Copyright: Trend PC-cillin 98 ver 4.02
Citation: Copyright (C) 1988-1998 Trend Micro Incorporated.


Welcome to PC-cillin 98

Thank you for choosing PC-cillin 98. This product represents a new generation of virus security software that supports Windows 98 and Windows 95. PC-cillin 98 protects your computer from the harmful effects of computer virus attacks, such as macro viruses and malicious Java applets or ActiveX controls. PC-cillin 98 has improved its speed by 193% relative to its previous version, "PC-cillin II or PC-cillin 97" (based on benchmark tests conducted in-house).

The Internet and new technologies continue to expand and become easier to use. However, there are increasing reports of incidents in which some people misuse the technology to crash other people's computer systems and destroy data.

PC-cillin 98 incorporates advanced anti-virus technology and includes powerful features, such as MacroTrap-famous for anti-macro virus protection. The WebTrap function blocks the download of various Internet viruses, such as illegal Java applets and illegal ActiveX controls, to prevent the execution of dangerous programs.

PC-cillin 98 not only guards against 12,000 types of existing viruses, but protects your system from new types of viruses by automatically updating its virus pattern files and programs via the Internet.

Trend Micro has been researching state-of-the-art technology and developing techniques to protect computers from viruses and other illegal programs. However, as long as computer and telecommunication technologies continue to be developed, new types of viruses and illegal programs will likely continue. We must continue to develop new technologies to remain ahead of such negative developments and to continue to protect our computers from such viruses. Trend Micro is dedicated to this issue. We hope that Trend Micro products will continue to be of assistance to you, now and in the future.

Copyright (C) 1988-1998 Trend Micro Incorporated. All rights reserved.


PC-cillin 98 Features

? High speed and easy operation

The real-time virus monitoring function has been separated from the manual virus detect function is now memory resident. This enables you to recall the virus detect function for files and disks whenever necessary, and cuts down the amount of resident memory.

Also, by improving the operation of the program, a 197% speed up has been realized relative to the previous version, "PC-cillin II/PC-cillin 97" (based on benchmark tests conducted in-house).

? Macro Trap -- Detecting even unknown macro viruses

These days, macro viruses increasingly infect systems via E-mail attachments. Our famous MacroTrap not only detects and sterilizes macro viruses, but will even catch new strains of macro viruses that have yet to be identified.

? WebTrap -- Blocking malicious Java applets and ActiveX controls

PC-cillin 98 features the WebTrap function, which blocks the downloading of malicious Java applets and ActiveX controls via a web browser, such as Internet Explorer or Netscape Navigator.

? Update via Internet

You can update the the virus pattern file via the Internet or floppy disks.

? Handling Compressed Files and E-mail Attachments

PC-cillin 98 can detect viruses in attachments and compressed files without opening them. PC-cillin 98 can handle 3 formats of E-mail attachments and 12 formats of compressed files.

Compression file format

PKZIP, ARJ, LHA, TAR, GNU-ZIP, UNIX ZIP, UNIX compress,

MS-compress, PKLITE, LZEXE, DIET, Cabinet

E-mail attachment format

Uuencode, MIME, BinHex

? User interface

The user interface has been renovated. The new design is more refined and the interface is easier to use.


What are Virus Pattern Files?

The pattern matching method uses virus patterns to detect viruses. It involves a database of specific patterns that indicate the presence of a computer virus. A file that contains this database is called the virus pattern file. You need to update this file frequently to protect your computer from new viruses.

PC-cillin 98 enables you to automatically update the virus pattern file and program via the Internet, as well as via BBS, floppy disk, or CD-ROM.


Using PC-cillin 98

Real-time Monitor

WebTrap

? Scan

Manual Scan

? Configure

Manual Scan

Real-time Scan

Prescheduled Scan

Scan Exception

Internet

BBS

? Update

Manual Update

Automatic Update

? Log

Virus Log

Update Log

? Virus Info

Virus Information

Detectable List


Methods of Virus Scan

PC-cillin 98 provides 3 methods of virus scanning: manual scan, prescheduled scan, and real-time scan.

