Copyright: Copyright © 1998 - 2001 by H+BEDV Datentechnik GmbH


About AVGuard

The AntiVir Personal Edition with the resident scanner AVGuard has been developed especially for home users. It is completely free of charge for private use and can be obtained from the following Internet URL. Updates are also availabe from this address via automatic FTP download:

http://www.free-av.com

Support for this Personal Edition is available via our online support forum only:

http://www.hbedv.net/cgi-bin/Ultimate.cgi

If you have a slow modem or you prefer to get your software on a CD-ROM, you should consider the following offer: The AntiVir Personal Edition incl. installation manual and 6 updates per year on CD-ROM can now be ordered for a very good price. More information about this and all our other products is available from:

H+BEDV Datentechnik GmbH

Lindauer Strasse 21

D - 88069 Tettnang

Germany

Fax	+49   (0) 7542 - 52510

eMail:	info@hbedv.com

AntiVir 6 Professional

If you need support of network drives or if you need any more functionality, we recommend the enhanced version of AntiVir: AntiVir 6 Professional. The professional version is currently available for the following platforms: DOS, Windows 3.1x, Windows 9x, Windows Me, Windows NT, Windows 2000, Windows XP, OS/2, Linux (i386), FreeBSD (i386), OpenBSD (i386), Novell NetWare, Windows NT Server, Exchange Server, Exchange Workstation, Outlook, Eudora Mail Client and MS Mail. More information about these products is available from the address above or from the Internet:

http://www.hbedv.com

This dialog box displays some information about the AVGuard for Windows 9x VxD and the control program.

Version Information

The first line displays the version and the creation date of the AVGuard/9x control program. The current version of the AntiVir engine is displayed in the second line. The third line contains the version, the creation date and the FUP type of the currently used virus definition file.

Hotline / Product Information

This section contains the information how to contact us if you need technical support or any other information or assistance.


Action Tab

This sheet configures how AVGuard/9x shall react if a virus has been detected.

Action If File Not Repaired

When AVGuard/9x discoveres a virus, it will display a text mode dialog to let the user select the action to be taken. If the file could be disinfected and the auto-repair mode is enabled, the user can select to repair the file. If this disinfection fails, the action selected in this group box will be taken. If the user selects another option in the displayed dialog box, the selected action will be taken.

Delete Infected File

The infected file will be deleted but can be restored using appropriate tools.

Move Infected File

The infected file will be moved to the Quarantine Directory entered in the appropriate field. Note that only the Administrator should have access rights to this directory!

Rename Infected File

The infected file will be renamed to *.VIR, ... It can no longer be accessed using the shell.

Deny Access

The infection will only be reported to the logfile if enabled and access will be denied.

Quarantine Directory

If a file is to be moved to the Quarantine Directory, AVGuard/9x will move it to the directory specified in this field.


Activate AVGuard

If you click this item, AVGuard will be activated. This means that the resident guard will check every file depending on the settings. To protect your system against viruses you should have the AVGuard activated. This option is disabled if the AVGuard already is activated!


AntiVir Professional

Besides the AntiVir Personal Edition, H+BEDV Datentechnik GmbH offers the AntiVir 6 Professional Edition. This package provides a very enhanced functionality and a flexible and cheap licensing, especially in multi-user environments.

Additional Features:

-	Support of network drives.

-	Support of network messages and warnings.

-	Support of search profiles.

-	Scanning of single and multiple directories.

-	Scanning of user-defined archives.

-	Explicit scanning of boot records.

-	Intranet-Update-Wizard. This is a tool to distribute the software in your network.

-	Start of external programs depending on the search results.

- 	Scheduler.

-	Password protection for the configuration.

-	CRC option.

-	Enhances configuration possibilities for the scan- and repair engine.

-	The email scanner for MS Mail, Qualcomm Eudora, MS Outlook and MS Exchange Client are included.

