Quick Heal Info Centre - Main Menu
Quick Heal - Info Centre

 Getting started - Read me first

 Quick Heal - Using

 General  points for using Quick Heal effectively!

 Frequently asked questions


Getting started

 Quick Heal Info Centre-How To

 An Introduction to Quick Heal


Quick Heal Info Centre-How To

Use the Info Centre

About the notational conventions followed


Using the Info Centre

What is the Info Centre?

The Info Centre is the central help menu from where you can gain information on all aspects of Quick Heal . It is associated with this image

  . You can press the left mouse button on this image in order to go to the main menu of this Help System.

The Info Centre has text marked in green with an underline, clicking the mouse on this text will either cause a jump to the associated topic or display a window with more information on the text.

 If the topic double underline it indicates a jump , if it has a single underline then it means you get to see an explanation or additional information on the topic.

The Info Centre Buttons

1)   The Contents button

Pressing the left mouse on this button takes you into Quick Heal ‘s main menu i.e. it achieves the same result as clicking on the Info Center's use_this_help image shown above.

2)   The Search Button

Use this button to display the search screen. From the search screen you can type the first few characters of the topic you want. The window underneath will display all the topic’s starting with the characters you have typed. Select the topic you need from those shown and select the OK button to see help on the topic

 You can try using words like ‘How to’, ’Can I’ ,’What is’ etc. if your question is of a more basic type. The Info Centre has extensive cross-links in order to help you find answers to your problems faster.

 This button has been replaced by the Index button in Window 95/NT

3)   The Back Button

This button takes you back by one topic from the current topic based on the topic you have seen.

4)   The History Button

Use this button to see a list of all the topics you have seen after entering the Info Centre. You can select the topic you want to see with the mouse or keyboard.

 This button has been replaced by a sub - option in the Options menu in Window 95/NT

5)   The Print Button

Use this button to print the current topic

The Index button

This button is similar to the search button in Windows 3.x. Use this button to display the index screen. From the index screen you can type the first few characters of the topic you want. The window underneath will display all the topic’s starting with the characters you have typed. Select the topic you need from those shown and press the OK button to see help on the topic

 You can try using words like ‘How to’, ’Can I’ ,’What is’ etc. if your question is of a more basic type. The Info Centre has extensive cross-links in order to help you find answers to your problems faster.

 This index button is a replacement for the search button in Windows 3.x.

The Info Centre menus

The following menus are available from within the help topic

1)   File

Click Open ... to choose from a list of any other available help files Or, Click Print Topic ... to print the current topic or, Click Exit to close the help dialog box.

2)   Edit

Select help text to Copy to another file or Click Annotate ... to create your own help notation. To view this notation later, click on the paperclip icon that will appear at the top of the help window

3)   Bookmark

Bookmarks are used to gain fast access to a help topic. Click Define ... and name your bookmark and click OK to save settings and exit the dialog box. To return to this topic later, click Bookmark and then click the topic name.

4)   Help

Select How to use help ... if you are unfamiliar with Graphical User Interfaces like Windows and would like to know the basics of using windows. This is strongly recommended if you do not know how to use menus, buttons, edit boxes or if you have problems in running programs in windows , adjusting colors i.e. generally using Windows. You could also ask your local computer whiz to help you catch some speed in using Windows.

Click Keep Help on Top ... if you would like to keep the help window on top of all other windows even if you work in another window.

Options  menu

Set a variety of options for how help should display including how the help menus appear. You have the option of seeing the history window , which shows all the topics you have visited. Font can be used to set the way in which the help should appear. People with poor eyesight may need to set the character size large. The use system colors options will set the color of the help system according to the color setting of the Windows desktop.

See also :

Notational conventions followed

An Introduction to Quick Heal

________________________________________________________________________________


Notational conventions followed by the Info Centre

The images shown below are used by the Info Centre to indicate a paragraph type. For example  the bulb is a common image which will prompt you towards tips that you can employ to use Quick Heal in a better fashion.

	This image is a comment symbol. It means that the paragraph is a comment on the topic you are reading. Comments generally come from Quick Heal  developers hence it can be beneficial to you to keep an eye on them.
	This image provides you with tips to do a thing in a better fashion. It is a good idea to read all tips. Also be sure to read the section on specific points for using Quick Heal  in the Info Centre main menu
	This sign represents a must read. Be sure to read text after this image. It is usually an important point regarding the topic that you must know.
	This image is present next to a feature that is only available in Quick Heal for Windows 95/NT. This usually means that it a feature that cannot be supported in Windows 3.x due to the differences between the environments. Please note that all features in 3.x are generally ported to 95/NT. Hence this symbol means the feature is a plus for 95/NT users.
	This image is present next to a feature that is only available in Quick Heal for Windows 31. This usually means that it a feature that cannot be supported in Windows 95/NT due to the differences between the environments.
	This image is present next to a technical note or on the related topic. This is for serious hobbyists who want to know more about the topic they are viewing. People who do not want technical info can skip this image.
	This image denotes a procedure. Procedures have step-wise instructions for performing common tasks with quick heal. If you have problems performing any activity in Quick Heal please notify us. We will add it to the procedure list in the next release. Thank you for your co-operation.

See also :

An Introduction to Quick Heal

________________________________________________________________________________


An introduction to Quick Heal

What is Quick Heal ?

How does Quick Heal work ?

Quick Heal Components


What is Quick Heal?

Quick Heal is an Anti-Viral software i.e. you can use Quick Heal to rid your system of viruses and to prevent further infections. It uses a combination of proactive and reactive technologies to ensure 100% safety from Viruses and Vandals. Viruses are malicious programs that more often than not cause damage to your data. Viruses do not cause physical damage to your computer but your data can be corrupted beyond repair. Quick Heal is available for Dos, Windows 3.x and Windows 95/98/NT/2000/ME and as a Netware loadable module (NLM) . Quick Heal comes with complete LAN support. Its Heuristic scanner also detects unknown viruses! Quick Heal has been developed at Cat Computer Services Pvt. Ltd. (India) by people driven by your requirements.

See also :

How does Quick Heal work?

Quick Heal Components

_______________________________________________________________________________


How does Quick Heal work?

Viruses can attack the computer by infecting executable files and certain portions of the floppy or hard disk. Quick Heal provide multilayer protection to trap and remove viruses. Quick Heal uses multiple strategies to scan and remove viruses. It has a database of signatures  using which it can determine if a file is infected or not. It also uses Integrity Information to tackle new viruses in the system. Quick Heal has a Heuristic scanner which can trace the code for suspicious code and detects unknown viruses! So much for virus detection and removal. Quick Heal’s 'On-line Protection' , Startup Scan, Sensor and Schedular provides multi point protection for your system.

See also :

Quick Heal Components

What is Quick Heal ?

 ______________________________________________________________________________


Quick Heal Components

Scanners

The scanner is the portion of Quick Heal responsible for detecting viruses and removing them. This scanner detects all kinds of viruses. It is enabled to scan for viruses in files compressed using popular compression software like Zip and Arj. It also has a separate Heuristic scanner that detects unknown viruses.

Signature based scanner

This module scans for viruses based on their signatures . These signatures are stored in a signature database that is shipped with Quick Heal.

Heuristic Scanner -

Heuristic Analysis is the technique of scanning a file for suspicious code and algorithms.    However, it is very difficult to determine what code is suspicious. The code that might be innocent in one program (for example, FORMAT.COM) might be suspect in a virus-infected file. For this reason it is necessary for heuristic analysers to calculate how suspicious a file appears. Typically, a scoring system is implemented, and any file which has enough suspicious elements (a high enough score) is flagged as being a possible virus. Suspicious elements could include: undocumented DOS functions, anti-Debug techniques to avoid disassembly, existence of an executable file search mask (*.COM, *.EXE) etc. With the rising popularity of PCs and dramatically increased use of the Internet, new viruses are spreading faster and further than ever before. Even with monthly upgrades, users may be missing many viruses by the end of their monthly cycle.

Checksum based scanner

This module checks the integrity of a file based on stored checksums. It is used in conjunction with the Heuristic scanner to recover files from unknown viruses. The checksum files have the extension .inf. The recovered files are stored with the extension .vir in the original files home folder.

Quick Heal Scheduler

This module allows you to schedule virus scans that run unattended on either specific dates and times or at periodic intervals. It also provides you with the detail report on scheduled scans.