Manual Scan

PC-cillin 98 scans specified drivers and/or folders any time you execute the manual scan. Actions on virus found will be taken automatically unless you select the Pass on the Configure setting.

Prescheduled Scan

PC-cillin 98 automatically starts at a specified time and date, and performs scanning in the background. To use this function, the power to the computer must be turned on and the Real-time Monitor must be enabled.

Real-time Scan

Automatically scans files for viruses before the files are input or output, and eliminates detected viruses. The Real-time scan always performs virus scans, and stops viruses before they can do any harm to your system.


Actions on Virus Found

If viruses are found by PC-cillin 98, there are 4 actions that you can choose to process:

Access Denied

No action is taken. You will select a corrective action for a virus-infected file.

Clean

The virus will be cleaned from the file.

Delete

The infected file will be deleted.

Rename

The extension of the infected file will be changed so that the file is no longer executable.

Move

The infected file will be moved to a specified folder.


Real-time Monitor

When you install PC-cillin 98, the Real-time Monitor will be automatically executed every time you start the system. It displays the title screen and is docked to the taskbar. Double click the PC-cillin 98 icon in the task bar to display the Title window. Start up PC-cillin 98 application by clicking the Main button in the Title window.

When the Real-time Monitor is ON (a blue icon), all incoming and outgoing files will be monitored. If the infected file is about to be executed or opened, the Real-time Monitor shows a message and stops the operation.

This Real-time Monitor program scans viruses for incoming and outgoing files.


WebTrap

PC-cillin 98 features a WebTrap function that prevents Internet viruses (such as illegal java applets and ActiveX controls) from being downloaded without viewer’s awareness.  You can also update your virus pattern file, scan engine programs, and obtain the latest information from Trend Micro via Internet.

To setup WebTrap, click the Internet icon on the Configure bar, or select Internet from the Configure menu. After changing the WebTrap settings, you need to close then restart all browsers.

If you are using 2 or more borwsers, you need to manually change browser settings for those non-default browsers. Next is the setting procedure.

For Internet Explorer 4.0

1.Choose Start | Settings | Control Panel to open the Control Panel, and double-click the Internet icon.

2.Click Connections tab and check the Proxy Server setting. Click the Details button to display the Proxy setting window.

3.Enter the Proxy Address and Port to finish the proxy setting.

4.Click OK to close the Proxy setting window. Click OK again to close the Internet Property window.

If you cannot connect to the Internet after installing PC-cillin 98, you have to check the Proxy Setting. Some programs change Proxy Setting to the browser while installation. Please recover the Proxy Setting to the original setting for PC-cillin 98.

Please note that WebTrap works only when the Real-time Monitor is ON.


Manual Scan

You can select drivers and/or folders to scan by clicking the Scan Now button. Click the Scan Macro button will scan macro virus for files such as Microsoft Word or Excel files. You can also scan floppy disk's boot sector each time you insert a floppy disk to the driver by clicking the Scan Boot button.

Click on the item for more information.

Scan Macro scans Microsoft Word, Excel, and template files on local disks (includes floppy disk driver). You cannot select folders for this scan option.

    When you click Scan Macro button, all local disks will be scanned. If there is any network disk assigned, it will be scanned too. Network disk device will be scanned after finishing all local disk scanning.

You can setup actions on virus found in the Manual Scan Configure window. If you select one of the Clean, Delete, Rename, or Move action, the action which you selected will be processed automatically, cannot be terminated. If you select Access Denied, PC-cillin 98 will not process to the infected file.

See also

Manual Scan

Scan Dialog


Drive/Folder List

Click +/- symbol next to each device to show/hide sub-directories. If the driver/folder is checked, it becomes a scan target.


Refresh

Refresh the Drive/Folder List.


