DP Tool Club 8

home *** CD-ROM | disk | FTP | other *** search

/ DP Tool Club 8 / CDASC08.ISO / VRAC / VTEC51AN.ZIP / VT51ADOC.TXT < prev next >

Wrap

Text File | 1993-09-07 | 79KB | 1,547 lines

THE VIRUS TERMINUS - v5.1AN Copyright 1990-1993 S.T.CALISE All Rights Reserved!! STC BBS: 908-206-1386 TABLE OF CONTENTS page Brief Program Overview ........................... 3 Hardware/Software Required ........................... 3 General Guidelines ........................... 3 Installation - General ........................... 4 Installation Procedure for Systems Already Infected ........................... 5 Typical Disinfection Sequence ........................... 7 360Kb Disk Install/Swapping ........................... 8 Make EMERGENCY WORK DISK ........................... 9 (n) Terminus Start-Up Options ........................... 10 (n) Self-Test Virus Check ........................... 10 (n) Start-Up Virus Check ........................... 10 Program Setup/Configuration ........................... 11 Default Parameters/Options ........................... 11 Add Additional SCAN Opts. ........................... 12 Add Additional CLEAN Opts. ........................... 12 DOS Session ........................... 12 Mouse Operation ........................... 12 SCAN/CLEAN Version Notes ........................... 12 SCAN/CLEAN Logical Drive Menu ........................... 13 SCAN/CLEAN DIRS/FILES Menu ........................... 13 IMMUNIZE/DETECT/RECOVER ........................... 15 REPORT FUNCTIONS Menu ........................... 16 (n) Activity Summary LOG ........................... 16 Individual Reports ........................... 16 VIRUS Info Sheets ........................... 16 VIRUS TERMINUS Option Switches........................... 17 SAVING VIRUS TERMINUS Options ........................... 18 (n) OPTIONS Lock ........................... 18 (n) OPTIONS Lock Password ........................... 18 Limit Operation To Floppies ........................... 19 SCREEN SAVER ........................... 19 Experimental Virus Data ........................... 20 WRITE PROTECTED Floppy Notes ........................... 20 Memory Requirements Etc. ........................... 20 (n) NETWORK GROUP SERVICE ........................... 21 (n) NETWORK Installation ........................... 21 (n) DOS Environment Var. STCVTEC ........................... 23 (n) DOS ERRORLEVEL on Exit ........................... 23 Operation From WINDOWS ........................... 23 Program ERROR Messages ........................... 24 Upgrades ........................... 26 Registration Information ........................... 26 Acknowledgements ........................... 27 CRC VALIDATION Values 5.1AN ........................... 27 Additions/Changes VTEC51AN ........................... 28 - PAGE 2 - ***** Programs included in THE VIRUS TERMINUS(c) Package: VT51A.EXE ; VTCF2B.EXE ; VTCF51.EXE ; VTCF5A.EXE ; PRINTDOC.BAT ; VT51ADOC.TXT; STC.ICO ; README51.TXT (8 files ONLY!) ***** You have a contiguous five(5) day period to evaluate THE VIRUS TERMINUS starting from the date you first receive it. Your PAID registration/ license is required for any use beyond this period. S.T.Calise hereby disclaims all warranties relating to this software, whether express or implied, including and without limitation to any implied warranties of merchantability or fitness for a particular purpose. The USER of this software shall bear all risk as to the quality and performance of the software. In no event shall S.T.Calise be liable to you for any consequential, special, incidental or indirect damages of any kind arising out of the performance or use of the software, even if S.T.Calise has been advised of the possibility of such damages. THE VIRUS TERMINUS(c) IS DISTRIBUTED 'AS IS' . ALL RIGHTS ARE RESERVED! NO PART OF THIS MANUAL AND/OR ACCOMPANYING DOCUMENTATION MAY BE REPRINTED, REPRODUCED OR OTHERWISE COPIED WITHOUT ADVANCED WRITTEN PERMISSION FROM S.T.CALISE ******************** PAID Registration gives license and right to use The Virus Terminus on a single machine for personal home use only. A PAID negotiated 2 year license is required for educational, business, corporation, government and/or agency environment use. Registration and/or License requirements are subject to change without notice. ******************** **** REFER TO PAGE #25 FOR REGISTRATION FORM - PERSONAL HOME USE ONLY! **** The Virus Terminus is not available for export, re-export or distribution in any manner or form to the following countries: North Korea, Vietnam, Cuba, Iran, Iraq or Lybia. ****************************************** Trademarks of other companies mentioned in this program,help file and/or accompanying documentation appear strictly for identification purposes only and are the property of their respective companies. Refer to pages 26,27 for trademark acknowledgements. * It is strongly suggested that you get experienced help in * * dealing with computer virus infection. * - PAGE 3 - THE VIRUS TERMINUS(c) is a SHELL Menu utility program for the McAfee Associates Anti-Virus programs VIRUSCAN, CLEAN, and VALIDATE. VIRUS TERMINUS is menu driven and may be used with a mouse or keyboard. The SCAN/CLEAN option switches are heads-up, visible and may be toggled through an easy to use interface. Reports are available in two different formats: individual or activity summary log. Virus Info Sheets allow the user to obtain information on virus infectors such as the known characteristics, areas of damage, the McAfee Associates disinfection program needed, etc. A quick program test is available and there are a variety of options including screen saver, options lock with password, etc. Virus Terminus v5.1 supports SCAN/CLEAN's advanced IMMUNIZATION and RECOVERY functions. These functions help to provide protection with recovery after detection from new or unknown virus infectors. ****** HARDWARE RECOMMENDATIONS ****** RAM MEMORY: 640K BYTES CONVENTIONAL MEMORY DISK DRIVE: HARD DRIVE + (1 or 2 FLOPPIES) ONE FLOPPY SHOULD BE 720K, 1.44M, or 1.2M VIDEO : (True MDA),(CGA C80) TEXT MODE/EMULATION REQ. or SVGA/VGA/EGA Downward Compatible to CGA C80 OPERATION : KEYBOARD or MS COMPATIBLE MOUSE OPTIONAL SOFTWARE REQUIREMENTS: MS-DOS V3.1 - 6.0 Version 9.18v107 - SCAN, CLEAN; VALIDATE.COM; VIRLIST.TXT from McAfee Associates (See Version notes & guidelines) The Virus Terminus is a DOS REAL MODE application. Read page #21 for Local Area Network installation & requirement notes. ***** SOME GENERAL OPERATION GUIDELINES: DO NOT run The Virus Terminus from the hard disk if your system is already infected. Read Page #4 for disinfection sequence. DO NOT use the Virus Terminus in any environment or on any machine where another virus disinfector utility is currently installed and running. This includes but is not limited to TSR virus utilities. No claim is made herein or otherwise as to compatibility with other author/program virus disinfector & detector utilities. * Although the Virus Terminus v5.1AN is generally LAN aware, no * * specific claim is made as to compatibility with any network system. * * Use of The Virus Terminus on local or networked drives is subject to * * System Administrator/Supervisor installation, testing and approval. * Users should make every effort to use only the most recent versions of SCAN, CLEAN and the Virus Terminus. Version 5.1AN of The Virus Terminus was updated for CLEAN/SCAN 9.18v107 Files contained in archive envelopes should be extracted using an appropriate archive extraction utility before processing. - PAGE 4 - ***** INSTALL THE VIRUS TERMINUS(c): (STAND-ALONE Operation) ( NON-Infected System Only! Stand Alone Operation ) ( Read Page #21 for Local Area Network Installation requirements) THE VIRUS TERMINUS(c) operates most efficiently when used in conjunction with a hard drive. You may also run this program from a floppy drive when your hard drive is infected.