive C: contains the following directory structure: C:\ PGM If the path to scan is set to TEXT C:\PGM, all executables in CALC C:\PGM\, C:\PGM\TEXT\, and DATA C:\PGM\CALC\ will scanned. Go to Help index Scan - Autorun Clean This option determines whether Clean automatically should be run after Scan when a virus has been found. By setting this option to ON you are saved from manually setting the options of Clean to clean the infected files as found by Scan. If you set this option to OFF, you run the risk of miss an option, effectively making the cleaning of the system incomplete, and leaving some files infected. Go to Help index Use external scanfile This option is used to search for viruses from an external textfile containing user-defined search strings. This file should be called VIRUSHEL.DAT and be placed in the current directory. This option is intended for use as an emergency exit, this file can for example be distributed by your dealer to take care of a fast spreading virus until a new version of SCAN has been released. Note: If you create this file yourself, it is recommended that it is not used together with the 'Delete infected files' option of Scan. Go to Help index Scan DOS 4 boot sector This option should be used to scan hard disks partitioned under DOS 4.0 or above that has been damaged by a boot sector or partition table infecting virus. Hard disks infected this way gives the 'invalid media' error message when accessed, this means that you should only use this option if you get this message when you try to access the drive. Go to Help index Scan multiple floppies This option lets you scan multiple diskettes without restarting Scan for every diskette. To utilize this option, set it to ON, and then select 'Scan one path only' to OFF, and select the diskdrive under 'Drives to scan'. Make sure that only one drive is selected in this list. Go to Help index McAfee Language This option lets select in what language SCAN and NETSCAN will output it's text. You toggle the options by pressing Enter on this topic, the topic changes to reflect which language that is currently active. Currently McAfee supports English, French and Spanish. Go to Help index Skip filename display Normally when SCAN or NETSCAN is scanning your disk(s) for virus infections, it shows the name of the file that is currently scanned. This may prolong the actual scanning process to much if there are many files to scan. Turn this option ON to show the files as they are scanned, and turn it OFF to stop the files from being displayed as they are scanned. Go to Help index Beep when virus found With this option you can select if SCAN and NETSCAN should make a beep for every virus found while the actual scanning is in progress. ViruShell always gives a warning sound after the scanning is finished in case a virus was found. Turn this option OFF if you know that a lot of files on your system is infected and want to speed up the scanning, leave it ON in all other cases. Go to Help index Clean - Clean all files By turning this switch ON, Clean is forced to clean all files, including data and overlay files, in the selected path. Use this if an overlay-infecting virus is found by Scan. This option should be used as a safety instead of using the 'Scan overlays' option, since overlays might have an extension that don't match on of the three extension that can be used with that option. Go to Help index Clean - Clean overlays By turning this option on, Clean will try to clean overlay files as well as the normal program files. This option uses the extensions added in the Clean - Overlay extensions menu option. To add or remove an extension, use the 'Clean' - 'Overlay extensions' menu option. Up to three extensions can be used. To Clean more than three extension types, use the Clean all files option instead. Go to Help index Clean - Clean DOS 4.0 boot sectors Use this option for hard disks partitioned with DOS 4.0 or above, that has been damaged by a boot sector or partition table infecting virus. Use this option when the message 'Invalid media' is being displayed when trying to access the disk. This option will only clean the partition and boot sector, not the files on that drive. Go to Help index Clean - Clean Multiple diskettes Use this option if you want to clean multiple floppy disks from the same virus. This option saves you from running Clean multiple times. Go to Help index Clean - Virus ID This option lets you select the virus identification code (as provided by Scan) that is used by Clean to identify the virus to remove. Select the ID from a list of ID's as read from the Virlist.Txt textfile. For a comprehensive description of these viruses, check the Misc - Display Virlist.Txt option in the menu. Go to Help index Enter virus name This option lets you enter the tag name of the virus you wish to remove from your system. The tag name is reported by SCAN when a virus is found. The tag name should be entered without the brackets ('[' and ']') as reported. Optionally, if installed, you can select the tag from a list of tags by pressing the F3 key. Go to Help index Select Virus name This option lets you select the tag name of the virus you wish to remove from your system. The tag name is reported by SCAN when a virus is found. Move the highlighted topic in the list by using the cursor keys. Press Enter to select the highlighted virus tag. Go to Help index McAfee Language This option lets select