IDH_MANSCAN_STARTSCAN
Scan Now

To start scanning for viruses with PC-cillin 98. If the target drive or folder is not selected, this button appears inactive.


IDH_MANSCAN_SCANDOC
Scan Macro

Scan Microsoft Word, Excel files, and template file on all local drives and selected network drives.


IDH_MANSCAN_SCANFD
Scan Boot

Scan boot sector on a floppy disk. Clicking this button force PC-cillin 98 to scan a floppy disk even the floppy disk drive is not checked.


IDH_HELP
Help

Display the Help window.


Scan Window

While scanning, PC-cillin 98 displays the Scan Window. This window shows information, such as: scan status, detected virus and file name.

Click on the item for more information.

If you set the Action on Virus Found option to Clean, Delete, Rename, or Move, 4 buttons in the middle become disable.

    If you select Access Denied in the Action on Virus Found option, these 4 buttons become active when PC-cillin 98 detect viruses. Select the infected file, then click the button you want to process to the file.

    The Access Denied option is selected in the default setting.

Click the button to show detail information.


Stop

Stop scanning.


Pause

Pause scanning. After clicking the Pause button, it becomes Resume. Continue scanning by clicking the Resume button.


Actions

If Clean, Delete, Rename, or Move were selected in the Action on Virus Found option, these buttorns become disable because an action will be processed automatically. If you selected the Access Denied option, these buttons become active. You can select any button to process the infected file.


Close

Close the Scan Window, return to Manual Scan screen.


Action on Virus Found

Actions that you can choose to process the virus infected file. You can choose the Access Denied option if you want to process the infected file manually by yourself later. All other options allow PC-cillin 98 to process virus infected files automatically.

Current process

Display the current scan process.

File being scanned

Display the file name that being scanned.

The scan status bar displays the scan status.


Infected file name

Display file names with virus detected.

Virus Name

Display detected virus names.


Manual Scan

Set up the scan target files of manual scan, and actions to be taken when viruses detected on this window.

Click on the item for more information.

See Also

Configure File Type


Scan Options

Setting the files for virus scanning.


Scan All Files

If you select this radio button, PC-cillin 98 will scan all files (includes compressed files), no matter what file extensions you have selected in the Configure File Types window. Please refer to Configure File Types.


Selected Files

Check this radio button to activate the Configure File Types button. You can add or delete file extensions in the Configure File Types window.


Configure File Types

Adding or deleting scan target file extensions.


Always Scan Boot Area

The boot area will be scanned if this option checked.


Action on Virus Found

Setting up the process method to the infected file when detected any virus.


Access Denied

PC-cillin 98 will do nothing to the virus-infected files. You need to select the virus-infected file from the Scan window, then select Clean, Delete, Rename, or Move button to process the infected files.


Clean

The virus will be cleaned from the file.


Delete

The infected file will be deleted.


Rename

The extension of the infected file will be changed so that the file is no longer executable.

The file extension is changed to ".VIR". If another file with the same name and extension already exists, the extension of the infected file will be renamed to ".V01", "V02"....


Move

The infected file will be moved to a specified folder. The default destination folder is "C:\Program Files\PC-cillin 98\SUSPECT". You can change the move destination to any directory.


Action on Uncleanable Viruses

You can set up the action to be taken when cleaning a virus has failed for some reason.

Select an action to be taken from Access Denied, Delete, Rename, and Move.


Update

Save all changes. If you made any change to the setting, you need to click Update (or Cancel) before switching to other window.


Cancel

Ignore all changes, reset to previous setting.


Configure File Type

Select or delete the file extensions for virus scanning.

Default setting includes next extensions.

.BIN, .CLA, .CLASS, .COM, .DOC, .DOT, .EXE, .OBD,

.OBT, .OBZ, .OCX, .OVL, .SYS, .XLS, .XLT

Click on the item for more information.


Scan Target File Extensions

The extension list of the scan target files.


OK

Press this button to save the current settings and return to the scan setup window.