(720K, 1.2MEG, 1.44MEG disk size) Please read page #8 for information on 360Kb installation SCAN/CLEAN disk swapping. Read page #21 for information on NETWORK Installation requirements. McAfee Associates files : SCAN.EXE; CLEAN.EXE; VALIDATE.COM; VIRLIST.TXT VIRUS TERMINUS files : VT51A.EXE; VTCF2B.EXE; VTCF51.EXE; VTCF5A.EXE -------------------------------------------------------------- HARD DRIVE: 1. Create separate subdirectories - one each for SCAN,CLEAN, VALIDATE, VIRLIST.TXT, and THE VIRUS TERMINUS files. Use of a single subdir. for all files is possible (required for LAN or floppy installation!) 2. Copy McAfee Associates FILES and VIRUS TERMINUS files to their own subdirectories. * 3. Change the current drive and subdirectory to the location of The VIRUS TERMINUS and then run the file VT51A.EXE. Press <ENTER> after typing each of the following lines. C: cd\location vt51A.exe C: may be D: or whatever drive you installed The VIRUS TERMINUS program on. cd\location may be cd\utility\viruscan or any subdirectory where you placed the TERMINUS files. 4. Press F5 to configure when you reach the Main Menu. Select #8. and run a program(s) self-test. 5. Press F5-PROGRAM SETUP at the main menu. Then select F4-MAKE EMERGENCY WORK DISK ------------------------------------------------------------ FLOPPY : 1. Format blank disk.(720K, 1.2Meg, 1.44Meg) 2. Copy McAfee Associates and VIRUS TERMINUS files to the disk.(root directory) DO NOT copy the Virus Terminus files to a subdirectory on your floppy disk. Place ALL files in the ROOT directory. - PAGE 5 - * 3. Place this disk in DRIVE #A or DRIVE #B A: B: cd\ or cd\ vt51A.exe vt51A.exe Press F5 to configure at the Main Menu. Select #8. and run a program(s) self-test. The first time you run VT51A.EXE make sure you go no further than the MAIN MENU before you press F5 and make the needed additions or corrections to the DEFAULT TABLE. NOTE: Make sure the version of DOS on your floppy matches the installed version on the hard drive. If you boot from the work floppy you may need to have other files/programs run from an autoexec.bat file besides the Virus Terminus. Some systems may require unique partitioning software, drive compression files like dblspace.bin, etc. ********************************************************************* ** INSTALLATION FOR SYSTEMS ALREADY INFECTED (STAND-ALONE OPERATION) ** !! POWER DOWN your system first !! !! DO NOT -USE CTRL-ALT-DEL KEY RESET SEQUENCE !! !! DO NOT -PRESS THE RESET BUTTON !! 1. Turn your system on and BOOT from a KNOWN NON-INFECTED DOS disk.(Place the DOS system disk in drive #A - WRITE PROTECT) DO NOT MAKE THE MISTAKE OF LEAVING AN INFECTED FLOPPY IN THE BOOT DRIVE.(READ ABOVE!) 2. Format a blank disk using the DOS format command. Use the FORMAT.COM file found on your non-infected DOS disk. Avoid accessing or using any files and utilities found on your hard disk. Format the highest capacity floppy your system drives will allow. Current program version sizes allow 720K, 1.2MEG, 1.44MEG disk sizes. 3. Follow these guidelines for the drive specification that you are using: A. Copy SCAN.EXE, CLEAN.EXE, VALIDATE.COM, VIRLIST.TXT to the newly formatted disk. B. Copy VT51A.EXE, VTCF2B.EXE, and VTCF51.EXE to the newly formatted disk. DO NOT put these files in a subdirectory on your disk. Put ALL files in the ROOT. - PAGE 6 - C. Place this disk in DRIVE #A or #B and type each of the following lines pressing <ENTER> after each: A: cd\ VT51A.EXE or B: cd\ VT51A.EXE D. Press F5 as soon as you are in the main menu and configure VIRUS TERMINUS. E. NOW write protect the disk! F. Select #8 at the MAIN menu to run a Self-Test to make sure the installation did not infect your work disk AND/OR computer RAM memory. ***** NOTE: The Report and LOG options of SCAN and CLEAN may not work since you will have write protected the disk. All requests to SCAN/CLEAN single or job batch files will be directed to the ENTIRE SUBDIRECTORY.Terminus must make a temporary options file on your disk when you are in the SCAN/CLEAN DIRS/FILES submenu. This will be impossible if your floppy is write protected! Instead, when your disk is write protected, Terminus sends SCAN/CLEAN a set of command line options which include the name of the of the subdirectory you select. ( \*.* instead of individual file names.) ***** NOTE: Care should be taken to avoid the open/run access of any files on the hard disk until after the entire system has been checked and disinfected. You should not run any programs located on your hard drive until you are sure ALL files and the entire system has been disinfected! ********** SUGGESTION: If your system is not infected it would be wise to make ********** up a disk like one of those previously described so that if ever the need arises you will be prepared to meet any virus infection threat without delay and inconvenience. Further instructions on making an emergency work disk may be found on page #9 of this document. - PAGE 7 - ***** TYPICAL DISINFECTION SEQUENCE: * It is strongly suggested that you get experienced help in * * dealing with computer virus infection. * * The outlined procedure below is a suggested typical disinfection * * sequence. This procedure may vary depending on the extent and * * type of computer virus infection being dealt with. These * * instructions are not meant to replace those which are found in * * the documentation for SCAN and CLEAN. * DO NOT RUN THE VIRUS TERMINUS FROM A HARD DISK if your system is already infected. Use the following steps for best results: 1. Power Down your system. DO NOT reset your computer by pressing CTRL-ALT-DEL or the hardware reset button! 2. Boot from a KNOWN NON-INFECTED WRITE-PROTECTED DOS SYSTEM DISK. 3. Use the floppy installation procedure for systems already infected as outlined on page #6 . WRITE PROTECT YOUR DISK. Do a PROGRAM(s) SELF-TEST. 4. SCAN your hard disk to determine which and/or how many virus infections may be present. Make sure MEMORY SCAN is toggled ON. 5. CLEAN - Disinfect your hard disk. Use the virus ID code previously reported by SCAN and make sure MEMORY SCAN is ON. Do a SELF-TEST. --> If you are unable to access your hard disk after booting from a floppy, check to make sure that any special device drivers needed to use the hard disk are on the floppy and loaded from the CONFIG.SYS or AUTOEXEC.BAT file. AT THIS POINT IF YOU HAVE NOT DONE A BACKUP OF ANY CRITICAL FILES ON YOUR SYSTEM, THEN DO SO IMMEDIATELY. --> Check to make sure the version of DOS is the same or is compatible with the one on the hard disk. --> If more than one virus type was detected, then CLEAN-UP will have to be run for each type of virus. --> If you are disinfecting a file-infecting virus, such as the Jerusalem, it is recommended that you set option switch #A to ON (Expand SCAN/CLEAN file type search). This will help to ensure that the virus is removed from any overlay files that may not use the default overlay extensions recognized by SCAN/CLEAN. 6. Power down the system after CLEANing your hard disk. 7. Check your hard disk once again with SCAN to make sure you were successful in disinfecting the system. If not, repeat steps #1, 2, 4, 5, 6 and 7 all over again. 