The Professional Version is currently available for the following platforms: DOS, Windows 9x, Windows NT, OS/2, Linux (i386), Novell NetWare, Windows NT Server, Exchange Server, Exchange Workstation, Outlook, Eudora Mail Client, MS Mail. An SMTP solution called AVMailGate is available for Linux, FreeBSD and OpenBSD. Information about these products is available at:

H+BEDV Datentechnik GmbH	Internet:	www.hbedv.com

Lindauer Strasse 21	eMail:	info@hbedv.com

88069 Tettnang

Germany	Fax:	(+49)	0	7542-52510


Configuration

This menu displays a property sheet to configure the AVGuard for Windows 9x VxD. The button [image] has the same effect. The property sheet contains the following tabs:

Scanner	All settings used by the the scanner.

Action	Actions to perform if a virus has been found.

Report	Report file settings


Contents
Help Contents

These help pages are currently available in AVGuard for Windows 9x Personal Edition:

About AVGuard

Action Tab

Configuration

Contents

Demo Version

Edit File Extension

Exit And Close

Exit And Minimize

File Action

File Extensions

File Menu

Files To Scan

Help

Main Screen

News

Options

Report Tab

Scanner Tab

Status

Trouble Shooting

Virus Infection


Deactivate AVGuard

If you click this item, the AVGuard will be deactivated. This means that the resident guard will no longer check any files for viruses. Handle with care since infected files may not longer be detected!! This option will be disabled if the AVGuard already is deactivated.


Demo Version

Demo-Version

If you don't have a valid license key file, AVGuard/9x Personal Edition will run in the restricted demo mode. This means that it will only scan files on the volume C: of your computer.

To install a full version you just need a valid license key file which has to be copied into the installation directory of AntiVir/9x Personal Edition. After a restart of the AntiVir service, the system will run as a full version.


Edit File Extension

You can enter a new file extension in this dialog box. The maximum length of a new extension is 6 characters.

The current extension will be inserted into the list of file extensions.

The current extension will be thrown away and not inserted into the file extension list.

Displays this help screen.


Exit And Close

To completely exit and close the Control Program you have to click this item. The program will be completely closed. A restart is only possible using the icon in the AntiVir/9x program folder.


Exit And Minimize

or use the button

Click this item if you would like to exit the Control Program but don´t want to close it. It will be minimized and you can see it´s icon placed in the system tray. A double click on the small icon in the system tray will enlarge it for further use. When minimized, the AVGuard Control Program does not consume any CPU cycles.


File Action

In this field the current action taken if a virus has been found will be displayed.

Repair File

AVGuard/9x will try to repair the infected file. If a disinfection is not possible, the action set with 'Action if file not repaired' will be taken.

Delete File

The infected file will be deleted. It is not possible to restore the file anymore.

Move File

The infected file will be moved to the quarantine directory set in the filed 'Quarantine Directory'. The files in this directory can be disinfected later on or you can send us such files for further investigations if needed.

Rename File

The infected file will be renamed to *.VIR. Any direct shell shortcut to the file will be disabled. You can re-rename and disinfect the file later on.

Notify Only

AVGuard/9x will deny access to an infected file. If enabled, only an entry will be written to the logfile.


File Extensions

The file extensions used by AVGuard/9x when 'Program Files Only' is enabled are stored in this list.

You can edit the list as follows:

This closes and saves the current list

The changes made are cancelled.

Opens a window to edit and insert a new file extension.

This deletes the currently marked item in the list.

This sets the list to the default file extensions as shipped by H+BEDV.

Displays this help screen


File Menu

This menu contains four sub menus:

Exit And Minimize or button

Click this item if you would like to exit the Control Program but don´t want to close it.

Exit And Close

To completely exit and close the Control Program you have to click this item.

Activate AVGuard

If you click this item, AVGuard will be activated.

Deactivate AVGuard

If you click this item, AVGuard will be deactivated.