in what language Clean will output it's text. You toggle the options by pressing Enter on this topic, the topic changes to reflect which language that is currently active. Currently McAfee supports English, French and Spanish. Go to Help index Add AV to files In order to maximize protection against new, unknown virus it is possible to insert checksums in executable files. These checksums can later be checked by setting the Check validation codes option in the Scan menu to ON. To insert the checksums in your programs, just setup the path as if you should scan the disk, and then select this option. Note that all files processed will have their size increased by 10 bytes to hold the checksums. To remove the checksums, use the Remove AV from files option in this menu. Go to Help index Remove AV to files In order to maximize protection against new, unknown virus it is possible to insert checksums in executable files. These checksums can later be checked by setting the Check validation codes option in the Scan menu to ON. To remove the checksums from your programs, just setup the path as if you should scan the disk, and then select this option. Note that all files processed will have their size decreased by 10 bytes after the removal of the checksums. To add the checksums, use the Add AV from files option in this menu. Go to Help index Search files without AV This option lets you scan your system for files that has not been protected by the AV checksum. Run this option and view the result in the View last Scan result option of the Misc menu. Go to Help index Scan one path only This option lets you select if you want to scan only one specific path or scan one or more disks in full. By setting this option to On, you will be able to enter a path in the Path to scan option in this menu, and by setting it to Off, you will be able to select the drives to scan from a list of drives from the Drives to scan menu option. Go to Help index Path To Scan This option lets you enter a specific path to scan. If you have set the Scan subdirectories option in the Set Options menu to On, any subdirectories of this path will be scanned as well. Go to Help index Drives to scan This option lets you select what drives to scan from a list of accessible drives. If you have set the Scan subdirectories option in the Set Options menu to On, any subdirectories on these paths will be scanned as well. Go to Help index Enter path to scan Enter the path that SCAN will scan when run. You can use the normal cursor keys to move the cursor while editing the path string. Press Enter to accept the entered string, or press Esc to abandon. Go to Help index Select drives to scan This option lets you select what drives to scan from a list of accessible drives. Move the highlight with the cursor keys, and toggle drives on and off with the space key. Active drives are denoted by the ' ' character. Press Enter to accept the selections, or press Esc to abandon the changes. Go to Help index Clean one path only This option lets you select if you want to clean only one specific path or clean one or more disks in full. By setting this option to On, you will be able to enter a path in the Path to scan option in this menu, and by setting it to Off, you will be able to select the drives to scan from a list of drives. Go to Help index Path To Clean This option lets you enter a specific path to clean. If you have set the Clean subdirectories option in the Set Options menu to On, any subdirectories of this path will be cleaned as well. Go to Help index Drives to Clean This option lets you select what drives to clean from a list of accessible drives. If you have set the Clean subdirectories option in the Set Options menu to On, any subdirectories on these paths will be scanned as well. Go to Help index Enter path to clean Enter the path that CLEAN will clean when run. You can use the normal cursor keys to move the cursor while editing the path string. Press Enter to accept the entered string, or press Esc to abandon. Go to Help index Select drives to Clean This option lets you select what drives to clean from a list of accessible drives. Move the highlight with the cursor keys, and toggle drives on and off with the space key. Active drives are denoted by the ' ' character. Press Enter to accept the selections, or press Esc to abandon the changes. Go to Help index A virus was found! On or more virusinfected files was found by SCAN while scanning your disks. Since you have not set the AutoClean option to ON, you will have to remove the virus manually by selecting the Clean option of the Clean menu. To setup CLEAN before execution, you will have to enter the virus tag name in the Clean set options menu. Check the View last Scan results in the Misc menu to find out what tag name(s) to use. Also make sure you have the same path and drives selected as in the Scan setup. You could also set 'AutoClean' to On and rerun Scan for an automatic cleaning. Go to Help index A virus was found! On or more virusinfected files was found by SCAN while scanning your disks. Since you have set the AutoClean option to ON, ViruShell will try to disinfect all infected files. Note that CLEAN is unable to clean files from certain viruses, you are then asked if you want to overwrite and delete the infected file. If you answer 'Y' on this query, the file will be totally unsavable so MAKE SURE that you have a backup of the file! Go to Help index