On-Line Protection

It monitors the virus activity and blocks it before the virus gets a chance. It keeps a  constant watch on Internet Connection, Emails, Downloads, Floppies, CDs, Network etc. It checks for a virus on execution/creation/access of any infected file and blocks the use if infected files. It also blocks the use of infected floppies. It also monitors the Boot/Partition area of unauthorised write attempt. It can be configured to load automatically on every boot.

Start Up Scan

The startup scan of Quick Heal checks for known and unknown virus infection in boot partition area on every boot. It is even powered to tackle new viruses in these areas.

Sensor

Sensor also gets loaded on every boot and checks the system for new trojan/worm/backdoor or any other malicious code. A powerful tool to ensure a hackproof computer.

See also :

What is Quick Heal ?

How does Quick Heal work ?

________________________________________________________________________________


Quick Heal - Using

Commands                    Menu Commands

Procedures	            Step-by-step instructions.

Keyboard and Mouse	Table of helpful keystroke commands.


Keyboard
Keyboard and Mouse

To operate Quick Heal with the mouse

Position the mouse cursor over the desired object and click the left mouse button once.

To operate Quick heal with the keyboard

Tab

Select program item or dialog box button

Shift+Tab

Move the cursor to the previous item within a dialog box.

Arrow Keys

Move the cursor to the closest button control, check box, or text box in the direction of arrow. Within an edit box, use RightArrow and LeftArrow key to move the cursor one character to the left or right.  Use the UpArrow and DownArrow keys to move up and down within a list box or a text box.  In a pull-down menu, use RightArrow and LeftArrow to scroll horizontally through the menu. Use UpArrow and DownArrow to move among options within an open menu.

PgUp

Move the cursor to the top of the text in screen size increments.

PgDn

Move the cursor to the bottom of the text in screen size increments.

Home

Move the cursor to the beginning of a edit box or a list box.

End

Move the cursor to the end of a edit box or a list box.

Enter

Select and deselect check boxes or items in multiple selection dialog box.

Esc

Close the current dialog box or cancel an operation and return to the previous dialog box.

________________________________________________________________________________


Procedures

Procedures are identified by the [image] symbol. Some commonly used procedures are :

Configuring the Quick Heal scanner

Creating Rescue disk

How to take care of viruses..

How to Remove viruses from the Network

If you suspect a new virus

Master Partition is damaged

Protecting the LAN

Restoring Rescue Information

Scanning All Hard Drives

Scanning a Folder

Scanning a File

Scanning Floppy Drive

Scanning Hard Drive


Configuring the Quick Heal scanner

Step 1

Click Options in the Quick Heal main window.

Step 2

Click the Scanner tab.

Step 3

In the General Options group box, select how to respond when a virus is found or when a file integrity change is detected.

Enable Sound: Check if you want Quick Heal to sound a tone when a virus is found.

Prompt on detection: Check if you want Quick Heal to prompt you when a virus is found.

Create Activity Log: Check if you want to create activity log file for the scan.

Step 4

In the If Unrepairable File group box, select what to do when a infected file cannot be repaired. In Rename the first character of the extention is replaced with V. Thus EXE become VXE and so on.

Step 5

In the Advance Options group box, select what types of checks to perform on each file.

Integrity Check : Check if you want Quick Heal to check files for integrity.

Heuristic File Scan: Check if you want Quick Heal to scan for unknown viruses in file.

Heuristic MBR Scan: Check if you want Quick Heal to scan for unknown viruses in Master Boot Record.

Scan Compressed Files: Check if you want Quick Heal to scan files inside compressed files. (.ZIP, .ARJ)

Scan Compressed EXE's: Check if you want Quick Heal to scan compressed EXE's (LZEXE).

Scan Outlook Mail Box : Check if you want Quick Heal to scan the mailbox of Outlook Express 5.0 for virus infection.

Step 6.

In Scan group box, select the types of files to scan.

________________________________________________________________________________


Creating a Rescue disk

  This is a extremely important procedure. We strongly recommend you to follow it, if you already have not done so.

Save the rescue information using Quick Heal Utility menu.

_______________________________________________________________________________


How to take care of viruses

  The only and most recommended measure against virus attacks is to have a reliable backup copy of data stored separately.

We recommend you to have the virus scan using Quick Heal every week. You should also scan every outside floppy before copying from or to it.

The most important thing is to use the latest version of Quick Heal. Quick Heal is updated by a  new version bimonthly. For the latest version of Quick Heal, contact Cat Computer Services Pvt. Ltd. To obtain the address please see -- About Cat Computer Services Pvt. Ltd.

If you have a virus   ...  There is no reason to panic.

Step 1

Power off the system.

Step 2

Wait for half a minute.

Step 3

Now power on again and boot the system with a clean, original, write-protected OS disk.

It is better if you boot with the same OS version that you have on the hard disk.

Step 4

Have a virus scan on your system.

Step 5

Check all floppy diskettes that could have been infected.

Step 6

Check for virus on all the surrounding/connected computers.

Step 7

For any technical support call Cat Computer Services (P) Ltd. or its nearest distributor.

See also :

Creating Rescue disk

__________________________________________________________________________


How to remove viruses from the Network

  Only the administrator or someone who has read-write access to all files on the network can remove viruses.

Follow these steps -

Step 1

If your workstation is having local hard disk drives, you first remove viruses from the local hard disk drives without logging in to the network.

Step 2

Now login to the network. Before login just disable 'Enable login script processing' option so that the login script will be bypassed. To disable this options go to Properties of Network settings from the Control Panel and uncheck 'Enable login script processing' check box.

Step 3

Click Scan Drives in the Quick Heal main window.

Step 4

From the Select Drive dialog box that appears, check 'All Network Drives' check box from Drive Type group and click Scan button to start the scan.

Step 5

This procedure will solve your virus problems on the file server and the workstation through which you login. If you have virus on the local hard disk of some other workstation, you will have to repeat the above procedure for that workstation also.

 Virus removal on the local hard disk drives of one workstation through another is not feasible on Client - Server based networks.

______________________________________________________________________________


If you suspect a new virus

If you feel that your system is infected by a new virus then

Step 1

Format a floppy disk on the infected computer and transfer the system files on to it.

Step 2

Copy the files that are infected according to you.

Step 3

Copy at least one .COM and one .EXE file from infected system.

Step 4

Write a note describing the symptoms that you found about the new virus.

Step 5

Send the floppy disk along with the note to Cat Computer Services Pvt. Ltd. To obtain the address please see -- About Cat Computer Services Pvt. Ltd.

See also :

How to take care of viruses..

______________________________________________________________________________


Master Partition is damaged .. Computer is not booting
Master Partition is damaged ...   Computer is not booting.

Cold boot the computer with clean bootable floppy disk.

Using Fdisk’s undocumented feature you can refresh the partition startup code by giving the following command line option - Fdisk /mbr or use the Quick Heal utility Cleanmbr.exe from Quick Heal Emergency disk to refresh the contents of Master Boot Record (MBR).

________________________________________________________________________________


Protecting the LAN

Protecting the LAN from viruses is very important. You can protect your LAN by following some preventive measures. This includes protecting the LAN file server, as well as the individual workstations.

Step 1

A Partition/Boot sector virus cannot infect the main file server , as their logic does not permit them to do that way. For the problem of file viruses , setting the file attributes all the executables on the file server as READONLY, using the network privileges can be helpful.

Step 2

The SUPERVISOR should limit the individual users' rights to change the file attributes of those files on the file server.

Step 3

For more security scan the file server for known viruses, using Quick Heal at least once a day.

See also :

How to Remove viruses from the Network

________________________________________________________________________________


Restoring from Rescue Information
Restoring Rescue Information

To restore your rescue information saved previously -

Step 1

Shutdown your computer and switch off your computer using the power switch.

Step 2

Insert the Rescue Disk in A: Drive and then switch on your computer.

Your computer will boot from the Rescue Disk.

Step 3

Type QHRESCUE /RESTORE at the prompt and press Enter.

The Restore Rescue Information dialog box will appear.

Step 4

Select Drive A: for the location of the rescue data files and press Enter.

Step 5

A dialog box will appear indicating items available and will prompt for items to restore.

Check the items you want to restore and select OK to restore the selected items.

Step 6

When the restore process is complete, remove your Rescue Disk from the drive and restart your computer.

This will restore your systems partition table, Boot Record or CMOS setup information from the Rescue Disk, depending on the pieces selected to be restored.