Files To Scan

AntiVir Guard for 9x can use a filter to select the file types to be scanned:

All Files

All files accessed will be scanned. No filter is enabled.

Program Files Only

Only the files with a file extension as defined in the extension list will be scanned. This is the default setting. The default list could change from version to version since new types of viruses are found.


Help
Help Menu

Here you can find some more information on how to operate with your AVGuard.

Help (F1) or button

This will show you this help system.

Using Context Sensitive Help

This shows you how to use the context sensitive help system

Help Index

This displays links to all available pages in this help file

About AVGuard/9x

Displays some information about AVGuard/9x, the running service and the used engine / virus definition file.


Main Screen

Menu Options

File

Options

Help

Configuration

VxD - Status:	This displays the current status of the AVGuard for 9x VxD.

File Action:	This field displays the action taken if an infected file has been found and the user notification has been disabled.

File To Scan:	All files or only files with a specific file extension.

Notify User:	Notify the user when an infection occurs or take the action automatically.

Statistics

In these fields that current statistics of the Guard will be displayed. Note that - from performance reasons - these fields will be updated only twice a second. These statistics can be reset using the option 'Clear statistics data'.

Last File:	This field displays the last file scanned by the guard.

File Count:	The number of files scanned.

Last Virus:	The name of the last virus found.

Virus Count:	The number of viruses found.

Repaired Files:	The number of successfully disinfected files.

Moved Files:	The number of files successfully moved to the quarantine directory.

Deleted Files:	The number of successfully deleted files.


News

New Features And News About AVGuard/9x

File Extension List

AVGuard now provides a file extension list that may be edited. Besides the default list, any file extension may be added or removed.

Did You Know ...

...	that H+BEDV announced the first resident virus guard for Linux in the world?

...	that the AntiVir Personal Edition for Windows 9x and NT is free of charge for private, non-commercial use? The Personal Edition may be downloaded from http://www.free-av.com.

...	that the new AntiVir scan engine now is able to detect more than 55000 virus streams?

...	that AntiVir now is available for Windows NT Server?

...	that the CIH virus in Turkey and Taiwan thashed more than 300,000 computers in april '99?

...	that AntiVir is now available for Linux, FreeBSD and OpenBSD and that it is free of charge for private, non commercial use? You just have to register. More information is available from the Internet at www.hbedv.com.

...	That the SMTP scanner AVMailGate is now available for Linux, FreeBSD and OpenBSD?

...	that a graphical user interface (GUI) called TkAntiVir now is available for AntiVir for Linux? The product is subject to the GNU General Public Licence (GPL) and can be downloaded free of charge from the author's homepage at http://www.geiges.de/tkantivir/index_en.htm.

You'll find the latest AntiVir news at http://www.hbedv.com


Options
Options Menu

This menu contains only one entry:

Configuration or button

Select this to configure the AVGuard for Windows 9x


Report Tab

AVGuard/9x has a very powerful reporting function included. It is able to give the administrator a complete report of what´s going on with your machine.

Report file

Reporting enabled

If selected, AVGuard will activate the reporting feature. A default report file name will be inserted to the edit field for the logfile name.

Name of logfile

This is the name and the path of the report file to write. Each entry will be added to this file.


Scanner Tab

These settings are used to configure the scanner of AVGuard for Windows 9x.

Files to Scan

AVGuard/9x can be configured to use a filter to exclude some files that are normally not hosts for viruses. This can improve the system performance depending on you environment.

All Files

If selected, all files accessed in the specified device mode will be scanned automatically.

Use file extension list

Only files with a file extension that matches an extension in the file extension list will be scanned.

  Opens a window with a list of file extensions used by the scanner

Drives

At least with the AntiVir Professional Edition AVGuard may monitor network and local drives differently. The Personal Edition only supports local drives.