Cancel

Press this button to return to the scan setup window without saving the edited settings.


Add

Press this button to display the [Add Program File Extension] window. Enter a three-alphanumeric extension in the [Add Program File Extension] field, and click [OK].


Delete

Press this button to delete files with the specified extension. Select the extension you wish to delete in the [Program File Extension] window and click [Delete].


Default

Press this button to reset the scan file types to the default setting.


Compressed file

Press this button to enable you to add a compressed file extension to the list of scan target files.


Real-time Scan

Set up the Real-time Monitor to monite the incoming and outgoing files all the time.

Click on the item for more information.

See Also

Configure File Type


Real-time Scan Target Files

Select target files for Real-time monitor scanning.


Enable Real-time Scan

Checking this check box will enable Real-time virus scanning.


Scan Target Files

Incoming Files Only

Only files read from disk will be scanned for viruses.

Outgoing Files Only

Only files written to disk will be scanned for viruses.

Incoming/Outgoing Files

Both Incoming and Outgoing files are scanned.


Scan File Types

Select file types for virus scanning.

All Files

All files are scanned for viruses.

Selected Files

Only files with the specified extension will be scanned.


Prescheduled Scan

PC-cillin 98 automatically starts at a specified time and date, and performs scanning in the background. To use this function, the power to the computer must be turned on and the Real-time Monitor must be enabled.

Click on the item for more information.

The Prescheduled Scan will not be performed, if you select No Scan in the Frequency list in the Scheduled Scan Options.

If the Prescheduled Scan function is enabled, PC-cillin 98 automatically starts at the specified time on the specified day. When the PC-cillin 98 starts, the following window appears, showing that the scanning will be started to scan the specified drives in 10 seconds automatically. If you click OK to the window during the time is counting down, scanning starts right away. Click Cancel to skip the scanning.


Setting the Prescheduled Scan

Scan Frequency Select how often you want the scan to occur: Every Day, Once a Week, or Once a Month.

Time of Day Select the time of day at which you want the scan to occur.

Day of Week If you have selected Once a week for the Frequency field, specify the day of the week on which you want the scan to occur.

Day of Month If you have selected Once a month for the Frequency field, specify the day of the month you want the scan to occur.


Setting the Target Drive

Specify the drive(s) that you want to scan during prescheduled scanning. PC-cillin 98 will scan files (specified in the Scan Options setting in the manual scan configure screen) on the drive specified here.


Startup Scanning

Check on the check box to enable the function.

Always Run Startup Scan (will modify Autoexec.bat)

If you check this check box, PC-cillin 98 will start scanning when Windows is started.

Scan Memory

If you check this check box, PC-cillin 98 will scan the memory when the system is started.

Always Scan Boot Area

If you check this check box, PC-cillin 98 will scan the boot sectors when the system is started.


Scan Exception

To specify files to exclude from scan target. The maximum file and folder number that you can specify is 20.

Click on the item for more information.


Exception Files and Folders
Exception List

Display files and folders name with path that you selected for scan exception.


Adding Exception Files
Add File

Specify the files that you wish to exclude from scanning.


Adding Exception Folders
Add Folder

Specify the folders that you wish to exclude from scanning.


Deleting Exception Files and Folders
Delete

Delete files or folders from the Exception List. This will allow PC-cillin 98 to scan those deleted files an folders.

To do this, select file or folder from the list, then clich the Delete button.


Internet

You can update the virus pattern file and the program for PC-cillin 98 through the Internet or BBS.

You can set up the WebTrap and Proxy Server for Internet connection in this window. Furthermore, setting the Active Desktop and adding Items to the Active Channel can be configured here.

Click on the item for more information.

You need to enter all information to Address, Port, User ID, and Password fields in the HTTP Proxy Server Configuration area. If any information is not proper, you may fail the connection.

See Also

BBS

Manual Update

Automatic Update


WebTrap Option

Add WebTrap

If this check box is ON, the WebTrap become enable when your browser restarts. The proxy configuration will be changed automatically to monitor the illegal program downloading.