8. Now, check any floppies that may have been inserted into your drives to determine if they are infected. Clean as needed. 9. SCAN your Hard Disk once again to make sure you have not reinfected your system. Make sure CHECK MEMORY is toggled ON. Failure to disinfect floppies previously used in an infected system may lead to virus re-infection. - PAGE 8 - REFORMATTING INFECTED FLOPPIES --> DOS v5.x or v6.x Use the /U (unconditional) switch when reformatting infected floppy disks under DOS 5.x or 6.x DOS will then not preserve the original infected boot sector of the disk which may cause virus reinfection. ***** 360Kb Installation, DISK SWAPPING, ALTERNATE SOLUTIONS: Disk swapping is forced on when the startup option /D is detected. This mechanism allows the creation and use of two or three installation disks with appropriate prompts issued to the user indicating which disk to put in the drive during runtime. DISK #1 - vt51A.exe, VTCF2B.exe, vtcf51.exe, validate.com and virlist.txt DISK #2 - scan.exe and clean.exe The following program functions are disabled when disk swap is ON: 1. SELF-TEST including startup SELF-TEST (/T) 2. Startup LOCK (/L) which includes SELF-TEST before program entry. OPTIONS LOCK may also be activated while the program is running. 3. SCAN/CLEAN report generation and activity log. Disk swapping may be activated by adding the /D options at startup time: A> vt51A.exe D <Press ENTER> It is possible in a two floppy system to use both drives when the main objective is to scan or disinfect the hard disk. One disk/drive would be utilized for The Virus Terminus programs plus virlist.txt & validate.com, and the other for SCAN and/or CLEAN. The default table should be modified to indicate which drive will contain SCAN & CLEAN. There are other alternatives such as eliminating virlist.txt and placing both SCAN.EXE and CLEAN.EXE with the Virus Terminus files ALL on one 360Kb disk. The above installation tips are offered as suggestions ... users may elect different configurations as needed. Disk swapping is offered as a solution to limited disk space on those systems which employ a single 360Kb floppy drive and hard disk where the intention is to SCAN and/or CLEAN the hard disk. Despite the tendency of computer manufacturers to now market systems with higher capacity floppy drives, such systems may still exist in the work place today. - PAGE 9 - ***** MAKE EMERGENCY WORK DISK: (Stand Alone Installation Only!) This operation creates an emergency disk which may be used in the event your system becomes infected with a computer virus. The Virus Terminus files plus SCAN, CLEAN, VALIDATE, VIRLIST.TXT, and copies of your AUTOEXEC.BAT & CONFIG.SYS files will be transferred over to the Emergency Work Disk. This operation requires a pre-formatted Floppy Disk of size 720Kb, 1.2Mb, 1.44Mb,etc. Follow directions in your DOS manual for making a Floppy System Boot Disk if desired. ------------- --> 1. Do a virus scan of your computer system + memory to make sure it is free of virus infection at this time. --> 2. Press F5-PROGRAM SETUP while in the main menu. --> 3. Make sure ALL configuration table entries are defined and that the locations of SCAN, CLEAN, VALIDATE, and VIRLIST are correct. Then press F4-MAKE EMERGENCY WORK DISK. --> 4. Insert the pre-formatted floppy disk into drive A: or B: Press <S> to start the operation. WRITE-PROTECT THIS DISK WHEN THE OPERATION IS COMPLETED. --> 5. SCAN THE WORK DISK TO MAKE SURE IT IS NOT INFECTED WITH A VIRUS! Test the operation of this disk by returning to the DOS prompt and then resetting your machine with the emergency disk inserted into the boot drive. DO THIS IF YOU USED A FLOPPY SYSTEM BOOT DISK to make your work disk. Otherwise, you will need to switch over to the boot drive manually and type vt51A.exe <ENTER>. The following files will be either created or copied: A. vt51A.cfg (modified for operation on boot drive) B. autoexec.bat (a new version created for this operation) C. vt51A.exe, vtcf51.exe, vtcf2b.exe D. scan.exe, clean.exe, validate.com, virlist.txt E. c:\scanval.val if it exists(see note below) F. c:\autoexec.bat and c:\config.sys (renamed on floppy) You may need to copy additional files if you are using certain unique disk partitioning software, hard disk compression, etc. The newly created autoexec.bat on the floppy should be modified to include instructions to load these programs, etc. NOTE: SCANVAL.VAL is the hidden file which SCAN.EXE places in the C: root directory. It contains information about the hard disk partition, etc. This file exists only if you have previously used the /AG SCAN option. The Virus Terminus directly supports this method of IMMUNIZE/RECOVERY. The copy of SCANVAL.VAL on the recovery disk is a "safe" copy and should be copied over to your C: root only if you suspect that the original file has been tampered with or it has been accidently deleted. Users who utilize the /AF SCAN.EXE option for IMMUNIZE/RECOVERY will need to copy over to the recovery floppy a different file. Read the SCANV107 documentation for more information on making a recovery disk when using the /AF option. - PAGE 10 - ***** VIRUS TERMINUS START-UP OPTIONS: /M = Mono - Eliminates window background colors and makes certain textcolor adjustments. Use with green/amber CGA, gray VGA display, notebook models, etc. Mouse will work if present. DO NOT use with true IBM MDA(Monochrome). /T = Start-up SELF-TEST - Checks Terminus file set, SCAN COMMAND.COM, and RAM memory. /L = Limit Operation to SCAN FLoppies ONLY! - forces Terminus to proceed directly to the SCAN/CLEAN LOGICAL DRIVE menu, OPTIONS LOCK forced on, only floppy drives given as choice for SCAN or CLEAN, password required to continue if virus infection is found, password needed to exit the SCAN/CLEAN LOGICAL DRIVE submenu. Also forces startup self-test. Read Page #19 for more details. /D = Enable SCAN/CLEAN program disk swapping. /Q = Quiet mode - disable sound routines! Implement as follows: (or combinations thereof) A> vt51A.exe D (press ENTER) or A> vt51A.exe M (press ENTER) A> vt51A.exe T (press ENTER) or A> vt51A.exe L (press ENTER) A> vt51A.exe MTLQ (press ENTER) * Read page #23 for information on DOS Environment Variable STCVTEC * * to set startup options and Local Area Network installation tips. * ***** RUN-TIME and START-UP PROGRAMS(s) SELF-TEST: The Virus Terminus provides a quick and easy way to SELF-TEST for possible known virus infectors. The Main menu selection #8 and F7-SELF-TEST found in each submenu will scan memory and the Virus Terminus dir. and command.com(utilized for DOS session stand alone) Start-up Self-Test for known virus infections may be initiated as outlined in the START-UP OPTIONS section above. The self-test will be performed before program operation reaches the Main Menu. An orderly program HALT is available if a virus infection is found. NOTE: SCAN and CLEAN also perform their own self-test each time they are run. - PAGE 11 - ***** CONFIGURE THE VIRUS TERMINUS: (PROGRAM SETUP) (Read page #21 for information on Local Area Network operation and tips) THE VIRUS TERMINUS(c) may be configured from the main program menu or any sub-menu while the program is running. It is highly recommended that you configure your paths and parameters when running the program for the first time. DON'T RUN THE VIRUS TERMINUS FROM YOUR HARD DRIVE IF THE SYSTEM IS INFECTED. Use the floppy installation