Online Praxis 1998 March

home *** CD-ROM | disk | FTP | other *** search

/ Online Praxis 1998 March / Image.iso / CD-ROM / TOOLS / VIREN / VNPC95.EXE / VNDOS.HLP < prev next >

Wrap

Text File | 1996-03-14 | 30.6 KB | 705 lines

.TOPIC: Contents VirusNet is an anti-virus program which provides virus scanning and removal. Also included is a memory resident program which checks for viruses quietly in the background. VirusNet can scan DOS, network and OS/2 HPFS drives. Click the mouse over one of the topics below for more information. Or press TAB to select a topic then press ENTER to jump to it. Express Scan Main Menu Curing A Virus Infection Using Menus and Commands Using Dialog Boxes Keystroke Help Using Help .TOPIC: Express Scan Express Scan is the fastest way to scan for viruses. Just select the Begin Scan button and the scanner will begin scanning the drive highlighted in the Scan One Drive window. To scan all Local or All Network Drives, select the appropriate choice in the Scan Multiple Drives window. A description of the action the scanner will take is displayed in the Action window. The scanner will use any options which have been set under the Options|Set Options menu choice. If a Secure or Heuristic scan is performed, the Scan Results window will be displayed. ╔══════════════╗ Starts scanning the drive indicated in the ║ Begin Scan ║ Drive to Scan window. ╚══════════════╝ ┌──────────────┐ Views this help information. Also, press F1 │ Help │ for context-sensitive help. └──────────────┘ ┌──────────────┐ │ Exit │ Exits VirusNet and returns to DOS. └──────────────┘ Drive to Scan ┌───────────────────────┐ Highlight the letter of the │ A: [Volume Label A:] │ drive you wish to scan. Then │ B: [Volume Label B:] │ select the Begin Scan button │ C: [Volume Label C:] to scan the highlighted drive └───────────────────────┘ letter. Scan Multiple Drives ┌───────────────────────┐ Select the appropriate choice depending │() Scan One Drive │ on the action you wish to take. If you │( ) All Local Drives │ do not have network access, the network │( ) All Network Drives │ drives option will not be displayed. └───────────────────────┘ .TOPIC: Notepad The Notepad allows you to view, edit, save, append and print log reports and virus information. Once the scanner has completed its scan, choose the Details button from the Log File Summary window. The Notepad is activated with the full results of the scan. It can also be activated from the Options menu. Using the Notepad: ■ To activate the Notepad menu bar, press the <Alt> key when the Notepad is the active window. ■ To activate menus and commands, press the highlighted letter. ■ To move between menus and commands, use the direction keys. ■ To get help on a selected menu, command, or dialog box, press F1. ■ To exit Help, press Esc. ■ To select one of the following topics, press the Tab key or the first letter of the topic. Then press the Enter key to see information on: Using Menus and Commands Keystroke Help .TOPIC: Using Menus and Commands ──────────────────────────────────────────────────────────────────────────── Use the menu bar at the top of the screen to select menus and commands. Menu action With a mouse... With a keyboard... ═════════════════ ═════════════════════════ ═════════════════════════ Display a menu. Move the mouse pointer to Press Alt to highlight the menu name, then press menu letters, then press and release ("click") the the letter key for the mouse button. menu you want to display. Choose a command. Click the command name. Press the letter key that matches the highlighted letter on the command. Cancel a command. Click outside the menu. Press Esc. .TOPIC: Keystroke Help ─────────────────────────────────────────────────────────────── Character left Left Arrow Character right Right Arrow Word left Ctrl+Left Arrow Word right Ctrl+Right Arrow Line up Up Arrow Line down Down Arrow Page up PgUp Page down PgDn ─────────────────────────────────────────────────────────────── Beginning of current line Home End of line End ─────────────────────────────────────────────────────────────── Top of file Ctrl+Home Bottom of file Ctrl+End ─────────────────────────────────────────────────────────────── Delete one character to left of the cursor Backspace Delete one character at the cursor Del Delete selected text Del .TOPIC: Using Dialog Boxes Dialog box action With a mouse... With a keyboard... ═════════════════ ═════════════════════════ ═════════════════════════ Select a text box Move the mouse pointer to Press Tab until the for input. the text box, then press cursor is in the text and release ("click") the box. mouse button. Choose an item Double-click the item. Highlight the item by from a list box. pressing the direction keys, then press Enter. Choose an option. Click the option. Move to an option with the direction keys. Turn a check box Click the check box. Use Tab to move the on or off. cursor to the check box, then press the Spacebar. Choose a command Click the command button. Use Tab to move the button. cursor to the command button, then press Enter. .TOPIC: Main Menu ┌──────────────────────── │ Scan Options Help ░░░░░░░░░░░░░░░░░░░░░░░░ The Main Menu allows you to gain more control over the scanner through various pull-down menu choices. The Scan Menu allows you to select the file, directory or drive you wish to scan, as well as access the Express Scan menu. The Rescue Disk, which can save and restore information which makes your computer startup, is also accessed here. The Options Menu allows you to customize scanner options, view the virus list and audit log, and adjust the display. For help with the menu choices, select one of the following topics by highlighting it with the Tab key or clicking on it with the mouse. Scan Menu Options Menu .TOPIC: Scan Menu The Scan Menu allows you to select the Drive, Directory, or File you wish to scan. It provides greater control than the Express Scan Window, in that a particular file or directory can be scanned. The express scan window is displayed below. ┌───────────────┐ │ Drive... │ │ Directory... │ │ File... │ ├───────────────┤ │ Express Scan │ ├───────────────┤ │ Rescue Disk │ ├───────────────┤ │ Exit │ └───────────────┘ Selecting "Drive" will display the Drive Window, which will display a list of drives that can be scanned. Similarily, selecting "Directory" will display the Directory Window, allowing you to choose a specific directory to scan. Selecting "File" will open the File Window, allowing you to scan a particular file for viruses. The Express Scan choice displays the initial scanning window. Rescue Disk accesses recovery features including Boot Track, Partition Table, and CMOS information. For help with these menu choices, select one of the following topics by highlighting it with the Tab key or clicking on it with the mouse. Drive Window Directory Window File Window Express Scan Rescue Disk Using Menus and Commands Using Dialog Boxes Keystroke Help .TOPIC: Drive Window The Drive Window displays the available floppy, hard, RAM, CD-ROM and network drives accessible to the system. Highlight the letter of the drive you wish to scan and select the Begin Scan button. ┌┤■├── Select Drive To Scan ───┤├┐ │ │ │ ┌─────────────────────────────┐ │ │ │ A: [Volume A:] │ │ │ B: ░ │ │ │ C: [MS-DOS_6] ░ │ │ │ D: [MS-RAMDRIVE] ░ │ │ │ F: [\\DTK\SYS] ░ │ │ │ G: [\\DTK\SYS2] ░ │ │ └─────────────────────────────┘ │ │ ╔════════════╗ ┌────────────┐ │ │ ║ Begin Scan ║ │ Cancel │ │ │ ╚════════════╝ └────────────┘ │ └─────────────────────────────────┘ Once the drive is scanned, the Log File Summary window will be displayed. Select the Details button to view the complete results of the scanner in the NotePad. Depending on the settings of the Options Menu, scanning network drives may be prevented and will not be displayed in the window. For help selecting dialog choices, select one of the following topics by highlighting it with the Tab key or clicking on it with the mouse. Using Menus and Commands Using Dialog Boxes Keystroke Help .TOPIC: Directory Window The Diretory Window allows you to select a specific directory that should be scanned for viruses. Highlight the directory to be scanned and select the Begin Scan button. If the directory is on a different drive, select that drive and then the appropriate directory. Once the directory is scanned, the Log File Summary window will be displayed. Select the Details button to view the complete results of the scanner in the NotePad. Depending on the settings of the Options Menu, scanning network drives may be prevented and will not be displayed in the window. ┌┤■├───── Select Directory to Scan ─────┤├┐ │ │ │ Directories: │ │ C:\ │ │ ┌─────────────────────┐ ┌───────────┐ │ │ │ PROFILE │ Begin Scan│ │ │ │ PUBLIC ░ └───────────┘ │ │ │ QAPLUS ░ ┌───────────┐ │ │ │ QM │ Cancel │ │ │ │ QMPRO ░ └───────────┘ │ │ │ SAFER │ │ └─────────────────────┘ │ │ │ │ Drives: [C: [MS-DOS_6] ] │ │ │ └──────────────────────────────────────────┘ For help selecting dialog choices, select one of the following topics by highlighting it with the Tab key or clicking on it with the mouse. Using Menus and Commands Using Dialog Boxes Keystroke Help .TOPIC: File Window The File Window allows a particular file to be scanned from any accessible drive and directory. Select the Drive, Directory, and finally the File that you wish to scan. To filter out files that are not likely to be infected by viruses, make sure that the "List Files of" selection is set to Program Files. By clicking on the arrow key next to this selection, or by pressing the Tab key until this selection is highlighted, the File List can include All Files or just Program Files. You can also select a custom File Name filter by moving to the File Name field and typing in any valid DOS file or file pattern. Press Enter to see all files that match the particular pattern. ╔╣■├──────────────── Select a File to Scan ─────────────────┤╠╗ ║ ║ ║ File Name: Directories: ║ ║ [*.exe;*.com;*.ov?] C:\QM ║ ║ ║ ║ ┌─────────────────┐ ┌──────────────────┐ ┌───────────┐ ║ ║ │ QM.EXE │ C:\ │ Begin Scan│ ║ ║ │ QMGATE.EXE │ QM └───────────┘ ║ ║ │ QMHOSTPK.EXE ░ │ OLX ░ ┌───────────┐ ║ ║ │ QMPRO.OVR ░ │ DOWNLOAD ░ │ Cancel │ ║ ║ │ ░ │ SCRIPTS ░ └───────────┘ ║ ║ │ │ RIPICONS ║ ║ └─────────────────┘ └──────────────────┘ ║ ║ List Files of Drives: ║ ║ [Program Files ] [C: [MS-DOS_6] ] ║ ║ ║ ╚══════════════════════════════════════════════════════════════╝ After the scan has been completed, the NotePad window will be displayed. Depending on the settings of the Options Menu, scanning network drives may be prevented and will not be displayed in the window. For help selecting dialog choices, select one of the following topics by highlighting it with the Tab key or clicking on it with the mouse. Using Menus and Commands Using Dialog Boxes Keystroke Help .TOPIC: Options Menu Options Menu Help .TOPIC: Scanner Options The Options Menu allows you to customize the actions of the scanner to your particular needs. Options can be prevented from being modified through the Password button on this screen (See Access Password). Each option and category is described below: ┌┤■├─────────────────── VirusNet Scanner Options ──────────────────────┐ │ │ │ Scanner Action Scan Type Scan Location │ │ ┌─────────────────┐ ┌────────────────┐ ┌─────────────────────┐ │ │ │ () Report Only │ │ () Secure │ │ () Standard Files │ │ │ │ ( ) Disinfect │ │ ( ) Heuristics │ │ ( ) All Files │ │ │ │ ( ) Delete │ │ │ │ │ │ │ │ ( ) Rename │ │ ( ) Checksum │ │ [X] Boot Sectors │ │ │ └─────────────────┘ └────────────────┘ └─────────────────────┘ │ │ │ │ [ ] Automatically process infected files (no user interaction) │ │ [X] Allow scanner to be interrupted │ │ [X] Audible alert if virus is found │ │ │ │ Rescue Data Full Pathname: [A:\RESCUE.VN ] │ │ CRC Scanner Data File: [CRC.VN ] │ │ │ │ ┌──────────┐ ┌──────────┐ ┌──────────┐ │ │ │ Save │ │ Accept │ │ Cancel │ │ │ └──────────┘ └──────────┘ └──────────┘ │ └──────────────────────────────────────────────────────────────────────┘ ■ Scanner Action window allows you to select one of four choices: 1. Report Only - Does not change any infected files. A report of the scanner's findings will be displayed in the NotePad window. 2. Disinfect - Remove, if possible, any viruses found. If a virus cannot be removed, the file will be overwritten and deleted. Files infected with new or modified viruses may be renamed with a .VXE and .VOM extension. 3. Delete - Infected files will be overwritten and deleted. 4. Rename - Infected EXE files will be renamed to VXE and infected COM files will be renamed to VOM. Similarly, other files will have the first letter of their file extension changed to V. ■ Scanner Type window determines detection method used by the scanner. 1. Secure - Provides the most precise scans, and is the only Type that can be selected if viruses are to be Disinfected, Deleted, or Renamed. 