See also :

Creating Rescue disk

________________________________________________________________________________


Saving scan result to a file

To save scan result to a file select the ‘Create Report File’ switch in Option menu as ON before starting the Scan. The Scan Results will be stored in the report file Quick Heal .RPT which will be created in the root folder of the drive which is being scanned.

________________________________________________________________________________


Scanning all hard drives

To scan all hard drive(s) :

Step 1

Select Drive from Scan Menu.

Step 2

From the dialog box check the All Hard Drives option under Drive types group.

Step 3

Press ENTER to confirm and start the scan.

See Also :

Scanning a File

Scanning the Floppy Drive

Scanning the Hard Drive

________________________________________________________________________________


Scanning a Folder

To scan all files in a folder -

Step 1

Select ‘Folder’ from Scan menu.

Step 2

Enter the folder name with full path name in the edit box.

Step 3

Press ENTER for confirmation.

See also :

Scanning All Hard Drives

Scanning a File

Scanning the Floppy Drive

Scanning the Hard Drive

________________________________________________________________________________


Scanning a File

To scan  a single file

Step 1

Select File... from Scan menu.

Step 2

Enter the file name with full path name in the edit box.

Step 3

Click on the OK button for confirmation.

See also :

Scanning All Hard Drives

Scanning a Folder

Scanning the Floppy Drive

Scanning the Hard Drive

________________________________________________________________________________


Scanning the floppy drive

To scan floppy drive(s) -

Step 1

Select the ‘Drive’ command from Scan Menu.

Step 2

Now select the drive letters you wish to scan.

Step 3

Click on the Ok button to confirm and start the scan.

See also :

Scanning All Hard Drives

Scanning a Folder

Scanning a File

Scanning the Hard Drive

________________________________________________________________________________


Scanning Hard Drives

To scan hard drive(s) -

Step 1

Select the ‘Drive’ command from Scan Menu.

Step 2

From the dialog box that appears select the drive letters you wish to scan.

Step 3

Click on the Scan button start the scan.

See also :

Scanning All Hard Drives

Scanning a Folder

Scanning a File

Scanning the Floppy Drive

________________________________________________________________________________


Menu Commands

Scan menu

Use the Scan Menu to scan your files.

The following commands are available in this menu :

Drive...

Folder...

File...

Exit

Utility menu

The following commands are available in this menu :

Options

Rescue Information

Virus Database...

Activity Log

Scheduler

Quarantine...

Live Update

Delete Integrity Files

Help menu

Help Topics - Use this command to get detailed help on Quick Heal

Support

About Quick Heal

_______________________________________________________________________________


Quick Heal Options

You can set options for the Scanner, On-Line Protection, and Startup from this menu

Scanner Options

StartUp Options

On-Line Protection Options

_______________________________________________________________________________


Rescue Information

Save Rescue Information...

Compare Rescue Information...

Restore Rescue Information...

_______________________________________________________________________________


Quick Heal Scheduler

This module allows you to schedule virus scans that run unattended on either specific dates and times or at periodic intervals. It also provides you with the detail report on scheduled scans.

Schedule Entry Form takes the various schedule settings for schedule entry. You can also delete or modify existing scheduler entries.

Scheduler Report displays the report of the scheduled scans.

_______________________________________________________________________________


Quick Heal Support Network

Quick Heal is updated regularly as and when new viruses appear.

Updated with solutions for new viruses, new versions are released every week.

All registered users can get the latest version regularly from the nearest support center. List is provided on the web site.

All registered users also have unlimited telephone access to assistance regarding software setup and installation at the following address. (Available 9:30 A.M. to 6:00 P.M. IST Monday to Saturday)

Developed & Marketed by :

Cat Computer Services (P) Ltd.

Head office : PUNE

Tel   : 91-20-6122173, 6124653

Fax   : 91-20-6119737

Email : info@quickheal.com

http://www.quickheal.com

Distributed by :

NCS Computech Pvt Ltd.

Head Office : Calcutta

Tel   : 91-33-2209693, 2205259

Fax  : 91-33-2210529

Branch office : Pune

Tel   : 91-20-7651504, 7657313

For support in USA contact:

Avatar Enterprises

Post Box 25534

LA CA 90025

Tel   : 310-313-5687

Fax   : 310-820-3173

Email : au277@lafn.org

For support in East Africa

Solar Computer Services

PO Box 87963

Mumbasa, Kenya.

Tel   : 0025411-490930

Email : solar@formnet.com

_______________________________________________________________________________


Enable Sound (Utility Menu)
Enable Sound..

Sounds the audible bell when any virus is detected. Any error in operating Quick Heal is also alerted by a beep sound.

_______________________________________________________________________________


Prompt While Detect (Utiltity Menu)
Prompt While Detect

Displays an alert message box on the screen when a virus is detected while scanning.

_______________________________________________________________________________


Create report (Utility Menu)
Create Report File

Use this option switch to generate the report file, in which all the detection/removal activities are recorded.

_______________________________________________________________________________


Compressed Files

Setting this option will cause .Zip and .Arj files to be scanned. The scanner will extract a file to be scanned from a .zip or .arj onto the disk as a temporary file so some amount of disk space has to be free on the disk with this option on.

_______________________________________________________________________________


Heuristic Boot Scan

Setting this option will cause the scanner to scan the boot sector and partition table for unknown viruses.

_______________________________________________________________________________


Heuristic File Scan

This option enables or disables the Heuristic scanner. The Heuristic scanner scans files for unknown viruses.

_______________________________________________________________________________


Integrity Check

Setting this option will cause checksum files to be created. Checksum files can be used to check if a file has been modified in any way due to a virus. The checksum files have the extension .inf.

_______________________________________________________________________________


Rename Files

Setting this option will cause files having a virus to be renamed so that they are not executed by accident.

_______________________________________________________________________________


Delete Files

Setting this option will cause files having a virus to be renamed so that they are not executed by accident.

_______________________________________________________________________________


Executable Files

Setting this option will cause the scanner to scan executable files only.

_______________________________________________________________________________


All Files

Scan all files i.e. data files and executables

 This option will slow down the scanning process. Use this from monthly. Generally the default option is the best.

_______________________________________________________________________________


Scan user specified files
Scan User Specified

Scan files with extensions provided by you. Pressing the default button results in a set of default file extensions being selected.

  Note that the scanners will be scanning for extensions provided by you. If you omit important extensions like .EXE and .COM these files will not be scanned !.

_______________________________________________________________________________


Delete Integrity Files

This option deletes all the Quick Heal checksum (QH32CHK.INF) files from the selected drives.

________________________________________________________________________________


Live Update

This option will load the Live Update wizard which will guide you through the process of updating your copy of Quick Heal through Internet or through the provided definition file. The new definition file available weekly. To keep your copy of Quick Heal up-to-date use this utility regularly.

Live Update can be scheduled to execute automatically at a fixed interval (daily/weekly/every two weeks/monthly). This ensures that Quick Heal is updated regularly without any human intervention.

________________________________________________________________________________


Activity Log

This options displays the details of all the activity log entries made by Quick Heal. From here you can view the details of each log entry or delete a single or all the entries. Quick Heal makes a log entry for each scan if the Activity Log option is checked in the scanner settings of options dialog box.

_______________________________________________________________________________


Drive (Scan Menu)
Drive

Using this command you can start a scan on the drive(s) you select. The drives available for scanning are shown in the list box. Select the drive(s) to scan from the drive list by selecting the check box preceding the drive letter. You can use the Drive Types check boxes to select amongst:

Floppy Drives..

Hard Drives..

Network Drives..

_______________________________________________________________________________


Folder (Scan Menu)
Folder

Use this command to start a scan on the folder you select. Type the folder name with full path in the edit box displayed on selection of this command. The full path for sub-folder to scan includes drive and folder to which it belongs.

_______________________________________________________________________________


File (Scan Menu)
File

Use this command to start a scan on the file you select. Type the file name with full path in the edit box displayed on selection of this command. The full path for file to scan includes drive and folder to which it belongs.

_______________________________________________________________________________


Exit (Scan Menu)
Exit

Use this command to exit Quick Heal. Any change to Quick Heal settings made in Option Menu commands will be lost if you haven't turned on the Save Settings on Exit switch.

_______________________________________________________________________________


Save Rescue Information (Utility Menu)
Save Rescue Information

Using this command you can create a Rescue Disk.

