home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PsL Monthly 1994 February
/
psl_9403.zip
/
psl_9403
/
DOS
/
UT_SYSTM
/
VSHIELD.ZIP
/
VSHLD109.DOC
< prev
next >
Wrap
Text File
|
1993-11-03
|
46KB
|
1,156 lines
VSHIELD Version 5.55V109
VSHIELD1 Version 0.2
CHKSHLD Version 0.4
Copyright 1989-1993 by McAfee Associates.
All rights reserved.
Documentation by Aryeh Goretsky.
McAfee Associates (408) 988-3832 office
2710 Walsh Avenue, Suite 200 (408) 970-9727 fax
Santa Clara, CA 95051-0963 (408) 988-4004 BBS (25 lines)
U.S.A USR HST/v.32/v.42bis/MNP1-5
CompuServe GO MCAFEE
Internet support@mcafee.COM
America OnLine MCAFEE
TABLE OF CONTENTS
SYNOPSIS . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
- What is VSHIELD?
- System requirements
AUTHENTICITY . . . . . . . . . . . . . . . . . . . . . . . . . .3
- Verifying the integrity of VSHIELD
WHAT'S NEW . . . . . . . . . . . . . . . . . . . . . . . . . . .4
- New features and viruses added in this release
OVERVIEW . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
- A note on switches
- General description of VSHIELD
OPERATION and OPTIONS. . . . . . . . . . . . . . . . . . . . . .7
- How to use VSHIELD, VSHIELD1, and CHKSHLD
- Detailed explanation of switches
- ERRORLEVEL's for batch file programming
EXAMPLES . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
- Samples of frequently-used options
INSTALLATION . . . . . . . . . . . . . . . . . . . . . . . . . .16
- How to install VSHIELD on your system
- A note on VSHIELD and networks
VIRUS REMOVAL. . . . . . . . . . . . . . . . . . . . . . . . . .17
- What to do if a virus is found
REGISTRATION . . . . . . . . . . . . . . . . . . . . . . . . . .17
- How to register VSHIELD
TECHNICAL SUPPORT. . . . . . . . . . . . . . . . . . . . . . . .18
- Information you should have ready when calling
APPENDIX A . . . . . . . . . . . . . . . . . . . . . . . . . . .19
- Creating an exception list for the /CERTIFY option
APPENDIX B . . . . . . . . . . . . . . . . . . . . . . . . . . .20
- Sample CHKSHLD program script
Page 1
VSHIELD Version 5.55V109 Page 2
SYNOPSIS
VSHIELD is a virus prevention program for IBM PC and
compatibles. VSHIELD prevents viruses from infecting your
system. When VSHIELD first loads it will search memory, the
master boot record (partition table), boot sector, system
files, and itself for known computer viruses before going into
memory as a Terminate-and-Stay-Resident (TSR) program.
VSHIELD checks for viruses by scanning programs as they
are run for virus signatures and/or validation codes added by
VIRUSCAN. Infected programs are prevented from running and a
a warning message is displayed by VSHIELD. VSHIELD also stops
soft boots from disks infected by boot-sector viruses.
VSHIELD optionally checks validation codes added by SCAN
to check if a file has been altered or modified. This can be
used to detect unknown (new) viruses.
VSHIELD optionally check for viruses as files are copied
or accessed.
VSHIELD optionally provides access control functions to
reduce the risk of virus infection from unauthorized software.
Two discrete programs are available. The first,
VSHIELD.EXE, checks for viruses using virus signatures and
validation codes added by SCAN. The second, VSHIELD1.EXE,
only checks validation codes added by SCAN. Both programs
monitor all program loads from all disks unless otherwise
specified.
The VSHINST program installs an icon for VSHIELD under
Windows 3.x. This icon can be used to toggle VSHIELD on and
off.
The VSHWIN program allows VSHIELD to display messages
while Windows 3.x is running.
The CHKSHLD program checks for VSHIELD in memory for use
in network login scripts.
VSHIELD will run on any PC with 256Kb and DOS 2.10 or
above. VSHIELD1 uses 6Kb of memory. VSHIELD uses 49Kb of
conventional memory if loaded normally, 25Kb of conventional
memory if EMS is present, 5Kb of conventional memory if
swapped-to-disk, and 1.5Kb of conventional memory if loaded
into upper memory.
VSHIELD Version 5.55V109 Page 3
AUTHENTICITY
VSHIELD is packaged with VALIDATE, a program to ensure
the integrity of the executable program files. The
VALIDATE.DOC file describes how to use VALIDATE.
The validation results for the VSHIELD 5.55V109
should be:
FILENAME: SIZE: DATE CHECK METHOD:
CHKSHLD.EXE S:8,171 D:08-17-93 M1: 7B3C M2: 1B48
VALIDATE.COM S:12,197 D:03-24-92 M1: D5BB M2: 166F
VSHIELD.EXE S:52,317 D:11-02-93 M1: 3714 M2: 1110
VSHIELD1.EXE S:18,833 D:06-24-93 M1: F414 M2: 13F5
VSHINST.EXE S:9,780 D:08-11-93 M1: 44A6 M2: 1D0F
VSHWIN.EXE S:15,927 D:08-17-93 M1: 874E M2: 0CB1
If your copy of VSHIELD differs, it may have options stored to
it with the /SAVE switch or been damaged by a virus. Run
VSHIELD with just the /SAVE switch to remove any stored options
and then re-run VALIDATE. Always obtain VSHIELD from a trusted
source such as the McAfee BBS, CompuServe, or your local McAfee
Agent. The latest version of VSHIELD and validation codes can
always be found on our BBS at +1 (408) 988-4004.
PKZIP AUTHENTICATION VERIFICATION
All of McAfee Associates' programs are archived with
Version 1.10 of PKWare's PKZIP Authentic File Verification.
When unzipped with Version 1.10 of PKWare's PKUNZIP program,
an "-AV" will be displayed after each file is unzipped and an
"Authentic Files Verified! # NWN405 Zip Source: McAFEE
ASSOCIATES" will appear once all files are unzipped.
NOTE: If you do not receive the Authentic File Verification
messages, you may be using a different version of
PKUNZIP, such as V1.93A or V2.04. Use PKUNZIP Version
1.10 to unzip files if you wish to have Authenticity
Verification displayed as files are unzipped.
VSHIELD Version 5.55V109 Page 4
WHAT'S NEW
Version 5.55V109 detects all the major viruses
checked for by VIRUSCAN (SCAN.EXE). However, in an effort
to reduce VSHIELD's memory requirements, we have reduced
the number of specific virus signatures in the program.
Thus, VSHIELD may not identify viruses with the same
precision as VIRUSCAN.
If you wish to have a more detailed check of your system
for viruses, run the VIRUSCAN program at periodic intervals.
For more information on viruses added in this release,
please refer to the VIRUSCAN documentation, the a