HTTP Proxy Server Configuration

You need to enter Proxy Server Address, Port, User ID, and Password to connect to Internet by using the Proxy Server. The connection may fail if any of above information is not entered or incorrect.


Active Scan Options

This option requires Internet Explorer 4.0. Also, the Active Desktop is required to work with Internet Explorer 4.0.


BBS

Set up the modem and BBS in this window.

Click on the item for more information.

Please don't change the User ID, Phone Number, and Password information in the BBS Configuration setting area.

Please refer to the User's Guide comes with the modem for setting the modem.

See Also

Internet

Manual Update


Modem Configuration

Comm. Port

Please select the comunication port that your modem connects to.

Baud Rate

Please select the Baud Rate the fits your modem.

Dial Method

Select the type of your phone line.

Initialize String

Enter the Initialize String for your modem if necessary.

Login Script

Do not change this information.


BBS Configuration

Enter information for BBS access in this window.

Phone Number

Please enter the BBS phone number. (Trend's BBS number)

Outside Line

Please enter the outside line access number if necessary.

User ID

Not changeable.

Password

Not changeable.


Manual Update

You may update your virus pattern files manually via the Internet, BBS, or floppy disk.

Click on the item for more information.

Perform the updating. The next message appears if the updating is completed.

PLease confirm version number and other information. Clock OK if everything is fine.

See Also

Internet

BBS

Automatic Update


Program Update

Internet

You may update your virus pattern files via Internet or floppy disks.


Pattern Update

BBS/Disk

You may update your virus pattern files using BBS, CD-ROM, or floppy disk. Notes that only virus pattern files can be updated by these methods.


Date of Last Update

Display the last date that you updated virus pattern files and program. If you don't use the Automatic Update feature, this is the information for you to refer for the updating.


Update Pattern Status

Display the update status.


Stop

Stop updating.


Automatic Update

If your system can be connected to Internet at any time, PC-cillin 98 can update your virus pattern files and the program by automatically connecting to the Internet at a scheduled time. You can specify the update time interval and update time and date in this window.

Click on the item for more information.

See Also

Internet

Manual Update


Enable Startup Update

Specify the time interval for updating.

Update after startup

Set an interval (in ten minute steps) between the startup of the Real-time Monitor and the first update.

Succeeding updates, every

Set an interval (in hour steps) between the consecutive updates.


Enable Update by Date

Specify the date and time for updating.

Frequency

Select Everyday, Once a Week, or Once a Month for the Frequency field.

Time

Set the time at which PC-cillin 98 will update the virus pattern files and program.

Day of Week

Select the day of the week of update. This field is enabled when Once a Week has been selected for the update frequency.

Day of Month

Set the date of update. This field is enabled when Once a month has been selected for the update frequency.


Only Update Virus Pattern File

If this check box is ON, only the virus pattern files will be updated automatically. If you want to update both virus pattern files and program, please check OFF this option.


Virus Log

Display the virus detected. Logs are organized by the date, so you can click the date to show the virus log.

You can delete or print the virus log.

Click on the item for more information.


Log File Update

Click the Refresh button to display the latest log.


Log File Output

Save a log in the CSV format (text delimited by commas).


Log File Delete

Select a date for the log to delete. The message "Delete all logs for the selected date?" appears for your confirmation. Click Yes to delete the log.


Log Date

Show the date of the selected virus log.


Virus Log

Display log details.

Time

Time at which the virus was found

Virus File Name

The name of the file infected with the virus

Virus Name

The name of infecting virus

Action on Virus Found

The action taken when the virus was found

User Name

The user name logged in Windows will appear.

Scan Type

Manual scan or real-time scan option will be displayed. If prescheduled scanning detects viruses, "Manual scan" appears here.


Update Log

Display the virus pattern file and the program update log on the Internet. Please click the date which you want to display.

Click on the item for more information.