and disinfect your drive first - then install and run from your hard drive. Above all, FOLLOW THE DIRECTIONS THAT CAME WITH SCAN or CLEAN. ------------------------------------------------------------------- VIRUS TERMINUS PRGM DIR: drive/directory of VIRUS TERMINUS files SCAN.EXE PROGRAM DIR: drive/directory location of SCAN.EXE CLEAN.EXE PROGRAM DIR: drive/directory location of CLEAN.EXE VALIDATE.COM PRGM DIR: drive/directory location of VALIDATE.COM VIRLIST.TXT FILE DIR: drive/directory location of VIRLIST.TXT ------------------------------------------------------------------- SCAN/CLEAN REPORT TYPE: Select NONE, INDIVIDUAL, or SUMMARY LOG INDIVIDUAL REPORTS DIR: Directory where indv. reports are stored. ACTIVITY LOG DIRECTORY: volume\directory where RPT_VT.TXT lives. ------------------------------------------------------------------- EXP.VIRUS DAT.FILESPEC : Path and filename for the experimental data to be used with SCAN. Please read the DOCS that came with SCAN. ADVANCED USER FUNCTION! EXP. VIRUS DATA ON/OFF : Set this switch to 'ON' and the experimental virus data file will be used by SCAN. (/EXT) Read further for more info. on Exp. Data ------------------------------------------------------------------- DISABLE CTRL-BRK ON/OFF: Disable CTRL-BRK key combo during SCAN & CLEAN operations. (/NOBREAK) DISABLE MORE? ON/OFF: Disable SCAN/CLEAN MORE? prompt when screen is full. (/NOPAUSE) SCREEN SAVER ON/OFF: Enables screen saver. User given choice of 1 to 60 minute delay before Saver activates START-UP OPTION LOCK: Set this parameter to ON if you wish to lock options including access to the default table each time the program is run. This mechanism may be defeated during program operation by pressing F6-OPTIONS LOCK and entering the correct password. Read page #18 for a list of options which are locked for each menu. - PAGE 12 - ALL MENUS-LOCAL+NETWORK: ON --> Allow selection of LOCAL + NETWORK OFF --> Allow selection of LOCAL DRIVES ONLY (switch is ignored if no locals exist) ADD SCAN PRGM OPTIONS : Enter options not available with The Virus Terminus program. Clear by entering <SPACE> ADD CLEAN PRGM OPTIONS : Enter options not available with The Virus Terminus program. Clear by entering <SPACE> ------------------------------------------------------------------- * NOTE: The state of each switch may be changed after THE VIRUS TERMINUS is up and running. ***** ADDING NEW or EXTRA OPTION PARAMETERS: Modify the default table entries designated as ADD SCAN PRGM OPTIONS and ADD CLEAN PRGM OPTIONS. Refer to your SCAN.EXE and CLEAN.EXE documentation for a list of valid parameter options. ***** DOS SESSION:(HARD DISK INSTALLATION ONLY!) Pressing F3-DOS SESSION while in certain submenus will cause THE VIRUS TERMINUS to suspend operation and drop you off at the DOS command prompt. You may return back to THE VIRUS TERMINUS by using the DOS EXIT function. Type 'EXIT' at the DOS command prompt. DO NOT attempt to return to THE VIRUS TERMINUS by re-launching VT51A.EXE. This will create a second copy of The Virus Terminus in computer memory. DOS SESSION is disabled when running from a floppy or if the OPTIONS-LOCK is in the ON position. ***** MOUSE OPERATION: The two button Microsoft Mouse hardware specifications are supported by this program when used in conjunction with a color display/card that supports the CGA C80 standard. The program's video mode auto-detect logic disables mouse operation if a Monochrome Display Adapter is detected. Only keyboard entry is functional in MONOCHROME video mode(MDA standard). Most other Microsoft Mouse compatible mice should function properly. The program logic checks for a 'connected' mouse. You should not experience any trouble if your mouse is truly MS compatible, connected to the serial port or buss card, and the mouse driver software was installed prior to running this program. ***** SCAN/CLEAN Version Notes: The VIRUS TERMINUS(c) V5.1A was updated for SCAN/CLEAN 9.18v107 - PAGE 13 - ***************************************************************** NOTE: Use main menu selections #1 and #2 when directing SCAN/CLEAN to process using the signatures and characteristics of KNOWN VIRUS INFECTORS. Use main menu selection #3 to gain the additional advantage of protection and detection against NEW and/or UNKNOWN virus infectors. ***************************************************************** ***** SCAN/CLEAN LOGICAL DRIVE: (Main Menu #1) --> KNOWN VIRUS INFECTORS Use this main menu selection when you wish to scan ENTIRE floppy disks or a hard drive. Turn the /MANY switch on if you want to SCAN/CLEAN more than one floppy disk. * Archive files, those with the file extensions like ZIP, PAK, * * ARJ, ARC etc. should have the files within extracted using an * * appropriate extraction utility before processing. * * * * It is strongly suggested that you get experienced help in * * dealing with computer virus infection. * ***** SCAN/CLEAN DIRS/FILES: (Main Menu #2) --> KNOWN VIRUS INFECTORS Use this main menu selection when all you need to do is scan or clean an individual or batch of files. The /A ALL switch is forced on. You may choose file(s) from a paged directory display if your disk is not write protected. Each time you SCAN or CLEAN files you are given a choice of what subdirectory to pick files from. Archive files, those with the file extensions like ZIP, PAK, ARJ, ARC etc. should have the files within extracted using an appropriate extraction utility before processing. You must specify a VIRUS CLEAN CODE before you can 'CLEAN' a file or batch of files. An attempt to auto-detect the code will be made if you use SCAN first and provided the Virus ID is still present on the current screen page when SCAN has finished running. Only the first ID (looking down from the top of the screen) will be reported in the case of multiple infections. A manual entry mechanism is also available for entry of ID codes. Press #2. ENTER VIRUS CODE. The Virus ID is the character string specified between the [ ] brackets which SCAN outputs to the screen. - PAGE 14 - ***** IMMUNIZE/DETECT/RECOVER SUBMENU: (Main Menu #3) (* Advanced User Level! *) This program feature helps you protect your files/system against NEW or UNKNOWN VIRUS INFECTORS. SCAN/CLEAN operation offers two methods of accomplishing this. The Virus Terminus directly supports only the method which adds validation data directly to the file itself. A password is required to ADD/REMOVE IMMUNIZATION or ATTEMPT RECOVERY if a LAN is detected. Note that this is an advanced user function. Use it wisely! This submenu has four VIRUS TERMINUS option switches. A. SELECT INDIVIDUAL FILES : Allows processing individual files in a user selected directory. B. SELECT ENTIRE LOGICAL DRIVE : Directs all SCAN/CLEAN processing to an ENTIRE LOGICAL DRIVE. C. SCAN/CLEAN REPORT FUNCTIONS : Disable or select report style. D. VIRUS DETECTION ALARM SOUND : Enable/Disable Virus Terminus virus detection alarm sound. Does not affect SCAN/CLEAN operation. #1. ADD IMMUNIZATION ( /AG ) : This function will add 52 bytes of recovery information to each EXE or COM file selected. The added data facilitates detection and recovery from unknown or new virus infectors. NOTE: self-modifying files like MS-DOS SETVER.EXE should not have recovery information added to them. The Virus Terminus will look for a file named VALNOT.TXT before proceeding. VALNOT.TXT is an ASCII text file with a list of [path + filename] exceptions not to add recovery data to. This is a user defined/created file. Read