home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
WDR Computer Club Digital 1995 August
/
CLUB_0895.BIN
/
antiviru
/
arfav
/
helpme!.doc
< prev
next >
Wrap
Text File
|
1995-06-25
|
4KB
|
85 lines
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▌ ▐
▌ IF YOU THINK YOUR ▐
▌ COMPUTER HAS CAUGHT A ▐
▌ VIRUS ... ▐
▌ ▐
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
If you've done a full installation, and have both the PRO-BOOT
and ARF Utilities diskettes, follow this procedure EXACTLY.
(We mean EXACTLY, too. Some computer users will be tempted to use
shortcuts; for example, in step 3, we want you to switch the PC
off, then on. Why can't you just use CTRL-ALT-DEL? Because that
doesn't guarantee that memory is wiped clean! We know what vir-
uses can do, and ways that they can hide themselves; so trust us,
OK? Follow this procedure as closely as possible!)
1. MAKE SURE THE ARF UTILITIES AND PRO-BOOT DISKS ARE STILL WRITE
PROTECTED! THIS IS VERY IMPORTANT! IF THOSE DISKS GO INTO THE A:
DRIVE UNPROTECTED, YOU CAN NEVER TRUST THEM AGAIN! CHECK THEM NOW!
2. You need to be able to boot your computer from the A: drive.
Many PCs are already set up to boot from drive A:; if you're is
not, you need to change your CMOS setup. On some PC's, you can
press CTRL-ALT-ESC to get into the setup; refer to the owner's
manual for your computer for the exact procedure to be used.
3. Switch the PC OFF and insert the PRO-BOOT diskette into the A:
drive. Wait a moment, then turn it back on, and the PC should
boot from the floppy (the PRO-BOOT screen should appear). If not,
check your CMOS setup and repeat this step from the beginning.
4. When you get the PRO-BOOT menu screen, select "Install ARF
Anti-Virus Partition" (or, if you prefer, one of the other parti-
tions). Don't select one of the TEST options; we want to actual-
ly install a partition and overwrite any virus in the MBR.
5. The system will continue booting, but that's OK. Just ignore
it. Remove the PRO-BOOT disk and switch the PC back off.
Help Me! (cont) Page 2
6. Insert the ARF Utilities disk, the bootable disk that you
created during installation with a copy of all the ARF programs
on it. Switch the PC back on and boot on that disk.
7. When you get the A: DOS prompt, enter
SYS C:
to restore the boot system on drive C:.
8. When SYS is done, enter
A:INJECT C:\*.* -s -c -tc:\inject.log
(We're searching drive C: here; substitute your drive's letter if
it's different. And we're creating the log file on drive C: be-
cause drive A: is write-protected.)
9. We're just about done now; what remains is cleanup. We creat-
ed a log file on drive C: (INJECT.LOG); you should print this
file out and refer to it. Any program which was not declared
OK on that list must be restored from a known-good backup.
10. Pop the ARF Utilities disk out and reboot onto drive C:.
11. To clean up your floppies, you can use INJECT to scan the
program files, and SYS to rebuild the boot sectors of each floppy.
Take a small marker and check off each floppy as you do it. The
NUMBER ONE cause of recurring infections is an incomplete clean-
up (one overlooked file or floppy), so be thorough!
DO NOT boot onto any floppy that doesn't have the "OK" check mark!
You're done! For more information, see "What Should I Do If
I Get A Virus" in both INJECT.DOC and PRO-BOOT.DOC. For more inf-
ormation on viruses, see VIRUS.DOC.
Registered users may feel free to contact us for more direct
assistance.