A Rescue Disk thus created will store Rescue Information which may be required later to rebuild the damages done to your system by any virus attack.

Rescue Information consists of a copy of the hard disk's partition table , boot sector, and system CMOS setup information. Along with rescue information the rescue disk also stores some additional files like SYS.COM which can be useful while restoring rescue information.

You use Compare Rescue Information to compare your current system settings with the Rescue Information, to check if any virus infection has occurred.

If while comparing any infection is detected, you use the Rescue Disk to restore your system to its original condition.

_______________________________________________________________________________


Compare Rescue Information (Utility Menu)
Compare Rescue Information

Use this command for detecting infection in system areas.

Compare Rescue Information will compare the hard disk's partition table, boot sector  and system CMOS setup information with the information in Rescue Disk.

 Note : You must have previously created a Rescue Disk.

 Insert the Rescue Disk in Drive A and select continue.

See also :

Save Rescue Information...

Restore Rescue Information...

_______________________________________________________________________________


Restore Rescue Information (Utility Menu)
Restore Rescue Information

This option cannot be performed from windows. To restore rescue information you will have to use the QHRESCUE.EXE from the Rescue disk.

Note : You must have previously created a Rescue Disk.

See also :

Save Rescue Information...

Compare Rescue Information...

How to Restore Rescue Information...

_______________________________________________________________________________


Virus Database (Utility Menu)
Virus Database

On selecting this option you are presented with detailed information about the viruses from the database. The list comprises of viruses that are found in India and abroad. The database furnishes the following information about each virus.

Does it infect the Master Boot Record?

(Partition table on hard disk and boot record on floppy disks)

Does it infect COM files?

Does it infect EXE files?

Does it remain resident in memory?

Does it employ stealth techniques?

Does it encrypt itself?

A select a virus in the list by moving the selection bar using the cursor keys. The list box supports the speed search based on first letter of the virus name. You can type the first letter of the virus name and the listbox will be positioned at the virus starting with that letter. Obtaining a hard copy of the virus list along with their details involves, using the print control button provided in the dialog box.

_______________________________________________________________________________


Frequently asked questions

How many viruses exist today?

Upgrading Quick Heal

Does write protecting a hard drive avoid viral infection?

What are the symptoms of viral infections?

Will a write-protect tab on a floppy disk stop viruses?

Why do some anti-virus software report an infection inconsistently?

Will setting DOS file attributes of all executable files to READ ONLY protect them from viruses?

Can a virus hide in PC's CMOS memory?

Can a virus hide in Extended or Expanded RAM?

Can a virus hide in Upper memory or High memory?

Can a virus infect Data files?

Can a boot sector virus infect non-bootable floppy disk?

Can a virus infect a system by looking at the directory of an infected floppy disk?

Can I safely copy data files from an infected floppy to a clean computer's hard disk?

Can a normal DOS virus work under MS-Windows?

Is a system on which CHKDSK reports 639K (or less) total memory infected ?

Could an anti-virus program itself be infected?


How many viruses exist today?

It is almost impossible to give an exact number of viruses present at any moment because new viruses come into the field almost everyday. Furthermore, different anti-virus researchers use different criteria to decide whether two viruses are different or same. Some call them different if they have slight change in their appearance. Others group the viruses in families and count closely related variants as a single virus.

_______________________________________________________________________________


Upgrading Quick Heal

New viruses come up almost everyday. Hence to be on the safer side, it is always recommended that you upgrade your copy of Quick Heal as soon as new version arrives in the market.

A new version of Quick Heal is released after every four to five weeks. Quick Heal upgrades are available on our web site:

http://www.quickheal.com

_______________________________________________________________________________


Does write protecting a hard drive avoid viral infection
Does write protecting a hard drive avoid viral infection?

Partially. It is possible to protect a hard drive from old viruses by write protecting the hard disks. There are several softwares that claim to do that. But there are few viruses (e.g. One-Half, NATAS) which can bypass such softwares by using some special techniques. These techniques are used by these viruses to avoid detection while infecting the system. Therefore one should never rely on such softwares although they can be useful in combination with other anti-virus measures.

See also :

Will a write-protect tab on a floppy disk stop viruses?

_______________________________________________________________________________


What are the symptoms of viral infections?

There are various kinds of symptoms of viral infection. These include specific messages, playing music and graphical displays. However, the main indications are changes in the file sizes and contents or changing of interrupt vectors. The unaccounted reduction in the amount of RAM in the machine are important indicators. Although difficult, the change in code in partition or boot sector can be spotted. Longer disk access periods can also be an indication.

_______________________________________________________________________________


Why do some anti-virus software report an infection inconsistently?

There are circumstances when signature of a virus exists in RAM without being active. If a scanner reports a virus active in memory only occasionally, it could be due to OS buffering disk reads, keeping disk contents that include a virus in memory (for e.g. reading boot sector of an infected diskette) OR after running some scanner, there may be scan strings left in memory.


Will a write-protect tab on a floppy disk stop viruses?

Yes. A virus cannot infect a diskette when the write protection mechanism is functioning properly. But, if your computer has a faulty write protect system or if the floppy was infected before write protecting, it is of no use.

See also :

Does write protecting a hard drive avoid viral infection?

_______________________________________________________________________________


Will setting Dos file attributes of all executable files to READ ONLY protect them?
Will setting DOS file attributes of all executable files to READ ONLY protect them from viruses?

No. While the READ ONLY attribute will protect the file from a few viruses, most of them simply override it, and infect normally. It is not a perfect protection against viruses.

See also :

Will a write-protect tab on a floppy disk stop viruses?

Does write protecting a hard drive avoid viral infection?

_______________________________________________________________________________


Can a virus hide in a PC's CMOS memory?

No. Nothing in a normal machine loads data from the CMOS RAM and executes it. So, a virus which is hidden there would still have to infect an executable object of some kind in order to load and execute whatever it had written to CMOS. A malicious virus can ofcourse alter values in CMOS as a part of its payload; but it cannot spread through CMOS.

See also :

Can a virus hide in Extended or Expanded RAM?

Can a virus hide in Upper memory or High memory?

_______________________________________________________________________________


Can a virus hide in Extended or Expanded RAM?

Although a virus can do that, no such viruses are known yet. Even if such viruses occur, they will have to have a small part resident in conventional memory.

See also :

Can a virus hide in PC's CMOS memory?

Can a virus hide in Upper memory or High memory?


Can a virus hide in Upper memory or High memory?

Yes, it is possible to construct a virus that can hide itself in Upper Memory (640K - 1024K) or in High Memory (1024K - 1088K). There are few currently known viruses that hide in Upper Memory.

See also :

Can a virus hide in PC's CMOS memory?

Can a virus hide in Extended or Expanded RAM?

_______________________________________________________________________________


Can a virus infect Data files?

Some viruses modify non-executable files. However, in order to spread, the virus must be executed. Therefore the infected non-executables files cannot be a source of further infections.

However some data files like .OBJ files, libraries, device drivers, macro files for some packages like MS Word and Lotus 1-2-3 can be used by the virus as an infection carrier.

_______________________________________________________________________________


Can a boot sector virus infect a non-bootable floppy disk?
Can a boot sector virus infect non-bootable floppy disk?

Any diskette that is properly formatted contains an executable code in the boot sector. If the disk is not bootable all that the boot sector does is print a message like "Non System disk or disk error, replace and strike any key when ready". As this code in the boot record is executable, it is vulnerable to infections. If the machine is accidentally turned ON with a non-bootable infected diskette in boot drive, the "Non system ..." message is displayed. But before doing that, the virus in the infected disk gets a chance to infect the system hard disk.

_______________________________________________________________________________


Can a virus infect a system by looking at the folder of an infected floppy disk?
Can a virus infect a system by looking at the directory of an infected floppy disk?

If it is assumed that the system is free from infections before giving the DIR command, the answer is NO. However, when a DIR command is given the contents of the boot sector of the diskette are loaded into a buffer for use when determining disk layout etc. Certain anti-virus products scan these buffers to give you a virus alert message.

_______________________________________________________________________________


Can I safely copy data files from an infected floppy to a clean computer's hard disk?

Assuming that the PC is not infected by any virus just before copying the files, there is no chance the virus would infect the system. However, care should be taken for some of the data files which are interpreted as executable by some other programs (such as MS Word macro). These files should be treated as malicious until the symptoms of the infection are known.