2. Heuristic - Combines the Secure scan with behaviorial analysis to detect existing and new viruses. This method is experimental and may produce false alarms. It should only be used by experienced users. 3. Checksum - Calculates a mathematical signature of the Master Boot record (Partition Table), DOS Boot Record, and program files. If a virus-like change is made to a file, the Checksum is able to detect it. The checksum is highly effective at detecting unknown viruses, since it can detect any virus-like change in a program file. ■ Scanner Location window allows you to select where the scanner will search. The options are as follows: 1. Standard Files - Scans files with extentions which are likely to be infected by a virus. These include COM, EXE, overlay, system and other files. This is the recommended way to scan for viruses unless an infection has already been detected. In this case, the "All Files" option should be selected. 2. All Files - Scans every file for viruses, including data files. Selecting this option will dramatically increase the length of time it takes to complete the scan. It should only be used when recovering from an infection. 3. Boot Sectors - If selected, the scanner will scan all boot sectors on the selected drive. ■ Automatically process infected files (no user interaction) - Select this choice if you will allow the scanner to be stopped by pressing the <Escape> key during the scan. If it is left blank, the scan cannot be stopped. Note: This choice is in effect during Secure scan only. ■ Audible alert if virus is found - When a virus is found after Secure scan is completed, the Log File Summary window will be displayed with a red border. If this option is selected, a pulsing alert will come from the PC speaker. ■ Rescue Data Full Pathname - The Rescue Disk can save information used to recover a PC on a floppy disk, network drive, or hard drive. Type in the location and file name you wish to use for the Rescue Disk information. Note: Do not store the rescue file permanently on a hard disk, since the file will not be accessible if the hard drive becomes corrupted. ■ CRC Scanner Data File - Type in the filename to store checksum information stored by the Checksum Scanner. The file will be stored in the root directory of each drive scanned. Its attributes are set to Read Only, System, and Hidden so that it will not be deleted by mistake. ┌──────────┐ │ Save │ Saves the option and password changes. └──────────┘ ┌──────────┐ Accepts the changes but does not save them. Changes can │ Accept │ be saved in the quit window before exiting the program. └──────────┘ ┌──────────┐ │ Cancel │ Restore any changes to the original values. └──────────┘ .TOPIC: Curing A Virus Infection (The following steps are also printed on the VirusNet First Aid Card.) 1. If you are currently working in a program, save your work, and exit the program. 2. Turn off the computer for at least 10 seconds. 3. Find your original bootable DOS disk and make sure it is write protected. Write-Protecting Disks 5¼" disks : Put a write protect label over the notch on the right side of the disk. 3½" disks : The notch on the right side of the disk must be open for the disk to be write protected. 4. Insert the write-protected DOS disk into the A: drive and turn the computer on. 5. After the computer has booted, insert a write-protected copy of VirusNet into drive A: (You may use drive B: if you wish, just substitute B: for A: in the examples below.) 6. To find and remove viruses, type the following command: A:VN /HARD /DISINF 7. If VirusNet has been installed on the hard disk, you may run VN.EXE to start the scanner. However, if a virus is already in memory, the scanner will become infected when it is run, possibly preventing it from running properly. For this reason, it is recommended to run the scanner from a write-protected floppy disk. 8. VirusNet will scan all programs on the hard drive for viruses, and any viruses found will be automatically removed. Infected program files which cannot be recovered will be deleted. When scanning is complete, you can view the report of its virus scan findings. 9. If a virus is found when VirusNet does its memory check, your bootable DOS disk is also infected. Find another write-protected bootable DOS disk, insert it into drive A:, and reboot the computer. Follow Step 4 above until no virus is found by the memory virus check. 