the documentation that came with SCAN for information on how to construct such a file. VALNOT.TXT should be placed in The Virus Terminus directory. You should not add validation data to files that are already immunized, that self-modify, or perform their own virus infection check. In the event you have unwittingly done so, use #3 REMOVE IMMUNIZATION to return the file(s) to their original length. Set Terminus option switch #A to ON and then select the drive, directory, and then actual files which you wish to remove the validation data from. A quick fix for this problem is to set Terminus option switch #B to ON and process the entire logical drive instead. NOTE: You must set Terminus option switch #B to ON and process the entire logical boot drive ( C: ) in order for SCAN to create the hidden file SCANVAL. which will contain additional recovery data for the partition table, etc. - PAGE 15 - Once an entire logical drive has been immunized, use menu selection #2. SCAN FOR INFECTION to check whether a virus infection has occurred. Set Terminus option #B to ON so that the entire logical drive is processed. *** ADDING NEW PROGRAMS/FILES TO A DRIVE ALREADY IMMUNIZED *** NOTE: Use the following procedure after you have added new program files to a drive which has been previously immunized. 1. Set Terminus option switch #B to ON. 2. Select #3. REMOVE IMMUNIZATION. Then select the drive where you have added the new files to. SCAN will remove recovery data from files previously immunized. 3. Select #1. ADD IMMUNIZATION. Make sure Terminus option switch #B is still ON. Then select the drive where you placed the new files and SCAN will re-immunize ALL EXE/COM files once again. An alternate solution might be to set Terminus option switch #A to ON, manually select the drive/directory(s), and then the individual files which need to be immunized. #2. SCAN FOR INFECTION ( /CG ) : Performs a SCAN of each file etc. selected and uses the added recovery data to determine if selected files, partition table, etc. have been tampered with. Selecting this function also sends /CERTIFY option to SCAN so that any files without validation information will be reported. #3. REMOVE IMMUNIZATION ( /RG ) : Removes the recovery data from selected files restoring them to original length. Set Terminus option switch #A to ON for processing individual or groups of files. #4. ATTEMPT RECOVERY ( CLEAN /GENERIC ): CLEAN will attempt to disinfect known/unknown virus infections using the recovery information added to files and found in SCANVAL.VAL hidden file(boot record, partition table) and attached to individual files. Recovery of the original file/area will be attempted. #5. The CRC CHECKSUM menu selection #5 will perform a two method check on the file of your choice which will provide a comparison for future checks. The file display for this selection IS NOT filtered since you may perform a CRC checksum on ANY FILE. This program function is also available at the main menu. - PAGE 16 - ***** REPORT FUNCTIONS: (Main Menu #4) REPORT STYLES: The Virus Terminus supports INDIVIDUAL consecutively numbered reports and ACTIVITY SUMMARY LOG styles. The activity summary log is an accumulative text file which is updated each time SCAN or CLEAN is run with the /HISTORY option. Press F5-PROGRAM SETUP to enable report functions, select which style of report will be used, and the location where reports/log will be stored. Use "ACTIVITY LOG" for LAN installation. *** SCAN/CLEAN INDIVIDUAL REPORTS *** (Stand-Alone PC Installation) A report counter is initialized when THE VIRUS TERMINUS is first run. Each report generated is given a different name by using the report counter value as part of the name(rpt_1.txt, rpt_2.txt, etc,) You may generate 255 (maximum 40 on a floppy) different reports before the counter recycles back to #1. It is important to note that the reports will always start with rpt_1.txt each time the program is run. Therefore, if you wish to save a report, copy it to another disk or directory so that the original report is not overwritten the next time that you run THE VIRUS TERMINUS. An alternate solution to copying the individual report files to another disk/directory is to select submenu option #2 MERGE INDV.REPORTS . A separate file named RPT_VT.TXT will be created. This file will contain all the individual reports. Also, the original individual reports will be deleted. *** ACTIVITY SUMMARY LOG *** (Stand-Alone OR Local Area Network Installation) This report style is an accumulative text file which is updated each time SCAN/CLEAN receive the /HISTORY option. The location and name of the activity log file may be set by pressing F5-PROGRAM SETUP. Report merge or deletion is not required when using this option. NAME= RPT_VT.TXT ***** VIRUS FACT SHEETS: (Main Menu #5) Information on individual virus known characteristics, areas of damage, which McAfee Associates disinfector utility to use, etc. is available. VIRLIST.TXT should be located on a LOCAL drive. * It is strongly suggested that you get experienced help in * * dealing with computer virus infection. * - PAGE 17 - ***** SCAN/CLEAN OPTION SWITCHES Point the mouse cursor over the word ON! or OFF to change, add or remove options. Press a letter key (A through I) A. SCAN/CLEAN -EXPAND FILE TYPE SEARCH- : SCAN/CLEAN OPTION = /A SCAN and CLEAN will expand the file search instead of just checking EXE, COM, SYS, etc. ( Read SCAN/CLEAN documentation ) NOTE: Archive files with ZIP, ARC, LZH, or other extensions should first have the files within extracted with an appropriate extraction utility before processing. B. SCAN & OVERWRITE/DELETE INFECTED FILES: SCAN OPTION = /D Instructs SCAN to overwrite / delete any infected files when found. Use with caution! C. CHECK MEMORY FOR STEALTH AND OTHERS: SCAN/CLEAN OPTION = (/NOMEM, /M) Terminus sends /NOMEM option by default to SCAN/CLEAN. You should turn this switch ON! to check memory. /M is then sent to SCAN / CLEAN so ALL KNOWN memory resident virus infectors are searched for . D. CHECK MEMORY ABOVE 640KB: SCAN/CLEAN OPTION = /CHKHI Instructs SCAN/CLEAN to check memory 640K-1088Kb E. SCAN/CLEAN MULTIPLE FLOPPIES: SCAN/CLEAN OPTION: /MANY Allows SCAN/CLEAN of multiple floppies. F. PROCESS ENTIRE DIRECTORY + RECURSIVE SEARCH SCAN/CLEAN OPTION: /SUB DO NOT select individual files. Process entire subdirectory and recursively search any subdirectories found within. G. FAST DISPLAY & SKIP INSIDE LZEXE/PKLITE: SCAN/CLEAN OPTION: /FAST Speeds up SCAN / CLEAN operations by not checking inside LZEXE / PKLITE envelopes. This option may cause missing of some virus infections. Read SCANV107.DOC for more info. H. TOGGLE SCAN/CLEAN REPORT FUNCTION: Disable or select SCAN/CLEAN reports style - PAGE 18 - I. VIRUS DETECTION ALARM SOUND: ON/OFF Toggles The Virus Terminus virus found detection alarm sound ON/OFF. NOTE: This option does not affect SCAN/CLEAN operation. ***** SAVING SCAN/CLEAN/TERMINUS OPTIONS: To save the state of option switches A .. I simply press F5-PROGRAM SETUP. Then press <ESC> to leave the default table area. Your option settings are saved along with the other program parameters found in the default table. Each time you start Terminus the option settings for switches A .. I will be restored. ***** OPTIONS LOCK: OPTIONS LOCK set to the ON position disables the following options: ALL MENUS ................... : F3-DOS SESSION; F4-VIEW REPORTS ; F5-PROGRAM SETUP; MAIN MENU ................... : #6. REPORT MAINTENANCE PROGRAM SETUP AREA .......... : F4-MAKE EMERGENCY WORK DISK IMMUNIZE/DETECT/RECOVER ..... : ADD IMMUNIZATION, REMOVE IMMUNIZATION, ATTEMPT RECOVERY ** NOTE: OPTIONS LOCK set to the ON position also forces password entry to continue if a virus infection is detected! ***** OPTIONS LOCK PASSWORD: The password supplied as a default is "PASSWORD" . Do not include the quotes and enter in upper case letters only. The password default was deliberately left out of the Setup Table to promote operation security. You must edit the file VT51A.CFG with a HEX/TEXT file editor to change the password. VT51A.CFG is not a common text data file. All string information within this file is in ASCIIZ format (delimit with #0). The password should be left 12 characters long - pad with spaces (#32) if necessary - and terminate with #0. Use ONLY the numbers 0 .. 