_______________________________________________________________________________


Can a normal DOS virus work under MS-Windows?

Most of normal DOS viruses won't work under MS-Windows. The reason is that most resident viruses are not compatible with the memory management in Windows. Also, many existing viruses will damage Windows application if they try to infect them as normal EXE files; thus alerting the user.

However, many resident viruses that infect .COM files only will work perfectly in a DOS window. All non-resident .COM infectors will be able to run and infect too. There are few viruses present which are Windows specific i.e. these viruses are compatible with the NewEXE format (e.g. NATAS, DieHard-II).

Any low level trapping of interrupt 13, as by boot sector or partition viruses , can also affect Window operations particularly if protected disk access (32BitDiskAccess = ON) is used.

_______________________________________________________________________________


Is a system on which CHKDSK reports 639K (or less) total memory infected ?

If CHKDSK displays 639K total memory then it is probably due to reasons other than a virus since there are very few viruses which take only 1K from total memory. This can be due to

1. A IBM PS/2 computer, which reserves 1K of conventional RAM for an Extended BIOS Data Area.

2. A computer with AMI BIOS, which uses the upper 1K of memory. (However, it can be instructed to use lower memory).

3. A SCSI controller.

If you do not have any of the above mentioned setup OR if you are missing 2K or more of RAM, then there is a chance of viral infection.

_______________________________________________________________________________


Could an anti-virus program itself be infected?

Yes, it is equally possible that a anti-virus program gets infected as any other executable program. Some anti-virus software keep a built-in Self-Integrity Check to verify that they are not infected by viruses. If infected, they stop execution after giving an alert message so that further infection is prevented.

_______________________________________________________________________________


General points for using Quick Heal effectively

1.   Keep creating a rescue disk regularly.

2.   Keep an Eye on the Help line at the lowest end of Quick Heal window.

3.   When setting options keep in mind that if you provide your own extensions to scan and remove the default extensions Quick Heal will not scan those files. Example - removal of the .EXE extension will result in Quick Heal skipping all files with the extension .EXE.

4.   If the Heuristic Scan and Scan Compressed Files options are off the Scanner will be faster but .ZIP, .ARJ and unknown viruses will be skipped.

5.   The scanner will extract a file to be scanned from a .ZIP or .ARJ onto the disk as a temporary file   so some amount of disk space has to be free on the disk with this option on.


  What is this ?

This is a notational convention used by the Info Centre. It is found before descriptions of any new feature that has been introduced in the Quick Heal ver which you are using.

See : Notational conventions followed


  What is this ?

This image represents is a comment symbol. It means that the text is a comment on the topic you are reading. Comments generally come from Quick Heal’s developers hence it is be beneficial to you to keep an eye on them.

See : Notational conventions followed


  What is this ?

This image provides you with tips to do a things in a better fashion. It is a good idea to read all tips. Also be sure to read the section on specific points for using Quick Heal in the Info Center's main menu.

See :      Notational conventions followed


  What is this ?

This sign represents a must read. Be sure to read text after this image. It is usually a important point regarding the topic that you must know.

See :      Notational conventions followed


  What is this ?

This image is present next to a feature that is only available in Quick Heal for Windows 95/NT. This usually means that it a feature that cannot be supported in Windows 3.x due to the differences between the environments. Please note that all features in 3.x are ported to 95/NT. Hence this symbol means the feature is a plus for 95/NT users.

 If the 95/NT image is next to another picture it indicates that the picture comes from Windows 95/NT.

See :      Notational conventions followed


  What is this ?

This image is present next to a feature that is only available in Quick Heal for Windows 3.x. This usually means that it a feature that cannot be supported in Windows 95/NT due to the differences between the environments.

 If the 31 image is next to another picture it indicates that the picture comes from Windows 3.x

See :      Notational conventions followed


  What is this ?

This image is present next to a technical note or on the related topic. This is for serious hobbyists who want to know more about the topic they are viewing. People who do not want technical info can skip this image.

See :      Notational conventions followed


  What is this ?

This image denotes a procedure. Procedures have step-wise instructions for performing common tasks with quick heal. If you have problems performing any activity in Quick Heal  please notify us. We will add it to the procedure list in the next release.

Thank you for your co-operation.

See :      Notational conventions followed


What is the Info Centre ?

The Info Centre is the central help menu from where you can gain information on all aspects of Quick Heal. It is associated with this image -

 . You can press the left mouse button on this image in order to go to the main menu of this Help System. The Info Centre has text marked in green with a underline, clicking the mouse on this text will either cause a jump to the associated topic or display a window with more information on the text.

 If the topic has a double underline it indicates a jump, if it has a single underline then it means you get to see an explanation or additional information on the topic.

 For a detailed description on using Windows Help Systems windows 3.x users can refer to the Help menu of the Info Centre before going on to the topic recommended below.

See :  Quick Heal Info Centre-How To


What is a Topic ?

A topic represents the headings Info Centre uses. You use these headings to navigate in the Info Centre. Topics usually appear with a double underline or in Bold lettering. All data in Bold need not be a topic it may be just a paragraph heading under a Topic. Topic’s are separated by a single line area from their content and are present at the top.

Example of a topic :   Frequently asked questions


What is a Window ?

A Window is term representing the rectangular area on the screen in which you are perform our tasks.  For example the Info Centre itself appears in a window, Quick Heal has a main window that has other smaller windows like dialog box etc. A window generally has a title and a border, it may have the facility to be moved and resized. The window whose title is highlighted is known as the active window. This is to denote that you are working in or using the window.

Example Image of a active window

  If you are not familiar with menus, mouse, buttons and other standard interface objects then it could be a good idea to ask somebody to teach you basic windows interface concepts. If you are running Quick Heal under Windows 3.x you can also try going through the Info Center's Help menu.


What is a Dialog Box ?

A Dialog box is basically a window that has special controls for interacting with you. For example is may have a area for typing something, it may have buttons that you select to perform some task. A dialog box is something that comes up when a decision or input is required from you in order to complete or influence a task.


What is a Menu ?

A menu looks like the image shown here. Nowadays this device is used to let you perform your tasks. The image depicts the file menu of the Info Centre. To use the menu you have to select the pad (i.e. ‘File’ in the image) you want by pressing the left mouse button over it or pressing alt + the menus hotkey simultaneously. You can then select options from the popup that appears in the same fashion.

 If you are not familiar with menus, mouse, buttons and other standard interface objects then it could be a good idea to ask somebody to teach you basic windows interface concepts. If you are running Quick Heal under Windows 3.x you can also try going through the Info Center's Help menu.


What is a Hotkey ?

A hotkey is the letter that is underlined or highlighted on menus, buttons etc. For example in the Info Center's File menu ‘F’ is the hotkey. It can be used to select the object it represents. Generally pressing Alt + the hotkey simultaneously will select the object.


What is a mouse click ?

Pressing the left mouse button on an object like a menu , window etc is known as clicking the mouse. Pressing once is single click while pressing twice is a double click.

 If you are not familiar with menus, mouse, buttons and other standard interface objects then it could be a good idea to ask somebody to teach you basic windows interface concepts. If you are running Quick Heal under Windows 3.x you can also try going through the Info Center's Help menu.


What is a button ?

A button is a standard interface object. It is used to gain a user response to questions, or to let him select the operation he wants to perform. Buttons can have pictures and or text on them.

Example -

This button represents the Info Center's main menu.

 If you are not familiar with menus, mouse, buttons and other standard interface objects then it could be a good idea to ask somebody to teach you basic windows interface concepts. If you are running Quick Heal under Windows 3.x you can also try going through the Info Center's Help menu.


What is the Windows Desktop ?

The windows desktop is a reference to settings that are global all over Windows. For example you can set window attributes, sounds , font sizes etc these will be common to all windows open on the desktop. The desktop is the place from where programs are launched (not the program manager in Windows 3.x , the program manager itself is a program).


What is a LAN ?

LAN is a abbreviation for Local Area Network. A local area network is formed when computers are linked together for the purpose of sharing resources like printers, other machines, software etc. You usually have to log into a network providing your user name and password. Quick Heal is LAN enabled. You can scan the file server from the client if you posses a local copy on your workstation. You have to simply select the Netware drives from the scan drives menu and select Ok.


What is a infection?

What is a Infected File?

