Liren Large Software Subsidy 15/15.iso/s/s045/2.img/IBMAVD09.HL_/IBMAVD09.bin

Text File | 1993-12-21 | 11.4 KB | 258 lines

Help for Virus infection report
-------------------------------

The Virus infection report pop-up window displays when IBM AntiVirus/DOS h
as found a possible virus on your system or on a diskette. Boot records an
d files that might contain a virus are listed according to how certain it
is that they are infected.

You should examine the lists carefully and disinfect or erase anything tha
t is infected. If you do not disinfect or erase infected items, it is very
 likely that the infection will continue to spread on your system and perh
aps to other systems as well.

Note that files that are erased cannot be recovered (not even with unerase
 utilities).

Names of files that you erase are written to the log to help you restore t
hem from backups if necessary. To view the log, select either Current log
or Previous log from the Log menu on the main window.

Occasionally, it might not be possible either to disinfect, or to erase or
 replace a file or boot record because the system does not allow it to be
altered. This problem might occur if the operating system has locked the f
ile or if a security system you are using does not give you write access t
o the file or boot record. Consult the documentation for your operating sy
stem, security system, and so forth for information on unlocking these fil
es or boot records. Alternatively, you might be able to start your system
from a diskette and use the IBM AntiVirus/DOS stand-alone program to disin
fect or erase these files or boot records.


Help for Definite
_________________

Boot records and files listed in the Definite selection box are definitely
 infected with the virus shown. IBM AntiVirus/DOS has verified that each r
elevant piece of the virus is identical to the standard virus in IBM's col
lection. This verification ensures that it is safe to disinfect it. Disinf
ection is normally the correct thing to do, because it removes the virus a
nd restores each boot record or file to its original, uninfected state.

Initially, all items on this list are selected. All you have to do is to s
elect the Disinfect push button to disinfect them.

See the additional help for Erase/Replace before erasing anything. Note th
at files that are erased cannot be recovered (not even with unerase utilit
ies).


Help for Disinfect
__________________

Use Disinfect to remove the virus from the selected items and restore them
 to their original, uninfected state.

While the Windows portion of IBM AntiVirus/DOS correctly detects infected
diskettes, it is not always able to disinfect them.  If you find you have
infected diskettes, we recommend that you invoke the DOS portion of the pr
oduct by going to a DOS prompt, changing to the directory where IBM AntiVi
rus/DOS is installed, and issuing the command IBMAVD.


Help for Erase/Replace in Definite box
______________________________________

Use Erase/Replace to overwrite and erase the selected items.

Initially, all items on this list are selected. All you have to do is sele
ct the Erase/Replace push button to erase files or replace boot records.

When you use this feature to "erase" files, the files are first overwritte
n and then deleted. This operation prevents infected files from being acci
dentally restored with "unerase" utilities. Files that are erased in this
way cannot be recovered (not even with unerase utilities).

Names of files that you erase are written to the log to help you restore t
hem from backups if necessary. To view the log, select either Current log
or Previous log from the Log menu on the main window.

"Replacing" the master boot record of a hard disk replaces it with a valid
 master boot record, which is normally the correct thing to do if they can
not be disinfected. The only exception is when the hard disk had an unusua
l master boot record similar to those used by some DOS security products.
In these cases, "replacing" the master boot record might leave the system
in an unusable state. Contact the vendor of the security product for assis
tance before trying to remove the virus from these systems.

Erase/Replace cannot be used to overwrite system boot records, including B
oot Manager boot records, because their format depends on the particular v
ersion of the operating system that you are using.


Help for Select all in Definite box
___________________________________

Use Select all to select all of the items in the Definite selection box. Y
ou can then use Disinfect or Erase/Replace to disinfect or erase them all.



Help for Deselect all in Definite box
_____________________________________

Use Deselect all to deselect all of the items in the Definite selection bo
x. You can then select them individually and disinfect or erase them.


Help for Probable
_________________

Boot records and files listed in the Probable selection box have a pattern
 of bytes similar to a pattern found in the standard virus in IBM's collec
tion. As a result, they are probably infected with the virus shown or a vi
rus closely related to it. It is not possible for IBM AntiVirus/DOS to det
ermine that the virus is absolutely identical to the standard virus in IBM
's collection. As a result, attempting to remove the virus by disinfection
 might result in a damaged boot record or file. The correct action to take
 is almost always to "erase/replace" the infected objects. Infected files
can then be replaced from backups or write-protected original diskettes.

