********************************************************************** ** ** ** Norton AntiVirus: Virus Definitions Files Update UPDATE.TXT ** ** ** ** Symantec AntiVirus Research Center (SARC) August 8, 1996 ** ** ** ********************************************************************** This document contains the following topics: * General Information * Intelligent Updater * Update instructions for Norton AntiVirus 3.0 (DOS/Windows 3.x) * Update instructions for Norton AntiVirus for Windows 95 * Update instructions for Norton AntiVirus for NetWare (versions 1.0 and 2.0) * Update instructions for Norton AntiVirus 3.0 Network Manager * Update instructions for Norton AntiVirus Scanner for Windows NT * List of files contained in this update ********************************************************************** ** General Information ** ********************************************************************** Please read the AUG96B.TXT and VIRSPEC.TXT files included with this update. AUG96B.TXT contains a detailed list of the new virus definitions and a summary of current virus activity around the world. VIRSPEC.TXT contains information about new virus threats and special instructions necessary to recover from infection by certain unique viruses. We welcome your comments and suggestions. Post them wherever you download this file. Thank you for using Symantec's Peter Norton products. ********************************************************************** ** Intelligent Updater ** ********************************************************************** As part of its continuing commitment to fight the spread of computer viruses, Symantec has developed a new program called "Intelligent Updater" to simplify virus definitions files updates. Intelligent Updater locates Norton AntiVirus on your computer and installs new virus definitions files automatically. All you have to do is run the program. The actual program name for Intelligent Updater, which changes from month to month, uses the following form: mmNAVyy.EXE, where mm is the month and yy is the year. For example, mmNAVyy.EXE -- 08NAV96B.EXE -- is the virus definitions file update for July, 1996. Later sections of this document give step-by-step instructions to run the program for each Norton AntiVirus version. ********************************************************************** ** Norton AntiVirus 3.0 UPDATE.TXT ** ********************************************************************** ** ** ** IMPORTANT NOTICE: Norton AntiVirus 3.0 (DOS/Windows 3.x) ** ** ** ** If your version of Norton AntiVirus 3.0 (NAV.EXE or NAVW.EXE) ** ** is dated earlier than February 23, 1996, you need to upgrade. ** ** The Norton AntiVirus upgrade installs the NAV Macro Engine, ** ** which detects and eliminates a new class of viruses called ** ** "macro viruses." These viruses infect Microsoft Word document ** ** and template files. ** ** ** ** To upgrade your Norton AntiVirus program, download the file ** ** called "UPDATEME.EXE." Place it in an empty directory and ** ** execute the file. This will install the NAV Macro Engine ** ** automatically. Step-by-step instructions are included with ** ** the file. ** ** ** ** UPDATEME.EXE is located where the monthly virus definitions ** ** files update are normally found. It is available for download ** ** from the Symantec BBS, the Symantec FTP or Web sites, ** ** CompuServe, America Online, or Microsoft Network. You can ** ** also call Customer Service at (800) 441-7234 to order a ** ** disk set. ** ** ** ********************************************************************** ********************************************************************** To update Norton AntiVirus 3.0 virus definitions files, use one of the following procedures. Either procedure will update both the Norton AntiVirus 3.0 DOS and Windows components. To update Norton AntiVirus 3.0 virus definitions files from Windows: 1. From the Program Manager File menu, choose Run. 2. Click Browse to locate 08NAV96B.EXE. This is the virus definitions update program you downloaded. 3. Click OK to close the Browse dialog box. 4. Click OK to run the update program. 5. Follow any instructions displayed on the screen. The program will locate your installed version of Norton AntiVirus and perform the virus definitions files update automatically. 