A infection is said occur when a virus program gets attached to a executable file or to a sensitive system areas of the disk like the boot sector  or the partition table . A infected file is a file to which the virus program attached itself. If the infected file is a executable then the virus program gets executed automatically along with its host causing it to infect other files and cause damage. This is the mechanism by which a virus spreads. It is a kind of a chain reaction. Anti-virus programs stop the virus from spreading by scanning the disk and removing the virus program’s code from the infected file and the sensitive areas.


What is the Boot Sector?

 The Boot sector is the first sector of the Floppy and Hard  Drive. When the computer starts up the program that executes first resides in the boot sector. boot viruses generally write their code in this sector so that they get activated when the computer is switched on. From here on they infect other sensitive areas and files. A Boot virus can be removed relatively easily as the older ones generally replace the jump at the beginning of the boot sector to their program.


What is the partition table?

If your Hard disk has multiple partitions the information about each partition is kept in its partition table. A partition virus attacks the partition table. A floppy disk does not have a partition table.


What does the word ‘booting’ mean?

What is a bootable disk?

Booting the computer is to start the machine There are two method to boot the machine , viz. the Cold boot and the Warm boot. Cold Booting is to start the machine by switching it on. Warm booting is to restart the machine by using the clt+alt+del keys. After the machine is switched on a self test (POST - power on self test) is performed. The memory count that you see is a part of this test. After this test the program residing on the boot sector of the floppy or Hard disk is executed.

This program is usually a part of the Operating System like Dos. If the Operating System code is not found on the boot sector x86 based machines generally display a message like ‘missing operating system’. Bootable disks are those Floppy or Hard disks in which a valid part of the  Operating System program is stored on the Boot Sector.


What is a Netware Loadable Module (NLM)?

 A Netware loadable module (NLM) is program that runs on the same machine as a Netware file server  or router alongside the Netware Operating System. An NLM can be considered as an extension to the Netware OS as it runs in RING 0 in protected mode - the highest level of the X86 CPU. It has little restrictions which make it a powerful tool to perform tasks like scanning for viruses in the background as hooks into appropriate primitives can be inserted , techniques multithreading can be used to optimize performance.

 For the aforesaid reasons Quick Heal is available as a NLM. It protects the server constantly by checking files as they are used, this is real-time scanning. Demand scanning is also provided as an alternative for people in a low-risk environment i.e. where the probability of a virus is low. The NLM also provides options for scheduling i.e. demand scanning can be done  weekly , daily , monthly , on a date that you provide and much more.


What is a File server?

A file server is a machine on which a Networking Operating System usually runs ex - Netware. It is a machine where common files on the network are stored for common use by all the networks clients. In Netware the file server is also the machine running Netware loadable module’s (NLM) .

 The file server does not have to be the machine running a NOS ex in a distributed OS a file server can provide the file system services along with the microkernel if it is a microkernel distributed system.


What is a scanner?

Scanning is a process by which a anti-viral software finds out if a file has been infected by a virus. The scanner examines executable files for the signature of known viruses, is the main module of Quick Heal. Use the scan menu to divest your disk of viruses. It is enabled to scan for viruses in files compressed using popular compression software like Zip and Arj. Quick Heal also has a Heuristic scanner component that scans for unknown viruses.


What is a Heuristic Scanner?

  Heuristic Analysis is the technique of scanning a file for suspicious code and algorithms. However, it is very difficult to determine what code is suspicious.  The code that might be innocent in one program might be suspect in a virus-infected file.  For this reason it is necessary for heuristic analysers to calculate how suspicious a file appears. Typically, a scoring system is implemented, and any file which has enough suspicious elements is flagged as being a possible virus. New viruses are spreading faster. Heuristic Analysis implemented in Quick Heal has deliberately been designed with the most complex, polymorphic viruses in mind. The more obfuscated and complicated the virus author makes their polymorphic virus, the more obvious it is to the analyser.  In this way the viruses which are the most difficult to detect with traditional scanning methods are the easiest to detect with Heuristic Analysis.


What is a Workstation?

What is a Network Client?

A workstation is a  the computer on which you perform your daily work. In the context of  a LAN it is a node connected to the file server ,where it is also known as a client for client-server networks.  A workstation is basically  a computer with its own central processing unit and other components unlike a terminal which is a monitor plus a simple communications interface to the server.


What is a signature?

A signature a sequence of bytes using which a scanner can identify a infected file. This sequence is found out by anti-virus researchers after studying the virus program. A infected file has these bytes added to it by the attacking virus as it tries to duplicate itself.


What is a executable?

A executable is a file that is in a format that a Operating System can execute. In Dos files with the extensions .EXE and .COM are known as executable files.


What is a Virus ?

A virus is not a organism or a microbe. ’Virus’ is actually a misnomer given to software written with the intention of performing harmful acts like formatting your hard disk, deleting data, damaging other software etc. A virus spreads from one computer to other by copying itself to an existing program so that it is executed when the host program is run. The program file is then said to be infected.

 The conventional classification of viruses relates to the sort of executable code they infect.  These are Partition virus , Boot virus , File virus ,Viruses are further classified by their method and capability to infect  the computer. Some are classified as  'Stealth' viruses still others are  classified as 'Polymorphic' viruses changing. Stealth viruses can keep a copy of the boot sector and show it as normal to a anti-virus software. They also report the correct file-size even after infecting a file etc along with other such methods. Polymorphic viruses have code which is self - modifying which makes it difficult for a anti-virus writer to get their signature .


What is a Boot virus?
What is a Boot virus

Boot virus infects  the boot sector of the hard disk or floppy disk by replacing the boot sector’s executable code by their own code, so that they are loaded into memory before anything else.  Once they are loaded in memory they can easily infect the other clean disks.  When this newly infected disk is used in other clean computer for booting it infects that computer, thus it spreads all over.

Examples of boot viruses : Stone, BFD, Changu Mangu, ... etc.


Multipartite Virus
What is a Multipartite virus

Multipartite viruses have capability to infect Partition/Boot record of the hard disk as well as they infect executable files. These viruses once removed from the file and not removed from the Partition record or Boot record will again infect the executable files and visa versa. There are very few Dual

viruses present till now.

Example of Multipartite virus is BFD also called as Generic Boot virus.


File Virus
What is a File virus

File viruses infect the executable files by adding their code in the executable file. Most of the file viruses either add their code to the top or to the bottom of the executable file. The executable files with extensions COM, EXE, SYS, BIN, OVL and OVR are infected.  Most of the viruses infect only .COM and .EXE files. Once the infected file is executed the virus code gets executed and later it infects the other clean executable files.

Examples of file virus : Termite, HideNowt, Khobar, ... etc.


Partition Virus
What is a Partition virus

A Partition virus infects the Master Boot Record of the hard disk by replacing the Master Partitions executable code by their own code, so that they are loaded into memory before anything else. Once they are loaded in memory they can easily infect the other clean disks. When this newly  infected disk is used in other clean computer for booting it infects that computers Master Boot Record, thus it spreads  all over.  All Partition viruses infect the boot sector on the floppy disks to spread themselves, as there is no Master Boot Record on the floppy disks.

Examples of Partition virus : Joshi, Stone, Bloody, ... etc.


About Cat Computer Services Pvt. Ltd.

Started in 1991 Cat Computer Services Pvt. Ltd., was initially in the field of Computer Hardware maintenance and sales. It later diversified in system software development in 1993 with the development of the Quick Heal.

 For more details contact :

 Cat Computer Services Pvt. Ltd.

 Head Office:

 58, Mangalwar Peth, Patole Chambers, Pune - 411 011.

 Phone : 91-020-6122173, 6124653

 Fax : 91-0212-6119737

 http://www.quickheal.com


About Quick Heal Anti-Virus

Quick Heal is designed and developed by Cat Computer Services (P) Ltd. Our progress comes from fulfilling our customers needs.

Project Managed by :	Sanjay Katkar
Project Lead by :	Mahesh Thipse
	Sunil Shilimkar
Module Development by :	Manav Deshmukh
	Mahesh Mohan
	Atul Patil
	Asit Kharshikar
Technical Support by :	Kailash Katkar
Quality Assurance :	Milind Deval
Technical writing & documentation by	Manohar Malani
Printing by	Shreyansh Prakashan
Photography & Artwork :	Vijay Aaglawe

Additional Acknowledgments

Special thanks to our external evaluators and our customers. We believe that our work is generated, motivated and governed by our customer's expectation. It is the single most important element that drives us on from one stage of perfection to another.

