* * * IMPORTANT: Virex Update Notes * * * January 13, 1993 Version 3.9
PLEASE NOTE: Always keep your Master Virex disk locked (you can see through the hole in the upper right corner of the disk). DO NOT copy the System folder to your hard disk. Copy only the individual Virex files from the disk as described below.
TO UPDATE YOUR MACHINE TO THE CURRENT VERSION OF VIREX:
1. Start your machine from the locked Virex disk and launch the Virex application from the Virex disk (see note on Powerbook, Quadra and Classic II).
2. Diagnose all volumes except the Virex disk. THIS IS VERY IMPORTANT!
3. Repair/replace infected files.
4. Quit Virex app.
5. Launch the Installer to copy the new Virex INIT to your System folder. If you already have a copy of the INIT in the System folder, it will be replaced, but its password will be retained. The Installer will copy the Virex INIT into your System folder in System 6. In System 7 the Virex INIT is copied into the Extensions folder, and an alias is put in the Control Panels folder. If your System folder is hidden within another folder, move the System folder to the Desktop of your computer so that the Installer can update your copy of the Virex INIT. The Installer will also copy the Virex app to the Desktop of your hard disk.
6. Restart your machine.
7. Use the Virex app (under Finder in System 6) to diagnose all FLOPPY DISKS and repair or replace infected files.
If you have problems using the Installer, you can update your machine manually as follows:
1. Follow steps 1-4 as above.
2. Drag a copy of the new Virex INIT into the System folder of your startup drive (In System 7 the INIT goes into the Extensions folder). THROW AWAY THE OLD VERSION.
3. Drag a copy of the new Virex app to your hard drive. Throw away the old version.
4. Restart your machine.
5. Use the Virex app (under Finder in System 6) to diagnose all FLOPPY DISKS and repair or replace infected files.
• Datawatch strongly recommends that AppleShare servers use the "Automatic Scanning Option" of the Virex INIT to scan the System folder on startup.
• The System folder on the Virex disk does not have printer drivers. As a result, you cannot print Virex reports while your machine is booted from the Virex disk. To print a report, save it to your hard disk by choosing 'Save' under the 'File' menu. When you Restart your machine from your hard disk, use Virex to 'Open' the reports that you saved and use 'Print' to send them to the printer.
• The Virex INIT enables you to set a password so that only you can change the options or remove the Virex INIT from the System folder. Please consult the Help Screens within the Virex INIT Control Panel for instructions on use of the password feature. If you wish to remove the INIT and YOU HAVE FORGOTTEN THE PASSWORD, you must boot from a disk with a System folder, such as the Virex disk. Drag the old Virex INIT from the System folder to the trash, and Replace the Virex INIT in your System folder with a fresh copy. If you boot from your hard disk, you will not be able to circumvent the password feature. For security reasons, you should not copy these Read Me notes to your hard disk.
• Virex is not compatible with the A/UX 2.0 operating system.
•Powerbooks, Quadras and the Classic II running System 7 cannot be booted with the Virex disk. Users should boot with their LOCKED Disk Tools disk, eject the Disk Tools disk using Command E, and insert the locked Virex disk. Some machines may ask for the Disk Tools disk immediately after it is ejected. Reinsert the Disk Tools disk and use the Virex application to diagnose the hard drive. This method will require the user to swap the two diskettes about 15 times to diagnose their machine.
______________
VIREX REVISIONS
•Virex was updated to 3.9 to detect and remove the CPro Trojan. The trojan was discovered in a file named "CPRO141.SEA" and is an application that poses as a popular compression program. The trojan will attempt to format all mounted drives, but will only erase data from floppy disks.
•Virex was updated to 3.83 to be compatible with System 7.1 and to solve several startup conflicts.
System 7 Features (version 3.5 and later)
New System 7 features include Balloon Help and compatibility with: 32-Bit addressing, Virtual memory, and File Sharing. Virex 3.5 remains completely compatible with previous System versions.
System 7 and WDEF
Under System 7, diskettes that are infected with WDEF or CDEF WILL mount if 'Deny Access' is chosen when the Virex INIT Virus alert appears. Virex will NOT allow the Desktop on the infected diskette to be opened thus keeping the infection from spreading to your computer. Since the Desktop is not allowed to open, icons on the diskette may appear as generic dog eared pages. You should immediately repair the infection to avoid this situation.
System 7 and Record/Scan
Due to the addition of new resource types in System 7, it is recommended that users check their machines for viruses, delete their old 'Record/Scan' file, and create a new baseline 'Record/Scan' file. Due to new internal resource compression techniques in System 7, 'Record/Scan' files must be updated from the same version of the operating system used during the original baseline scan. If the original baseline 'Record/Scan' was performed while running System 7, all updates to the 'Record/Scan' file must be done while running System 7. If the original baseline 'Record/Scan' was performed while running System 6, all updates to the Record/Scan must be done while running System 6.
HyperCard Infections
There is an option in the 'File Diagnose Options' of the Virex INIT that allows the diagnosis/repair of infected HyperCard stacks. This option may be disabled to shorten the time required to scan a volume. Options such as 'Scan on Startup/Shutdown', Hot Key scans, and 'Diagnose Files When Opened' will follow the setting, however, the Virex INIT will ALWAYS diagnose inserted floppies for HyperCard viruses. If you enable the 'Check for HyperCard Virus' feature infected HyperCard stacks cannot be copied and should be repaired.
TOPS servers should implement the Network Options (pp. 32-34 of the User's Guide) if the HyperCard option is turned on. Due to the nature of TOPS, a Virex INIT virus alert will appear on the serving machine when an infected stack is encountered. All other infection alerts will appear on the workstation.
The Record/Scan feature will not log changes to HyperCard stacks.