10. Skip to Step 12 if you do not have any floppy disks which you suspect are infected by a virus. If you do have disks that may be infected, insert one of them into drive B: and type: A:VN B: /MULTI /DISINF 11. After each disk is scanned, another disk may be inserted into the B: drive and scanned. 12. When scanning is finished, remove all disks from the floppy drives and reboot your computer. 13. After the computer has booted from the hard disk, insert the write-protected VirusNet disk into the floppy drive and run VN.EXE. 14. If you receive a message that the memory is infected, repeat the virus removal procedure from Step 2. When the scanner does not report a memory virus in Step 12, your virus problem has been corrected and you may safely use your computer. .TOPIC: Using Help Selecting a Help link: ---------------------- With a mouse - click on phrases outlined by two triangles. With the keyboard - Press TAB or Shift-TAB to select a link. Press ENTER to jump to that topic. Scrolling the Help window: -------------------------- With a mouse - click on the horizontal or vertical scroll bars. With the keyboard - press the cursor navigation keys. Closing the Help window: ------------------------ With a mouse - double click on the window's control box icon. With the keyboard - press Ctrl-F4. Command Buttons: ---------------- Applications may use one or more of the following command buttons. Use a mouse to click a button or press the letter mentioned below. Contents - displays a table of contents for the application's Help. Press C to select Contents. Search - opens a dialog box that lists all available Help topics. Select a topic from the list box and press ENTER. Press S to select Search. Back - jumps to the last Help topic viewed. Press B to select Back. History - lists the last 20 Help topics viewed. Jump to a topic by selecting from the list box and pressing ENTER. Press T to select History. Copy - Copies the contents of the current Help topic into an edit area. Select the text you want copied to the Clipboard and choose Copy. Choosing Copy without selecting any text in the edit area copies the entire Help topic to the Clipboard. Press P to select Copy. .TOPIC: Log File Summary An overview of the scaner results is displayed in this window. If no virus is found, a pleasant message will be displayed at the top of the window. If a virus or suspicious file is found, the window border will be displayed in red and an audible alert will be made. One of three messages is displayed in the summary window: 1. ░░░░░░░░ Good News! No Virus Infection Found. ░░░░░░░░ This message is displayed when no infected or suspicious files have been found. 2. ░░░░░░░░░░░░ POSSIBLE VIRUS INFECTION FOUND ░░░░░░░░░░ This message is displayed when no infected files have been found, but one or more suspicious files have been identified. The Details button should be selected to view more detailed information. 3. ░░░░░░░░░░░░░░░░ VIRUS INFECTION FOUND ░░░░░░░░░░░░░░░░ Accompanied by a red window border and possible an audible alert, this is the most serious report message. Select the Details button to find out more information about the infection. You may wish to view the Curing A Virus Infection section to take the proper steps to rid your system from viruses. ┌─────────────────────────────────────────────────────┐ │Results of virus scanning: │ │ │ │Files: 1850 (90.6 MB) │ │Scanned: 1060 (50.6 MB) │ │Master Boot Records: 1 │ │DOS boot sectors: 1 │ │ │ │Time: 1:09 │ │ │ │No viruses or suspicious files/boot sectors were │ │found. │ └─────────────────────────────────────────────────────┘ ╔═════════╗ ┌─────────┐ ║ Details ║ │ Cancel │ ╚═════════╝ └─────────┘ Select the Details button to view the complete log file, or select Cancel to remove this window. .TOPIC: Checksum Scanner The Checksum Scanner is highly effective in detecting existing and new viruses. It accomplishes this by determining a mathematical signature of virus-prone portions of a file. If the file has been modified, the checksum scanner will flag it as Changed since its new signature will be different from what has already been recorded. Since the Checksum only deterimes unique signatures for files, it does not know if a file is actually infected with a virus. For this reason, the checksum should be run after the drive has been scanned using the Secure or Heuristic scanning options. Once the drive has been determined to be free of viruses, its files should be checksummed. If the checksum determines that the signature of a file has changed, the change could be from several causes: 1. Self-modifying files can store their configuration options inside of their program files. This change would show up in the checksum report. 