_______________________________________________________________________________


Close the Dialog Box


Clear the text


Save the thing


Delete the thing


Displays the information about the viruses and their characteristics.


Use to set or reset the options


Displays the information about drives


Select Drive

Select Drive dialog box allows you to select drives to scan.

Select the drives to scan from the Drives list, by selecting the checkbox preceding the drive letter. You can use the Drive Types check boxes to select amongst :

Floppy Drives..

Hard Drives..

Network Drives..

Selected drives box will show the list of drives currently selected.

•	Use OK to scan the selected drives

•	Use Cancel to go back to main menu.


Select all the floppy drives for scanning.


Select one or more drives for scanning. The scan will take place according to the options you have selected.


Select all the hard drives for scanning.


Select all the NETWORK drives for scanning.


Displays the list  of drives selected.


Type the name of the virus you want to search in the virus database.


Displays the virus list and according to the virus selected from the list it displays it’s characteristics.


Select one or more drives for deleting integrity files.


Virus Database

Virus Database dialog box shows Information about the characteristics of virus selected in the virus list. The Virus List shows the complete list of viruses.

•	Use the scroll bar to highlight a virus and select it.

•	Use the search edit control to type the first few letters of the virus name to select a	particular virus in the virus list.

•	You can also select the viruses in particular category by selecting different virus categories.

List of most important characteristics of viruses appears to the left in the dialog box. A red marker before the characteristic indicates that the selected virus is having that characteristic.

Virus Infects:

Master Boot Record: virus infects partition table and or boot record of the system.

Program Files: virus infects executable files eg. .COM, .EXE, .OVL, .BIN.. etc.

Script Files: virus infects script files like VB script files and HTML files.

Document Files: virus infects document fiels with macro capabilities eg. .DOC, .XLS .. etc.

List of Virus Characteristics:

Polymorphic: virus encrypts itself to make the detection more difficult.

Uses Stealth Techniques: virus tries to hide itself by disguising the changes.

Remains Resident in Memory: virus remains resident in memory after activation.

Worm or a Trojan: virus is a worm or a trojan.

IMPORTANT : This virus list consists of names of various virus families that Quick Heal detects. Variants of each family of viruses are not included in this list.


List of Virus Characteristics:

Polymorphic: virus encrypts itself to make the detection more difficult.

Uses Stealth Techniques: virus tries to hide itself by disguising the changes.

Remains Resident in Memory: virus remains resident in memory after activation.

Worm or a Trojan: virus is a worm or a trojan.


Virus Infects:

Master Boot Record: virus infects partition table and or boot record of the system.

Program Files: virus infets executable files eg. .COM, .EXE, .OVL, .BIN.. etc.

Script Files: virus infects script files like VB script files and HTML files.

Document Files: virus infects document fiels with macro capabilities eg. .DOC, .XLS .. etc.


Virus Category:

Select a virus category here to filter the virus list and display only the viruses from the selected category.


Additional Information:

Displays some more important information about the virus that is not covered in characteristics. This information is provided only with some of the important viruses.


Activity Log

Activity Log dialog box shows the scan reports of Quick Heal in a graphical format. The list on the right hand side of the dialog box shows the list of previously scan events and the pie chart on the left side of the dialog box shows the files scanned percentage.

•	Use the Clear button to delete the selected log entry.

•	Use the Clear All button to delete all the log entries.

•	Use the Details button to display the details of selected entry.


Press this button to delete the selected log entry.


Press this button to clear all the log entries.


Press this button to view the details of selected log entry.


Press this button to close the dialog box.


Check if you want Quick Heal to sound a tone when it alerts you of a virus.


If this option is enabled then Quick Heal  prompts you  when a virus is found, so that you  can take necessary action.


Activity log maintains report about the previous scans.  It records details like number of files scanned, viruses found , scanning  options for that scan,  etc…


Scans .ZIP and .ARJ  compressed  files for viral infection. Scanning time may increase slightly if you have many compressed files.  Note that compressed files within compressed files are also scanned.


Scans files for virus symptoms using in-built intelligence.


Scans Master Boot Record for virus symptoms using in-built intelligence.


Stores the important information about files in QH32CHK.INF file, so that the files information can be compared  with the information stored in QH32CHK.INF and if there is any change in the files it can be detected.  This information is vital for detecting unknown file viruses.


Scans the LZEXE ( compressed EXE’s ) for viral infection.


Renames the infected file which cannot be recovered due to incomplete infection.


Deletes the infected files which cannot be recovered due to incomplete infection.


Scans files with executable extensions.


Scans all files. Check this option for maximum protection.


Scans files with the extensions contained in extensions list. You can change these extensions.


Click here to view, add or delete the extensions from list.


Enables Quick Heal Sensor check at startup. We recommend you to always keep this option on.


Loads Scheduler at startup.


Loads Cateye  ( Quick Heal On-Line Protection ) at startup. We highly recommend this to maximise protection.


Scans for viruses resident in your computer’s memory during startup.


Scans for boot viruses resident in your  computer’s Master Boot Record.


Scans for viruses resident in your computer’s boot record during startup.


Scans programs that loads before Windows loads, preventing viruses from getting into the system before the On-line Protection system gets loaded. This will load a DOS based device driver through CONFIG.SYS.


Scans a program file each time you run it.


Scans files whenever they are accessed,  such as when you copy, move or open a file.


Scans a file whenever a new file is created, such as when you install new software or download email attachment or a file from the Internet.


Scans files with executable extensions.


Scans all files. Check this option for maximum protection.


Scans files with the extensions contained in extensions list. You can change these extensions. Remember these extensions are different from those for the scanner.


Click here to view, add or delete the extensions for Quick Heal On-Line Protection.


This option traps programs that are trying to perform low-level format on your computer's hard disk.


Allow :  Allows the activity to continue everytime without informing you. Prompt : Informs you when a program tries to perform the activity and allows you to decide whether the activity should continue or stop.  Don’t Allow : Prevents  the activity from occurring everytime it is detected.


This option traps programs trying to write to your computer’s hard disk boot record.


Allow :  Allows the activity to continue everytime without informing you. Prompt : Informs you when a program tries to perform the activity and allows you to decide whether the activity should continue or stop.  Don’t Allow : Prevents  the activity from occurring everytime it is detected.


This option traps programs trying to write to floppy disk’s boot record.


Allow :  Allows the activity to continue everytime without informing you. Prompt : Informs you when a program tries to perform the activity and allows you to decide whether the activity should continue or stop.  Don’t Allow : Prevents  the activity from occurring everytime it is detected.


Checks for boot viruses on each floppy disk you access.


Checks for boot viruses on floppy disk in drive A: during shutdown.


User defined extensions.


The list box contains user specified extensions for scanning.


Press this button to delete the highlighted extension.


Press this button to bring default extensions in the list box.


Press this button to display detailed help about this dialog box.


Type in the extension you want to add to list of extensions.


Press this button to add the extension in the adjacent edit box to the list of extensions.


This control allows you to select the month of the year. The dates of the calendar below will change according to the month selected and the year in the adjacent control.


This control allows you to select or type a year from the current system year to the year 2099. The dates of the calendar below will change according to the year selected and the month in the adjacent control.


This control shows the days of the month and the year selected in the controls above the calendar. You can click on any valid day or take the cursor on any valid day to select it.


Enter the time at which you want the scan to occur, the default is current time.


Enter the specific month, date, and year you want the scan to occur. The default is the current date. Enter the date in dd/mm/yy.


Scan will occur during first boot for the specified frequency and will not occur on subsequent booting.


Scan will occur during specified time mentioned in Time control below.


Select how often you want the scan to occur. The drop-down list includes:

One Time: The scan occurs one time only, on the specified day and time. When the scan occurs, Scheduler deletes the entry from the list.

Hourly: The scan occurs once each hour at the Minutes interval you specify.

Daily: The scan occurs once each day seven days a week at the specified time or at first boot as per the settings.

Weekly: The scan occurs once each week on the day and time you specify.

Monthly: The scan occurs once each month on the day and time you specify.


Type in the minutes for invoking Quick Heal for an hourly scan.


Select the day of week for invoking Quick Heal for a weekly scan.


Type in the day of month for invoking Quick Heal for a monthly scan.


Type in the drives for this scheduler entry to be scanned.


Select the drives for this scheduler entry to be scanned.


This control shows all the scheduler entries which are to be executed.