If the updating complete, next message appears.

Please confirm the virsion number, click Close after all information confirmed.


Release Note

Display the Release Note which will be downloaded with virus pattern files and program. This Release Note describes virus pattern files and program changes and important information. We recommand you to read the Release Note before updating. Click OK after reading the Release Note.


Date

Display logs of updating by date. Click the date for which you want to see the update detail.


Update Log

Time

Download time.

Download

Updated files.

Status

The result of updating.

Success: Update completed.

Fail: Failed to update. Both pattern file and program are not updated.


Virus Information

Display virus detail information.

Click on the item for more information.


Print

Print the virus information. Please make sure that printer is connected and power is ON before printing.


Virus Type

Choose the virus type about which you want (General, Boot Sector, Parasitic, Macro) information. Detailed information for the corresponding viruses appears on the display.


Virus Name List

Display the detectable viruses categorized by different virus types. Click a virus name for detail information.


Detail Information

Display the detailed information of the virus selected from the Virus Name List.


Virus List

Display the PC-cillin 98 virus detectable list.

Click on the item for more information.


Detectable List

This list shows all the viruses that can be detected using the current virus pattern file.


Print

Print the list of detectable viruses. To print the entire list, you will need more than 60 sheets of letter size paper.


What are Computer Viruses?

A computer virus is a piece of executable code (program) that attaches itself to operating system files, executable files, boot sectors or partition tables, or data files of applications such as Microsoft Word and Excel. Viruses have the unique ability to replicate and, in some cases, may deliver a payload or damage routine. The damage routine is the part of the viral program that, when activated, attempts to destroy data, display messages or images, or perhaps play music. The type and extent of damage varies from virus to virus. Some viruses are programmed to simply replicate, but this too may cause system performance problems.

Detailed types of computer viruses

Boot Sector viruses 	Parasitic viruses

Multi-partite viruses 	Overwriting viruses

Direct Action viruses 	TSR viruses

Stealth viruses  	Mutation, or Polymorphic viruses

Network viruses 	Macro viruses


Boot Sector viruses

Floppies and hard drives are the most susceptible to being overwritten by a boot sector virus, most of which are resident in memory.


Parasitic viruses

A parasitic virus infects executable program files (i.e., .COM, .EXE, or .SYS files). Macro viruses also can infect data files and are sometimes regarded as parasitic viruses.


Multi-partite viruses

Multi-partite viruses can infect both executable files and the boot sector of your computer's hard drive.


Overwriting viruses

Parasitic viruses, an overwriting virus overwrites the data of the infected files. This type of virus cannot be eliminated.


Direct Action viruses

Parasitic viruses, a direct-action-virus loads itself into memory to infect other files and then unloads itself. It does not reside in memory.


TSR viruses
TSR viruses (terminate and stay resident)

Parasitic viruses. TSR viruses reside in memory and attach themselves to executable programs. Boot Sector viruses are also included in the category of TSR viruses.


Stealth viruses
Stealth viruses (TSR viruses)

Stealth viruses modify themselves to avoid detection by most anti-virus scanning programs and users.


Mutation, or Polymorphic viruses
Mutation, or Polymorphic viruses (TSR viruses)

Parasitic viruses. Mutation (polymorphic) viruses are unique in that they are designed to elude detection by changing their structure after each execution. This makes it harder for normal anti-virus programs to detect or intercept them.


Network viruses
Network viruses (Parasitic viruses)

Network viruses can invade the security function of the network OS to spread within the network environment. (Boot Sector viruses cannot spread via network.)


Macro viruses

A type of Parasitic virus. Macro viruses infect the data files of some programs. Since a macro virus is written in the macro language or the language of an application, it can spread to any machine that runs the application, regardless of whether the system is a PC, Mac, or something else.


Registration and Support Service
Support Service

Please refer to [Technical Support] in the [About] of the main program’s Help menu.


Support Center

Please refer to [Technical Support] in the [About] of the main program’s Help menu.