Initially, all items on this list are selected. All you have to do is sele
ct the Erase/Replace push button to erase files or replace boot records.

See the additional help for Erase/Replace before erasing anything. Note th
at files that are erased cannot be recovered (not even with unerase utilit
ies).

Note that some other anti-virus programs can sometimes be identified as "p
robably infected", because those programs do not use the recommended indus
try techniques to avoid misleading identification. Contact the vendor of t
he other anti-virus program for assistance.


Help for Erase/Replace in Probable box
______________________________________

Use Erase/Replace to overwrite and erase the selected items.

Initially, all items in the selection box are selected. All you have to do
 is select the Erase/Replace push button to erase files or replace boot re
cords.

When you use this feature to "erase" files, the files are first overwritte
n, then deleted. This operation prevents infected files from being acciden
tally restored with "unerase" utilities. As a result, files that are erase
d in this way cannot be recovered (not even with unerase utilities).

Names of files that you erase are written to the log to help you in restor
ing them from backups if necessary. To view the log, select either Current
 log or Previous log from the Log menu on the main window.

"Replacing" the master boot record of a hard disk replaces it with a valid
 master boot record. This replacement is almost always the right thing to
do. The only exceptions are when the hard disk had an unusual master boot
record, similar to those used by some DOS security products. In these case
s, "replacing" the master boot record might leave the system in an unusabl
e state. Contact the vendor of the security product for assistance before
trying to remove the virus from these systems.

Erase/Replace cannot be used to overwrite system boot records because thei
r format depends on the particular version of the operating system that yo
u are using, including Boot Manager boot records.


Help for Select all in Probable box
___________________________________

Use Select all to select all of the items in the Probable selection box. Y
ou can then use Erase/Replace to erase them all.


Help for Deselect all in Probable box
_____________________________________

Use Deselect all to deselect all of the items in the Probable selection bo
x. You can then select and erase them individually.


Help for Suspicious
___________________

Files listed in the Suspicious selection box have unusual properties or ch
anges that are typical of virus infections. They are not infected with any
 virus that IBM AntiVirus/DOS knows about.

IBM AntiVirus/DOS does not list boot records or files here just because th
ey have changed. Boot records and files change on computers all the time f
or reasons unrelated to viruses. IBM AntiVirus/DOS only reports files as "
suspicious" if their pattern of change is typical of virus infections.

You should examine the items in this list to determine if there is a good
reason for them to have changed recently, other than a virus. One possible
 reason would be if these files were modified by some other anti-virus pro
gram to "inoculate" them. Another reason would be if you recently updated
these files, and you are absolutely certain that the updates are not infec
ted.

If you conclude that the files might be infected, the best thing to do is
erase them and replace them from backups or write-protected, original disk
ettes.

Initially, no items in the selection box are selected. You should select t
he files you want to erase or the boot records you want to replace. Then s
elect the Erase/Replace push button to erase files or replace boot records
.

See the additional help for Erase/Replace before erasing anything. Note th
at files that are erased cannot be recovered (not even with unerase utilit
ies).


Help for Erase/Replace in Suspicious box
________________________________________

Use Erase/Replace to overwrite and erase the selected items.

Initially, no items in the selection box are selected. You should select t
he files you want to erase or the boot records you want to replace. Then s
elect the Erase/Replace push button to erase files or replace boot records
.

When you use this feature to "erase" files, the files are first overwritte
n and then deleted. This operation prevents infected files from being acci
dentally restored with "unerase" utilities. As a result, files that are er
ased in this way cannot be recovered (not even with unerase utilities).

Names of files that you erase are written to the log to help you restore t
hem from backups if necessary. To view the log, select either Current log
or Previous log from the Log menu on the main window.

"Replacing" the master boot record of a hard disk replaces it with a valid
 master boot record. This replacement is almost always the right thing to
do. The only exceptions are when the hard disk had an unusual master boot
record, similar to those used by some DOS security products. In these case
s, "replacing" the master boot record might leave the system in an unusabl
e state. Contact the vendor of the security product for assistance before
trying to remove the virus from these systems.

Erase/Replace cannot be used to overwrite system boot records or Boot Mana
ger boot records because their format depends on the particular version of
 the operating system that you are using,


Help for Select all in Suspicious box
_____________________________________

Use Select all to select all of the items in the Suspicious selection box.
 You can then use Erase/Replace to erase them all.


Help for Deselect all in Suspicious box
_______________________________________

Use Deselect all to deselect all of the items in the Suspicious selection
box. You can then select and erase them individually.