Press this button to acknowledge and save all the changes made.


Press this button to add a new scheduler entry. You can add only 50 scheduler entries.


Press this button to delete the scheduler entry selected in the control displaying all the scheduler entries.


Press this button to configure the scanner settings for this scan. Each individual scheduler entry can have different scanner settings.


Press this button to cancel all the changes made.


Press this button to update the scheduler entry selected in the control displaying all the scheduler entries. You should make some changes in either the date, time etc… to update the scheduler entry.


This control displays information about each log entry. Use Detail button to get more information about the scan.


Quick Heal Scheduler’s report.


Press this button to get a hard copy of Quick Heal Scheduler’s report.


Press this button to clear the Scheduler’s report file.


This control shows the days of the month and the year selected in the controls above the calendar. You can click on any valid day or take the cursor on any valid day and click Add to make a scheduler entry for that date and time (the time as is present in the time edit box control).


Delete CheckSum Files

This option deletes all the QH32CHK.INF checksum files from the selected drives.


Displays the detailed help about the Dialog.


Select one or more drives for deleting QH32CHK.INF files.


Displays the number of drives selected for deleting QH32CHK.INF files.


Click this to display On-line Protection Advanced options.


Displays the message box when a virus is found indicating the virus name and the action taken.


Select what action to take when a virus is found.


Select what action to take when a virus is found. Prompt will inform you when a virus is found. You will be provided with the options to remove or skip the virus. Deny Access will prevent you from using the file when a virus is detected. Repair Automatically will remove the virus as soon as it is detected without notifying you. Delete Automatically will delete the infected file as soon as it is detected without notifying you. Rename Automatically will rename the virus as soon as it is detected without notifying you. Results will be recorded in activity log.


Select what action to take when a virus is found. Deny Access will prevent you from using the file when a virus is detected. Repair Automatically will remove the virus as soon as it is detected without notifying you. Delete Automatically will delete the infected file as soon as it is detected without notifying you. Rename Automatically will rename the virus as soon as it is detected without notifying you. Results will be recorded in activity log.


Deny Access will prevent you from using the file when a virus is detected.


Repair Automatically will remove the virus as soon as it is detected without notifying you. Results will be recorded in activity log.


Delete Automatically will delete the infected file as soon as it is detected without notifying you. Results will be recorded in activity log.


Rename Automatically will rename the virus as soon as it is detected without notifying you. Results will be recorded in activity log.


Apply action to all files  will apply the action which you will select (i.e. REMOVE or SKIP) to all the infected files during further scan.


Apply action to all compressed files  will apply the action which you will select (i.e. REMOVE or SKIP) to all the infected files in a compressed file during further scan.


Disables On-line Protections all advanced options. You can select this option if you are facing some problem at the time of system shutdown. Due to very low level nature of the advacned features of On-line protection this options may create some problem. On certain PC’s at the time of system shutdown it may clash with some third party device drivers, in this case it is better to disable advanced options.


Checks for macro viruses whenever you open MS Office document by double clicking directly on the file link/icon.


List of exclude items.


Click this to add new exclusion item.


Click this to edit the selected exclusion item.


Click this to remove/delete the selected exclusion item.


Click this to include the sub directories inside the folder that you have selected.


Specify the file or folder that you want to exclude.


Excludes the specified file/folder from known virus scan.


Excludes the specified file/folder from heuristic file scan.


Excludes the specified file/folder from Integrity check.


Click this to select a file to excluded.


Click this to select a folder to be excluded.


Scans MS Outlook Express mail boxes for viruses inside email messages.


Click this to view or modify Quick Heal Sensor settings.


Checks if any malicious program is getting loaded through WIN.INI.


Checks if any malicious program is getting loaded through SYSTEM.INI.


Checks for any malicious change in registry.


Checks the intergity of the most vital system files.


Displays the information about the files which are present in Quarantine.


Click here to add a file to Quarantine.


Click here to delete a file from Quarantine.


Click here to restore back the file from Quarantine to its orginal location.


Click here to view help on Quarantine.


On-line Protection Settings

Use this Tab to specify settings for the on-line protection module. The on-line protection module works in the background and traps accesses to infected files. Hence you will not infect the system accidentally when this protection is enabled.

You can specify:

•	When to scan a file

•	What files to scan

•	Whether to scan a floppy disk for boot viruses

•	What action to take when a virus is found.

We recommend you to keep the default settings as they are. However for maximum protection you can check All Files under Scan options.


On-line Protection Settings

Use this Tab to specify settings for the on-line protection module. The on-line protection module works in the background and traps accesses to infected files. Hence you will not infect the system accidentally when this protection is enabled.

You can specify:

•	When to scan a file

•	What files to scan

•	Whether to scan a floppy disk for boot viruses

•	Whether to scan a floppy disk for boot viruses during shutdown.

•	What action to take when a virus is found.

•	Whether to display a alert message.

We recommend you to keep the default settings as they are. However for maximum protection you can check All Files under Scan options.


On-line Protection Advanced Settings

Use this Tab to specify advanced settings for the on-line protection module. This allows you to select which virus-like activity to allow or disallow.

You can specify:

•	Which virus like activity you want to monitor

•	How to respond to virus like activities

We recommend you to keep the default settings as they are. However for maximum protection you can set all the options to Prompt.


Scanner Settings

Scanner settings Tab will allow you to specify the settings that will tell the scanner about:

•	How to respond when a virus is found or when a file integrity change is detected

•	What to do when a infected file cannot be repaired

•	What type of checks to perform on each file

•	What files to scan

We recommend you to keep the default settings as they are. However for maximum protection you can check Scan Compressed Files, Integrity Check and Scan Compressed EXE's under advanced options and also select All Files from Scan options.


User Specified Extensions

Use the user specified extensions dialog box to add new extensions, delete extensions and reset the extensions to the default extension installed with Quick Heal. The file extension list contains the majority of executable extensions. Quick Heal anti-virus only scans files with extensions on this list if scan for user specified extensions is selected in scanner settings. If you are using custom applications with unique file extensions, type your extension in the edit box given at the bottom of the dialog and click Add to add the extension to the list.


Startup Settings

Use this Tab to specify:

•	The modules to load automatically when you start Windows

•	What to Scan when you start Windows (for Windows 95 only)

We recommend you to keep the default settings as they are. However for maximum protection you can check all the options under What to Scan.


Exclusions Settings

Exclusions tab allows you to specify list of files/folders that are to be excluded from normal scanning process. Exclusion allows you to specify the scanning activity which is not to be performed on the exclude item, viz. Known virus detection, Unknown virus detection (Heuristic Scan) and/or Integrity check. Usually exclusions are given to files/folders that are known to change and you don’t want Quick Heal to scan them.

Using this tab you can:

•	Add new exclusion items.

•	Modify existing exclusion items.

•	Remove any exclusion item from the list.

  Please remember that specifying exclusions will reduce your level of virus protection.


New/Edit Exclusions Item

Specify the file or folder which you wish to exclude from Quick Heal scan. You can include wild characters in the Exclusion file/folder just to be more specific.

For example to exclude files with extension .VIR, .VI1, .VI2 .. in C:\RECYCLED folder you can give: C:\RECYCLED\*.VI*

  To specify a file to be excluded.

  To specify a folder to be excluded.

For a particular exclude item you can specify among the following exclude activities :

•	Known virus detection- excludes the item from know virus detection scan.

•	Unknown virus detection - excludes the item from heuristic file scan.

•	Integrity Check - excludes the item from Integrity check scan.

  Please remember that specifying exclusions will reduce your level of virus protection.


Sensor Settings

Use this Tab to specify Quick Heal Sensor settings. This allows you to select which system areas to check for changes on every boot. You can select which system initialization file and or registry to check for changes.

We recommend you to keep all the options ON for maximum protection. This gives effective protection against all kinds of worms and backdoors.


Quarantine

Quarantine helps in safely isolating the infected and/or suspected files. When a file is added to

Quarantine, Quick Heal encrypts the file and keeps it inside the Quarantine directory. Being kept

in an encrypted form, this files cannot be executed and hence are safe.

You can:

- Add a file to Quarantine.

- Restore a file from Quarantine to its original location.

- Delete the file from Quarantine.

This is an important tool to isolate the suspected files. After isolation, it can be submitted to our Research team for detailed analysis. If you wish to submit a quarantined file to us, please

send the file to us at cat@vsnl.com.