9 and upper or lower case letters A .. Z . No other keyboard characters will be recognized. Limit the password to 12 characters or less. Eliminate any spaces "between" characters. - PAGE 19 - ***** LIMIT OPERATION TO SCAN FLOPPIES ONLY: (Start-up option /L) This mode of operation may be brought up by adding a /L option at startup. ! YOU MUST CONFIGURE TERMINUS & SAVE VT51A.CFG FIRST ! /L causes Terminus to perform a self-test and then proceed directly to the SCAN/CLEAN LOGICAL DRIVE menu setting OPTION LOCK to the ON position. In addition the drive choices are limited to A: and to B: if one exists. No exit from this submenu is allowed until the OPTION LOCK is defeated by pressing F6-OPTIONS LOCK and the correct password is entered. (Not available with 360Kb disk swapping) This mode of operation may also be initiated at any time during normal program operation by moving to the SCAN/CLEAN LOGICAL DRIVE submenu and pressing F6-OPTIONS LOCK. Upon entering the correct password the user is given the choice of just locking the normal amount of options as outlined above or initiating further limitations to allow SCAN FLOPPIES ONLY. Password to Continue is required when a virus is detected during either a SCAN or CLEAN. This will necessitate the intervention of the Superuser who should take action to prevent further system and or floppy infection spread. The password required is the same used to enable/disable the Options Lock. It is strongly suggested that SCAN/CLEAN OPTION "E - SCAN/CLEAN MULTIPLE FLOPPIES" be left in the "OFF" position. * It is strongly suggested that you get experienced help in * * dealing with computer virus infection. * ***** USE WITH CAUTION ***** This feature was NOT intended to be used as AN UNATTENDED SCAN STATION. A SuperUser or System Administrator should be present to intervene and take control when virus infection is detected. ***** SCREEN SAVER : The screen saver is an integrated program function which blanks your computer screen after a pre-determined period of keyboard or mouse inactivity. The screen saver is turned on from the Default Table(press F5). Users may enter from 1 to 60 minutes of *approximate* delay time before activation. The screen saver responds to keypress AND mouse clicks. - PAGE 20 - ***** EXPERIMENTAL VIRUS DATA:( ADVANCED USER FUNCTION! ) Please read the SCAN docs to get a better understanding of what an 'experimental virus data file' consists of. If you decide that you need to utilize this function, press F5-SETUP and make an entry to the default 'EXP.VIRUS DAT.FILESPEC'. This entry will be the path and filename for your experimental virus data file. Next, turn default switch 'EXP. VIRUS DATA ON/OFF' to the 'ON' position. NOTE: This is the only way to tell THE VIRUS TERMINUS program to relay the /EXT switch to SCAN. Be sure to go back to PROGRAM SETUP and turn this switch off when you are finished! ***** WRITE PROTECTED FLOPPY OPERATION: Running The Virus Terminus, SCAN, CLEAN, etc. from a write protected floppy is a must if your system is infected. Doing so, however, imposes a few minor limitations. A. The SCAN/CLEAN report or LOG function will not work since SCAN/CLEAN must write to the disk to create a report. B. The SCAN/CLEAN DIRS/FILES submenu normally uses the @filename response file for super fast operation. If your floppy is found to be write protected this mechanism is suspended. You are not given choice of individual files. Instead, you must choose from whole subdirectories only. ***** DIRECTORY/PATH/FILE LIMITATIONS: The Following limitations are imposed: 1. Only paths 64 characters or less are included in the selection list. 2. A 35 character limition on selected paths is imposed when user is attempting to grab a path to be placed in the default table. User is warned and allowed to make another selection. 3. Maximum of 512 paths for each tree branch level with manual entry mechanism provided for larger systems, etc. 4. Maximum 512 files displayed for directory listings etc. Use *.*, entire directory <F>, manual filename entry with optional wildcards if desired, or menu #1 (entire logical drive) for SCAN or CLEAN processing of larger file groups ***** MEMORY AVAILABLE FUNCTION: (LARGEST CONTIGUOUS CONVENTIONAL RAM BLOCK) Memory available for SESSION launch or VIRUSCAN operations can be found by pressing CTRL-F key combination while in ANY MENU or PROGRAM SETUP. (This is NOT DISK space, rather computer CONVENTIONAL RAM memory!) NOTE: Current memory requirement for SCAN is 390Kb free. The Virus Terminus occupies approximately 45Kb RAM when executing SCAN, CLEAN, or DOS SESSION. ( VIRUSCAN 9.18v107 ) - PAGE 21 - ***** NETWORK GROUP SERVICE, INSTALLATION, etc: The Virus Terminus v5.1AN is a general "LAN AWARE" program. MS-DOS v3.1 or higher + share.exe or MS-DOS compatible equivalents are required. Your LAN software, must be compatible with the DOS network services. Note that not all modes and types of installation may work on certain LAN implementations. Also, be sure to first refer to the McAfee program VIRUSCAN(tm) and CLEAN-up documentation for the LAN compatiblity of SCAN.EXE and CLEAN.EXE . For an updated list of tested types, call: STC BBS at 908-206-1386 {2400 - 14.4Kb N 8 1} ** INSTALLING VIRUS TERMINUS: The Virus Terminus needs to know where the executables reside for configuration purposes, etc. The Virus Terminus uses a dynamic configuration table if LAN operation is detected. Table entries 1..5,7,8 are adjusted, if necessary, for each workstation running the program before the main menu appears. These adjustments made at one workstation do not affect other workstations. Only one vt51A.cfg file is required. This mode of operation will be adhered to whether installation is made on a network or local drive so long as network operation is detected. NOTE: The location of ALL executables including SCAN and CLEAN + reports/log MUST be the same network volume\directory or workstation volume\directory as The Virus Terminus. NOTE: The SCAN/CLEAN activity log/report will be created and updated in the directory where The Virus Terminus executables reside. If The Virus Terminus executables reside on a workstation local volume\directory instead of a network drive, the log will be created/updated in that workstation local install drive and directory. Therefore, if a centralized activity report log is of paramount importance for your LAN implementation, you should attempt to install the Virus Terminus on a network or server volume/directory. This may not be possible on certain LANs. *** IMPORTANT: SET THE "STARTUP OPTION LOCK" PROGRAM SETUP ENTRY TO "ON" BEFORE EXITING THE PROGRAM SETUP AREA when you are finished with the configuration process. Doing