6. Start Norton AntiVirus and scan a drive, directory, or file. This activates the new virus definitions. 7. Restart your computer so that the Auto-Protect TSR uses the new definitions as well. To update Norton AntiVirus 3.0 virus definitions files from DOS: 1. From a DOS prompt, change to the directory where you downloaded the virus definitions files update program. 2. Type 08NAV96B.EXE and press Enter. 3. Follow any instructions displayed on the screen. The program will locate your installed version of Norton AntiVirus and perform the virus definitions files update automatically. 4. Start Norton AntiVirus and scan a drive, directory, or file. This activates the new virus definitions. 5. Restart your computer so that the Auto-Protect TSR uses the new definitions as well. ********************************************************************** ** Norton AntiVirus for Window 95 UPDATE.TXT ** ********************************************************************** ** ** ** IMPORTANT NOTICE: Norton AntiVirus for Windows 95 ** ** ** ** If your version of Norton AntiVirus for Windows 95 (NAVW32.EXE) ** ** is dated earlier than December 1, 1995, you need to upgrade. ** ** The Norton AntiVirus upgrade installs the NAV Macro Engine, ** ** which detects and eliminates a new class of viruses called ** ** "macro viruses." These viruses infect Microsoft Word document ** ** and template files. ** ** ** ** To upgrade your Norton AntiVirus program, download the file ** ** called "NAV95PCH.EXE." Place it in an empty folder and ** ** execute the file. This will install the NAV Macro Engine ** ** automatically. Step-by-step instructions are included with ** ** the file. ** ** ** ** NAV95PCH.EXE is located where the monthly virus definitions ** ** files update are normally found. It is available for download ** ** from the Symantec BBS, the Symantec FTP or Web sites, ** ** CompuServe, America Online, or Microsoft Network. You can ** ** also call Customer Service at (800) 441-7234 to order a ** ** disk set. ** ** ** ********************************************************************** ********************************************************************** To update Norton AntiVirus for Windows 95 virus definitions files: 1. From a My Computer, Windows Explorer or Norton Navigator window, double-click the 08NAV96B.EXE program. 2. Follow any instructions displayed on the screen. The program will locate your installed version of Norton AntiVirus and perform the virus definitions files update automatically. 3. Start Norton AntiVirus and scan a drive, folder, or file. This activates the new virus definitions. 4. Restart your computer so that Auto-Protect uses the new definitions as well. ********************************************************************** ** Norton AntiVirus for NetWare (1.0 and 2.0) UPDATE.TXT ** ********************************************************************** ** ** ** IMPORTANT NOTICE: Norton AntiVirus for NetWare version 1.0 ** ** ** ** If your version of Norton AntiVirus for NetWare 1.0 is dated ** ** earlier than July 13, 1994, you need to upgrade your copy of ** ** Norton AntiVirus. Using older versions of the NLM with the ** ** new virus definitions may generate false alarms with garbled ** ** virus names. ** ** ** ** For information on how to receive the upgrade, call Customer ** ** Service at (800) 441-7234. ** ** ** ********************************************************************** ********************************************************************** To update Norton AntiVirus for NetWare (versions 1.0 or 2.0) virus definitions files: 1. Map a drive letter to the volume and directory where Norton AntiVirus for NetWare is installed. You must have WRITE access to the mapped drive. 2. Disable the Norton AntiVirus for NetWare NLM. Use either the Norton AntiVirus for NetWare Windows configuration component or function keys at the server console to disable the NLM. 3. From a DOS prompt, type 08NAV96B.EXE [path] and press Enter. [path] is the location mapped in step 1. 2. Follow any instructions displayed on the screen. The program will perform the virus definitions files update automatically. 