Infected Files

Repair automatically

You have to activate this option in order to be able to repair infected files. AVGuard uses a special mode to search for viruses if this option has been activated. Using this mode, AVGuard is able to collect information weather the file may be disinfected or not. This option is required to be able to repair files. NOTE: This option has to be activated too, if you would like to have the repair option enabled that is shown in the virus dialog box displayed when an infected file has been detected.

System shutdown

Warn if floppy in drive A:

A lot of todays viruses still replicate via the boot sector of a floppy disk. If your BIOS startup option is still A:/C: and you leave a possibly infected floppy disk in your drive A:, the next system startup may cause you computer to be infected with a boot sector virus. To avoid this, AVGuard checks the drive A: for an inserted floppy disk at system shutdown if this option is enabled. This will minimize the risk of becoming infected with such a virus.


Status

This field displays the current status of the AVGuard for 9x Service.

Active

means that the VxD is up and scanning for viruses in the background. However, since AVGuard uses the options you've selected, some files may not be scanned.

Deacive

that the AVGuard VxD does not scan for viruses on your computer.


Trouble Shooting

If AVGuard/9x Personal Edition does not work properly or if you have any problems with AVGuard/9x or if you have an infection which you are not able to manage yourself, please check the following:

-	Please check if the VxD is active. The small red umbrella in the system tray must be opened. Please activate the VxD if necessary by cklicking the item 'Activate AVGuard' in the 'File'.

-	Check the settings of the group 'Files To Scan'. If 'Program Files Only' is selected, you should have a look into the file extension list. Please set it to default values if needed.

-	To be able to disinfect a file, it is important that the option 'Repair automatically' is enabled.

-	It is strongly recommended that you do not use resident virus guards from other vendors besides AVGuard. Multiple virus guards lead to an instable system in most cases.

More inormation can be found in the file README.WRI in the root directory of your CD-ROM, in the file READ.ME in the program directory of AVGuard/9x or in the internet at www.free-av.com.

If you cannot solve your problems yourself, please check our online support forum:

http://www.hbedv.net/cgi-bin/Ultimate.cgi

To enable us helping you efficiently, please add the following information to your request:

-	Version information of VDF-file, engine and program.

-	The version information of your operating system and the possibly installed service packs.

-	Installed software packages, e.g. antivirus applications from other vendors.

-	The exact (!) messages displayed by the application or shown in the logfile.

Our addresses:

H+BEDV Datentechnik GmbH

Lindauer Strasse 21

88069 Tettnang

Germany


Virus Infection

This sheet contains a short introduction to virus removal and infection handling, especially if AVGuard/9x detected a virus:

If AVGuard/9x detected a virus ...

1. Don't panic and beware calm!

AVGuard/9x has done all the important jobs automatically if it is configured correctly. If you tried to access or to start an infected file, it will be disinfected or moved or the access to this file will be denied. After a successfull disinfection, you can work with that file as usual. If a disinfection is not possile, the file will be normally moved to the quarantine directory and you'll get a warning.

2. Follow the antivirus instructions step by step, don't rush the things!

Now, it is important to check your complete workstation and all possibly infected floppy disks for viruses. It would be a good choice to let AntiVir/9x do this job since it has already been installed on your system. Please try to disinfect all infected files and boot records on your hard disk and all floppy disks. Ask your dealer or call H+BEDV if you need any assistance. Possibly it would be a good idea to activate the automatic repair option inside AVGuard/9x. If AntiVir/9x or AVGuard/9x is not able to disinfect the file, please send us a copy for further analysis. We will provide you with a solution as fast as possible. At least, try to investigate where the virus did come from. Check your anti-virus strategie if needed to beware of further infections.

3. Inform your colleques, your boss and your business partners!

It is not a very pleasant job, however information is very important in such cases. Especially, if the virus has been imported from outside your site. Please inform your colleques, your boss or your security manager about the infection!

4. Unknown new viruses and suspicious files

Please send new unknown viruses and suspicious files in an encrypted archive as an email attachment to virus@free-av.com. Please don't forget to mention the password and a short virus/file description.