this enables the System Administrator to force SCAN/CLEAN options like disable CTRL-BRK, DISABLE/ENABLE REPORTS or the Activity Log etc. to be in effect for all workstation users and *** PASSWORD To Continue *** if infection is detected, etc. Read Page# 18 of this document for information on changing the password. The following minimum considerations should be given when installing The Virus Terminus on a Local Area Network: - PAGE 22 - ***** NETWORK GROUP SERVICE, INSTALLATION, etc: cont. * 1. Install directory must include READ/WRITE access. The Virus * Terminus creates TWO unique named temporary files which are used for each instance of concurrent opertion. Both files are then deleted upon program exit. (temp filename1 = VTxxxxxx.xxx and temp filename2 = xxxxxxxx.log) * 2. Open/Run Virus Terminus from DOS v3.1 or higher Workstation * * 3. SHARE.EXE or a compatible equivalent must be active * * 4. Only ACTIVITY LOG style reporting is available when network * is detected. ALL references to indiviual reports including view or print are directed toward the ACTIVITY LOG. Each workstation will only be able to view etc. their current temporary activity log file. All temporary log files are appended to the master report log named RPT_VT.TXT when each instance of operation is terminated. * 5. Use the /t startup option to check workstation memory etc. * This may be done from the command line, Terminus startup batch file, or by SET STCVTEC=t * 6. You MUST install the Virus Terminus in the same directory * as SCAN, CLEAN, VALIDATE and VIRLIST.TXT If The Virus Terminus detects network or remote operation installation/use it will insist that all files be placed in the Terminus directory. * 7. The Virus Terminus vt51A.cfg file is created by, not supplied * with, this program package. Therefore, if you wish to change the password etc. you must first press F5-PROGRAM SETUP and then exit the setup area by pressing <ESC>. This will save or create the file vt51A.cfg to the Terminus directory. * 8. It may be desirable or * necessary * on certain LAN systems * to set the DOS file attribute for each of the following files to Read-Only: scan.exe ; clean.exe ; validate.com ; virlist.txt vt51A.exe ; vtcf2b.exe ; vtcf5a.exe ; vtcf51.exe These files should be made shareable. The master report file named RPT_VT.TXT and VT51A.CFG which will be created by the Virus Terminus should be made shareable but not read-only. * 9. Files which VIRUSCAN(tm) reports either by screen message or * in the activity log as: " Sorry, I cannot open ..." { filename.ext } should be re-scanned at a later time. Note that some files may be temporary data constructs opened with DENY_ALL access. These files may not be present later on since their parent application will have deleted them upon exit. * 10. The program setup entry "ALL MENUS-LOCAL+NETWORK" should be set to "OFF" when multiple workstation use is expected. If you are a Systems Administrator and need to perform certain operations - PAGE 23 - ***** NETWORK GROUP SERVICE, INSTALLATION, etc: cont. on network drives, install The Virus Terminus in a separate directory on the server and restrict rights to same. There you will be able to custom configure The Virus Terminus for your needs while not affecting the operation of workstation users. NOTE: This switch is ignored for each instance of workstation operation where no local drives are detected. Viruscan(tm) options for the NETWORK GROUP SERVICE submenu should be set from the configuration table. Press F5-PROGRAM SETUP to modify. Configuration options such as Report Style, experimental test string, disable CTRL-Break, etc. apply to Network GROUP service. The configuration table entries named ADD SCAN PRGM OPTIONS and ADD CLEAN PRGM OPTIONS * DO NOT APPLY TO NETWORK GROUP SERVICE MENU * . Remember to set the START-UP OPTIONS LOCK to ON in a network installation. Only the Systems Administrator would then have access to edit/change the configuration table values. The lock is set from the program setup area. Set "START-UP OPTION LOCK:" to ON. A password will then be required to enter the program setup area. Read page# 18 for password value and modification. Also, this forces ** PASSWORD To Continue ** when a virus infection is detected. You must first exit the program before this mechanism takes effect. Although the Virus Terminus v5.1AN is generally LAN aware, no specific claim is made as to compatibility with any network system. Use of The Virus Terminus on local or networked drives is subject to System Administrator/Supervisor installation, testing and approval. ***** STCVTEC ENVIRONMENT VARIABLE: The variable name is STCVTEC. STCVTEC may be set to include startup options. Please refer to page #10 for a complete list of startup options. Examples: SET STCVTEC= m ( mono CGA notebook, portable,etc. ) SET STCVTEC= mt ( mono CGA + startup self-test) Place the SET statement into user autoexec.bat or enter from the command line prior to running the Virus Terminus. Further use of STCVTEC is outlined in the registered/license version documentation. ***** DOS ERRORLEVEL on EXIT: The Virus Terminus sets the DOS errorlevel upon exit as follows: 0 = Normal Exit 1 = Virus Infection Detected 2 = Abnormal Termination In the event that a user chooses to (C)ontinue instead of (H)alt when a virus is detected, the errorlevel will still be set to '1' . - PAGE 24 - ***** OPERATION FROM Microsoft WINDOWS v3.1: The Virus Terminus is a DOS REAL MODE application. It should be run as such. A "PIF" file is not required although it may be of use to certain advanced users. A 32x32 16c icon, STC.ICO, has been included with this version of The Virus Terminus. Best results are obtained using FULL WINDOW. ***** PROGRAM ERROR MESSAGES: The following is a partial list of program error messages and corrective actions. ------------------------------------------------------------------ 1. 'FAILED! Unable to Execute/Perform Requested Program Function!', Terminus was requested to perform a function which requires an external file and an error has resulted. REMEDY: 1. Press F5-PROGRAM SETUP and enter the correct location of the requested file. Check to make sure that the file is actually there by doing a directory listing at the DOS prompt (i.e. DIR C:\UTILITY\VIRUSCAN ) 2. Press CTRL-F at the MAIN MENU to determine how much conventional memory free exists. Memory free reported should be 420Kb or more. Power Down and start over. Check memory free again. If still not enough, run Virus Terminus from the DOS prompt instead of your shell, etc. ------------------------------------------------------------------ 2. "REPORTS DISABLED WHEN DISK SWAP ON!" "SELF-TEST DISABLED/DISK SWAP IS ON!" A /D command line option was detected at program startup. REMEDY: Use a high capacity installation disk and/or put ALL needed program files on the same disk. ------------------------------------------------------------------ 3. "Switch Forced ON! For FILE Submenu!" "Switch NOT ACTIVE For FILE Submenu!" /A SCAN/CLEAN option is forced on and may not be disabled for any reason while in the SCAN/CLEAN DIRS/FILES submenu. - PAGE 25 - 4. "You MUST! First *ENTER* A VIRUS ID!" The CLEAN-up Virus ID Code is not present in the CLEAN-up ID Code window and you are trying to CLEAN or disinfect a file or diskette. If SCAN was not previously run and/or Auto-Detect logic couldn't grab the code from SCAN's output then you MUST press submenu select #2 Enter Virus ID. The code is displayed by SCAN when a virus infection is detected. It