Chip 2002 May/05_02.iso/software/nis/files/Support/NAVTools/Repair/Readme.txt

Text File | 2002-03-02 | 9.1 KB | 249 lines

********************************************************************************
Norton AntiVirus 2002 for Windows 98/ME/NT4/2000/XP
Copyright (c) 2000-2001 Symantec Corporation. All rights reserved.
README.TXT                                                        October 2001

********************************************************************************
HOW TO USE THIS DOCUMENT
********************************************************************************
To view README.TXT on screen in Notepad or WordPad, maximize the
Notepad or WordPad window.

To print README.TXT in Notepad or WordPad, choose Print from the File
menu.  If you use another word processor, select the entire document
and format the text in 10-point Courier before printing to ensure
proper spacing.

To print README.TXT from the DOS prompt, type COPY README.TXT PRN:

********************************************************************************
NORTON ANTIVIRUS REPAIR TOOLS INFORMATION
********************************************************************************
This file describes the contents of the Repair folder. The following topics
are discussed:

 * FixBuddy.exe
 * FixCRed.exe
 * FixFun.exe
 * FixHappy.exe
 * FixHptme.exe
 * FixHybf.zip
 * FixKak.exe
 * FixKakb.exe
 * FixKriz.exe
 * FixLife.exe
 * FixLove.exe
 * FixMtx.exe
 * FixNavid.com
 * FixNimda.com
 * FixPotok.exe
 * FixPpark.zip
 * FixQaz.exe
 * FixSirc.com
 * FixStrm.exe
 * Kill_Cih.exe
 * Kill_ez.exe

********************************************************************************

* FixBuddy.exe
  ------------
This tool removes the Trojan horse known as AOL.Trojan.32512. This
Trojan horse is also known as "BuddyList." The tool only works in
Windows 95/98. Therefore, running it in Windows NT is not
recommended. You can run it from a floppy disk or copy it to the
hard disk and run it from there. Only one file, Fixbuddy.exe, is
required. Execute the file to clean a system infected with BuddyList.
You need not restart the computer after executing the tool. Scan the
entire hard disk with Norton AntiVirus after running this tool to
ensure that no other copies of this Trojan horse exist on the
computer.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/buddyremoval.html

* FixCRed.exe
  -----------
The CodeRed removal tool provides the CodeRed I and II removal and
performs the vulnerability assessment of your computer. Symantec is
providing what it believes to be a safe, reliable and secure utility
to remove the effects of a CodeRed infection.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/codered.removal.tool.html

* FixFun.exe
  ----------
FixFun.exe is a tool for removing W32.FunLove.4099. It is a 16-bit
DOS program, which means it cannot be digitally signed. You must
boot to DOS before running this tool; you cannot run it in a DOS
Window in Windows.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/dos.funlove.4099.fix.tool.html

* FixHappy.exe
  ------------
The FIXHAPPY tool is designed to safely remove Happy99.Worm
(a.k.a. W32.Ska) files and restore the WSOCK32.DLL in Windows systems.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/fix.happy99.worm.html

* FixHptme.exe
  --------------
The VBS.Haptime Fix tool removes the changes that were made to a
computer by the VBS.Haptime.A@mm and VBS.Haptime.B@mm worms.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/vbs.haptime.fix.html

* FixHybf.zip
  -----------
The W95.HybrisF Fix tool will repair the infection caused by
W95.HybrisF. NOTE: This removal tool only works to remove the
specific plugin named W95.Hybrisf. It will not clean up a system
infected by the W95.Hybris.plugin, W95.Hybris.gen or W95.Hybris.worm.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w95.hybrisf.fix.html

* FixKak.exe
  ----------
The Wscript.KakWorm repair tool works only under Windows 95/98 or
Windows NT.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/wscript.kakworm.fix.html

* FixKakb.exe
  -----------
The KAK.Worm.B fix tool only works under Windows 95/98/NT
operating systems.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/kak.worm.b.fix.html

* FixKriz.exe
  -----------
The Fixkriz.exe utility is a preventive measure against the
W32.Kriz virus. It will not repair damage done after the virus has
been launched.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w32.kriz.fix.html

* FixLife.exe
  -----------
The FIXLIFE tool is designed to remove the changes to a computer
system caused by VBS.Stages.A worm.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/fix.vbs.stages.html

* FixLove.exe
  -----------
The VBS.LoveLetter Fix tool removes the changes that were made to a
computer by all known versions of the VBS.LoveLetter worm except
VBS.LoveLetter.CA, VBS.LoveLetter.BJ, VBS.LoveLetter.BM and
VBS.LoveLetter.AS.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/fix.vbs.loveletter.html

* FixMtx.exe
  ----------
This tool repairs damage done by the W95.MTX virus. Due to the
nature of this virus, some files will not be repairable. The
unrepairable files must be restored from clean backup copies, or
from the original distribution disks.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w95.mtx.fix.tool.html

* FixNavid.com
  ------------
This tool repairs damage done by the W32.Navidad worm and the
W32.Navidad.16896 worm variant.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w32.navidad.fix.html

* FixNimda.com
  ------------
W32.Nimda.A@mm is a mass-mailing worm that utilizes multiple methods
to spread itself. The name of the virus came from the reversed spelling
of "admin". The worm sends itself out by email, searches for open
network shares, attempts to copy itself to unpatched or already
vulnerable Microsoft IIS web servers, and is a virus infecting both local
files and files on remote network shares.

To obtain additional information about this threat, visit:
http://securityresponse.symantec.com/avcenter/venc/data/[e-mail]

* FixPotok.exe
  ------------
The VBS.Potok@mm Fix tool deletes the files dropped by the
VBS.Potok@mm worm and repairs files removing VBS.Potok@mm streams.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/[e-mail]

* FixPpark.exe
  ------------
This worm program behaves similarly to Happy99 Worm. The FIXPPARK.ZIP
contains two files: fixppark.com and psapi.dll. Both fixppark.com and
psapi.dll are required for this tool to function properly on
Windows NT. If running on Windows 95/98, only fixppark.com is
required. The files can be run off the floppy disk or copied to the
hard disk and executed to clean a system infected with
PrettyPark.Worm.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/fix.prettypark.html

* FixQaz.exe
  ----------
This tool repairs the damage done by the W32.HLLW.QAZ.A virus.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w32.hllw.qaz.a.fix.html

* FixSirc.com
  -----------
The W32.Sircam.Worm@mm Fix tool deletes the files infected with the
W32.Sircam.Worm@mm worm and removes the changes that were made
to a computer by this virus.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/[e-mail]

* FixStrm.exe
  -----------
The W2K.Stream Repair Tool detects W2K.Stream and repairs the
damage, if possible.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/w2k.stream.repair.tool.html

* Kill_CIH.exe
  ------------
The KILL_CIH tools was designed to remove the virus from memory to
avoid rebooting from a clean system disk.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/kill_cih.html

* Kill_EZ.exe
  -----------
Worm.ExploreZip is a worm that contains a malicious payload. The
worm utilizes Microsoft Outlook, Outlook Express, Exchange to mail
itself out by replying to unread messages in your Inbox.

To obtain additional information about this threat, visit:
http://www.symantec.com/avcenter/venc/data/kill_ez.html

********************************************************************************
                                  END OF FILE
********************************************************************************