3. Enable the Norton AntiVirus for NetWare NLM. Use either the Norton AntiVirus for NetWare Windows configuration component or function keys at the server console to enable the NLM. ********************************************************************** ** Norton AntiVirus Network Manager UPDATE.TXT ** ********************************************************************** The Norton AntiVirus Network Manager maintains a network copy of Norton AntiVirus to support distribution. Make sure you have access rights that allow READ and WRITE operations to the NAV directory. To update Norton AntiVirus Network Manager virus definitions files: 1. Map a drive letter to the volume and directory where Norton AntiVirus is installed. You must have WRITE access to the mapped drive. 2. From a DOS prompt, type 08NAV96B.EXE [path] and press Enter. [path] is the location mapped in step 1. 3. Follow any instructions displayed on the screen. The program will perform the virus definitions files update automatically. 4. Log in as a user with WRITE access to the Navnet directory, start Norton AntiVirus from the Navnet directory, and scan a drive, directory, or file. This activates the new virus definitions. 5. If your version of Norton AntiVirus Network Manager (NAVNET.EXE) is dated July 1, 1995 or earlier, you must modify your NNS configuration file to install/distribute all update files. The default configuration file is _DEFAULT.NNS. A. Add the following to the [InstallFiles] section of your NNS file: [InstallFiles] VIRSP*.DAT NAVEX*.* B. Add the following to the [DefinitionUpdateFiles] section of your NNS file: [DefinitionUpdateFiles] VIRSP*.DAT NAVEX*.* These additions ensure that the new virus definitions files are distributed across the network. ********************************************************************** ** Norton AntiVirus Scanner for NT UPDATE.TXT ** ********************************************************************** To update Norton AntiVirus Scanner for NT virus definitions files: 1. At a command prompt, change to the folder where you downloaded the virus definitions files update program. 2. Type 08NAV96B.EXE and press Enter. 3. Follow any instructions displayed on the screen. The program will locate your installed version of Norton AntiVirus and perform the virus definitions files update automatically. 4. Start Norton AntiVirus and scan a drive, folder, or file. This activates the new virus definitions. ********************************************************************** ** List of files contained in this update UPDATE.TXT ** ********************************************************************** UPDATE.TXT This file. AUG96B.TXT Text file that describes what's new in this update. VIRSPEC.TXT Text file with special instructions for specific viruses. VIRSCAN.DAT Main virus definitions file. Replaces your existing VIRSCAN.DAT file. VIRSCAN.INF Data file used for informational displays, such as virus characteristics and behavior. This file is not required to detect or eliminate viruses. NAVEX.DAT External detect/repair database for DOS NAV NAVEX.NLM External detect/repair database for NAV for NetWare NAVEX.VXD External detect/repair database for NAV for Windows 95 NAVEX16.DLL External detect/repair database for NAV for Windows 3.x NAVEX32.DLL External detect/repair database for NAV for Windows 95/NT VIRSCANM.DAT Macintosh virus database used by Norton AntiVirus for NetWare 1.0 and 2.0 VIRSPAA.DAT Detection for Annoying.4060 VIRSPBB.DAT Repair for Quicky.1376 VIRSPBU.DAT Repair for Burglar.1150 VIRSPBY.DAT Repair for Byway VIRSPCB.DAT Detection and repair for Crazy Boot VIRSPCR.DAT Repair for Cruel Boot VIRSPDB.DAT Repair for Da'Boys VIRSPDH.DAT Repair for Die Hard VIRSPEM.DAT Repair for Emmie.2702, Emmie.2823, Emmie.3097 VIRSPET.DAT Repair for Ether VIRSPFZ.DAT Repair for Fairz VIRSPGZ.DAT Repair for Godzilla VIRSPJA.DAT Repair for Bad_Head VIRSPLR.DAT Repair for Little Red.1465 VIRSPNA.DAT Detection for Sat_Bug.Natas VIRSPNQ.DAT Detection for Neuroquila VIRSPNR.DAT Repair for Neuroquila VIRSPPC.DAT Repair for CPW VIRSPPP.DAT Detection for Predator VIRSPR0.DAT Repair for Frankenstein VIRSPRM.DAT Repair for Roma.PG VIRSPSF.DAT Repair for Scream Fist.652 VIRSPSM.DAT Detection for SMEG VIRSPUK.DAT Repair for Unknown.1329 VIRSPUR.DAT Repair for Urkel VIRSPWD.DAT Detection file for the MS Word macro family of viruses (Colors, Concept, DMV, FormatC, and Nuclear). VIRSPWW.DAT Repair for Werewolf.1500 & Werewolf.1500 (2) VIRSPYA.DAT Repair for Yesmile VIRSPZA.DAT Repair for Zarma **********************************************************************