is the string found BETWEEN the [ and ] brackets. You may also find a list of codes in the McAfee Associates file VIRLIST.TXT. ------------------------------------------------------------------ 5. "ACCESS DENIED! Please Run VT51A.EXE" VTCF2B.exe and vtcf51.exe are not stand alone program files. They must be used in conjunction with vt51A.exe only! ------------------------------------------------------------------ 6. FAILED! Unable to ACCESS/OPEN VTCF51.EXE !! Please Change Active Directory to Location of The Virus Terminus! The current directory is not the location of the Virus Terminus. REMEDY: Try typing the following just before running Terminus. Press <ENTER> after each line: C: cd\location vt51A.exe C: may be D: or whatever drive Terminus is located on. "location" should be the name of subdirectory where Terminus is located at. NOTE: It may also be possible that SCANv107 has opened vtcf51.exe for inspection at another work station in such a way that vtcf51.exe will not open/run until processing is finished. In that case, follow the Virus Terminus retry prompts until vtcf51.exe finally does open and exectute. ------------------------------------------------------------------ 8. "ERROR! COMMAND LINE TOO LONG!" You have exceeded the DOS command line limit for a particular operation. Check the VTEC configuration table for program locations that are several subdirectories deep. Change locations if necessary. Try putting the scan.log file into the root directory. Reduce the number of options used to include just those that are necessary. Note: This is not a common error since whenever possible VTEC will use the @response option file format to overcome this limitation. - PAGE 26 - PRODUCT REGISTRATION --- PERSONAL HOME USE ONLY! ANY OTHER USE REQUIRES A PAID NEGOTIATED SITE LICENSE PAID Registration gives license and right to use The Virus Terminus on a single machine for personal home use only. A PAID negotiated 2 year license is required for educational, business, corporation, government and/or agency environment use. This registration does not apply to any underlying programs used in conjunction with The Virus Terminus. For a list of files contained in The Virus Terminus program package please read page 2 of this document. (VTEC51AN) NAME : ________________________ CHOOSE ONE DISK MEDIA TYPE STREET : ________________________ 5.25" ____ 3.5" ____ CITY : ________________________ STATE/PROV.: ________________________ OWN/USE A MODEM ? Y__ N__ ZIP CODE : ________________________ COUNTRY : ________________________ TERMINUS OBTAINED FROM? _______________________ _______________________ | REGISTRATION + DISK $ 20.00 ONLY U.S. FUNDS ACCEPTED! | PRINTED MANUAL $12.00 + $ | ------- MAKE YOUR REMITTANCE TO: | SUB-TOTAL = $ | SALES TAX IF APPLICABLE + $ | SHIPPING AND HANDLING + $ 4.00 S.T.CALISE | OVERSEAS SHIPMENT $2.00 EXTRA + $ 673 HERBERTSVILLE ROAD | ------- BRICK, NJ 08724 USA | TOTAL = $ UPGRADES: REGISTERED home users of V5.1A are eligible for upgrades to subsequent releases. Updates may be otained by mail by sending $6.00 in U.S. funds, or $15.00 for disk + printed manual, to S.T.Calise at the above address. Don't forget to specify the disk media type and your current address. Instant update/upgrade is also available to all REGISTERED home users.Your registration PACKET will contain the needed access codes and information. STC BBS 908-206-1386 2400 .. 14.4k v.32/.32bis v.42/.42bis MNP 1-5 -------------------------------------------------------------------------- NOTES: - PAGE 27 - For more registration/license information on VIRUSCAN(SCAN), CLEAN, and other McAfee Associates programs please contact: McAfee Associates, Inc. (408) 988-3832 office 2710 Walsh Avenue, Suite 200 (408) 970-9727 fax Santa Clara, CA 95051 U.S.A. SCAN, CLEAN, VALIDATE, VIRLIST Copyright (c) 1989-1993 by McAfee Associates. VIRUSCAN(tm) and MCAFEE(tm) are trademarks of McAfee Associates IBM and OS/2 are registered trademarks of International Business Machines. COMMAND.COM and SETVER.EXE are copyright by Microsoft Corporation. MS-DOS, WINDOWS, Microsoft Mouse are registered trademarks of Microsoft Corporation. PKLITE(tm) is a trademark of PKWARE, Inc. LZEXE is copyright by Fabrice Bellard. ****************************************** Trademarks of other companies mentioned in this program,help file and/or accompanying documentation appear strictly for identification purposes only and are the property of their respective companies. The following are CRC validation checksum values for the shareware version of The Virus Terminus v5.1AN Some values shown here do not apply to registered/licensed versions. Use main menu CRC FILE ANALYSIS to verify: ( CALL THE STC BBS TO CONFIRM IF IN DOUBT!) (vt51a.exe) S:17,011 D:09-07-93 M1: B353 M2: 1FC6 (vtcf2b.exe) S:12,612 D:09-07-93 M1: FF9C M2: 0BFD (vtcf51.exe) S:68,882 D:09-07-93 M1: 703C M2: 1197 (vtcf5a.exe) S:13,339 D:09-07-93 M1: 973F M2: 1344 ********************************* The Virus Terminus is not available for export, re-export or distribution in any manner or form to the following countries: North Korea, Vietnam, Cuba, Iran, Iraq, Lybia. ********************************* - PAGE 28 - ***** UPDATE INFORMATION VERSION 5.1AN ***** (Please refer to README51.TXT for additional changes) 1. Updated VTEC51AN for SCAN/CLEAN 9.18v107): A. Removed /UNATTEND option support which was deleted and/or otherwise default integrated into Viruscan(tm) execution. The /UNATTEND option was previously added to the SCAN/CLEAN command line by setting WINDOWS or OS/2 DOS SESSION to the ON position. B. Added support for the /AD, /ADL, /ADN network options. Added new main menu selection "NETWORK GROUP SERVICE" . Read VT51ADOC.TXT more information on Local Area Network operation/installation. 2. The Virus Terminus v5.1A contains accumulative changes which have been instituted and gradually incorporated into successive version 4.x releases. Please refer to those earlier program READMExx.TXT or WHATSNEW.TXT files for specifics. NOTE: Current memory requirement for SCAN is 390Kb free. The Virus Terminus occupies approximately 52Kb RAM when executing SCAN, CLEAN, or during DOS SESSION. ( VIRUSCAN 9.18v107 ) 3. Default Drive/Directory selections for all menus except NETWORK GROUP SERVICE default to LOCAL drives only. User or Installer may add the NETWORK drives to the selection list by pressing F5-PROGRAM SETUP and changing the configuration table entry ALL MENUS-LOCAL+NETWORK to ON. This switch will be ignored if all station drives report as network. This switch defaults to 'ON' for stand alone operation. 4. The Virus Terminus now requires minimum MS-DOS version 3.1 5. Added "CRC FILE ANALYSIS" selection to main menu. Option provides user selected file checksum analysis via McAfee Associates program VALIDATE.COM . NOTE: This option was and still is available in submenu selection "IMMUNIZE/DETECT/RECOVER" 6. Added SCAN/CLEAN report type option switching to program setup configuration table. Modified F4-VIEW REPORTS to allow choice of either view individual reports or view activity log. 7. VTEC51A includes a new 32x32 16c ICON. 8. OPTION-LOCK in the ON position now only locks F5-PROGRAM SETUP, F3-DOS SESSION, <H> SCAN/CLEAN REPORTS. Read VT51ADOC.TXT for password information. OPTION LOCKING for certain submenus may vary. 9. Added "F4-MAKE EMERGENCY WORK DISK" option to the program setup area. This operation will create an emergency work disk to be used in the event of computer virus infection. Please read VT51ADOC.TXT