2. A disk error could produce corrupted files, resulting in a changed signature. 3. A new version of a program, with the same file name, could have been copied over the previous file. 4. A virus that attaches to the file can cause the signature to change. Please see the option buttons below for information on handling a modified file. ┌┤■│░░░░░░░░░░░░░░░░░░ Checksum - [C:\CRC.VN] ░░░░░░░░░░░░░░░░░░ ├┐ │ ┌─────────────────────────────────────────────────────────────┐ │ │ │Directory: C:\ │ │ │ │ File: Program Files │ │ │ │ Elapsed: 01:51 │ │ │ └─────────────────────────────────────────────────────────────┘ │ │ ┌─────────────────────────────────────────────────────────────┐ │ │ │Total Files: 4285 Analyzed: 1929 Changed: 1 │ │ │ │ New: 32 Deleted: 0 Recalc: 0 │ │ │ └─────────────────────────────────────────────────────────────┘ │ │ ┌─────────────────────────────────────────────────────────────┐ │ │ │ Scanning Completed for C:\. 1 file has been changed. │ │ │ │ This could be a false alarm or an unknown virus. │ │ │ │ Run the scanner in Heurisitics mode for more information. │ │ │ │ Changed - C:\COMMAND.COM ░ │ │ │ ░ │ │ └─────────────────────────────────────────────────────────────┘ │ │ ┌────────┐ ┌────────┐ ┌────────┐ ┌────────┐ │ │ │ Recalc │ │ Delete │ │ Skip │ │ Cancel │ │ │ └────────┘ └────────┘ └────────┘ └────────┘ │ └─────────────────────────────────────────────────────────────────┘ ┌────────┐ If you are sure that a modified file/boot record is not │ Recalc │ a virus, select recalc to store a new digital signature. └────────┘ ┌────────┐ If you have a backup copy of a modified file, or no longer │ Delete │ need this file, select delete to remove the file. └────────┘ ┌────────┐ Select skip to continue scanning without recalculating or │ Skip │ deleting the file. You can still highlight the file in the └────────┘ window and recalc or delete the file. .TOPIC: Rescue Disk The Rescue Disk stores vital parts of a PCs hard disk and CMOS. This information can be used to regain access to a "crashed" PC, preventing possible loss of data. A rescue file can store information for many PCs, making it ideal for storing critical information for all PCs in a department. Once the rescue file has been created, the file should be kept in a safe place, preferrable on a write-protected diskette. The rescue file can also be stored to a network drive. Its location and name can be set in the Scanner Options section. ┌┤■│░░░░░░░░░░░░░░░░░░ Rescue Disk - [A:\RESCUE.VN] ░░░░░░░░░░░░░░░░░░░ ├┐ │ ┌────────────────────────────────────────────────────────────────────┐ │ │ │ IBM Model 76 (A4234) Created: 07-04-93 at 18:21 │ │ │ IBM Model 77 (A3326) Created: 07-04-93 at 18:16 ░ │ │ │ IBM PS/Note 425 (A7635) Created: 07-04-93 at 18:55 ░ │ │ │ ░ │ │ │ ░ │ │ │ ░ │ │ │ ░ │ │ │ │ │ └────────────────────────────────────────────────────────────────────┘ │ │ ┌────────┐ ┌────────┐ ┌────────┐ ┌────────┐ ┌────────┐ │ │ │ Create │ │ Recover│ │ Delete │ │ View │ │ Cancel │ │ │ └────────┘ └────────┘ └────────┘ └────────┘ └────────┘ │ └────────────────────────────────────────────────────────────────────────┘ ┌────────┐ Select this choice to create and save rescue information for │ Create │ a PC. You will then be asked to provide a description of └────────┘ up to 30 characters to uniquely identify the PC. ┌────────┐ Use recover to restore the original rescue information on the │ Recover│ PC. This option should only be used if the PC cannot be └────────┘ accessed either through a disk or battery failure. ┌────────┐ Select this choice to remove the rescue information for a │ Delete │ particular PC. If this PC crashes, rescue information will └────────┘ not be available to restore it. ┌────────┐ It is quite interesting to view a PCs boot records and CMOS │ View │ information. Highlight a PC and select this button, or └────────┘ simply press <Enter> when the cursor is on a highlighted PC.