Copyright: © 2001 Computer Associates International, Inc.


The Program Window
How to Use eTrust EZ Antivirus

When you run the eTrust EZ Antivirus program, the initial window that appears displays both the Browser and the Reports windows.

When you select one of the menus a drop-down menu displays further options. A brief description of the menu options associated with the command or icon appears in the Status Bar (bottom left) of the screen.

These options explain the various activities associated with the use of these windows.

Introduction to the Browser window

Introduction to the Report window

How to set the defaults


Go icon
eTrust EZ Antivirus Application Functions

Selected from the top left corner of window, this function offers the standard Windows commands Restore, Move, Size, Minimize, Maximize and Close (which has a Hot Key ALT F4).

Restore, Minimize and Close operate when the eTrust EZ Antivirus window is full size.  All the commands except Restore operate when the eTrust EZ Antivirus window is less than full size.


How do I use the toolbar buttons??
Toolbar Buttons

The eTrust EZ Antivirus program uses standard Windows icons, buttons (i.e. Minimize, Maximize, Cascade, and Close), slider bars, and menu commands such as File, Edit and Help.  Menu commands, icons and buttons specific to eTrust EZ Antivirus usage are explained below.

When you position the cursor above a toolbar button without selecting the button, a help text appears in a small pop-up window beside the button.

Select the options below for information on:

Directory Tree View button

Move up button

Large Icon button

Small Icon button

List button

Details button

Change options

Go button

Stop button


Directory tree view
The Tree View Button

This button allows you to enable/disable the tree view on the eTrust EZ Antivirus interface. We recommend this as the most informative view option. This method of viewing the eTrust EZ Antivirus interface can also be toggled using the View | Tree view menu option.


The Move Up Button

Select this button to move to the parent directory of the directory currently displayed.


The Go Button

Select this button to scan the selected item(s) using eTrust EZ Antivirus.  If no item(s) have been selected, then eTrust EZ Antivirus prompts you to specify a path and then to try again.  The results of the scan are noted in the Report window and the second and third panels at the bottom of the eTrust EZ Antivirus window note the number of files scanned, the number of scanned files found to be infected and the number of scanned files suspected of being infected.


The Stop Button

Select this button to stop the scanning process. The Report window notes that the operation was interrupted.  The second and third panels at the bottom of the eTrust EZ Antivirus window note the number of files scanned before the scan was interrupted, the number of scanned files found to be infected and the number of scanned files suspected of being infected.


The Large Icons Button

Select this button to display large icons in the Browser window. Either specific or generic icons may be displayed, depending on the file they refer to and the All Icons option under the View menu .


The Small Icons Button

Select this button to display small icons in the Browser window. Either specific or generic icons may be displayed, depending on the file they refer to and the All Icons option under the View menu .


The List Button

Select this button to display the list of files, folders or drives in the Browser window. Either specific or generic icons may be displayed, depending on the file they refer to and the options chosen from the View menu .


The Details Button

Select this button to display the list of files, folders or drives in the Browser window along with their various details such as type, size, and date last modified.  Selecting the title of one of these details sorts the window according to that category of information. Selecting the same category again reverses the order of details.

This option uses the small icons associated with each item. Either specific or generic icons may be displayed, depending on the file they refer to and the options chosen from the View menu


What the Window Commands do
What the eTrust EZ Antivirus | Window menu does

To activate any menu item press both the <ALT> key and the first letter of the menu required.  To select an option from the menu, press both <Shift> and the letter that is underlined in the option. (once the menu is displayed the arrow keys can be used to navigate to the selected menu option)

i.e. Select an item(s) with the mouse, press down both the <ALT> and <F> keys to activate the File menu, then both <Shift> and <V> to run the scan.

Select the options below for information on:

File

Edit

View

Options

Tools

Window

Help


The File Menu

Go:	Scans the selected item(s). If no item(s) have been selected, then eTrust EZ Antivirus prompts you to specify a path and then to try again.  The results of the scan are noted in the Report window and the second and third panels at the bottom of the eTrust EZ Antivirus window note the number of files scanned, the number of scanned files found to be infected and the number of scanned files suspected of being infected.

Stop:	Stops the scanning process.  The Report window notes that the operation was interrupted.  The second and third panels at the bottom of the eTrust EZ Antivirus window note the number of files scanned before the scan was interrupted, the number of scanned files found to be infected and the number of scanned files suspected of being infected.

Exit:	Quits the eTrust EZ Antivirus application.


The Edit Menu

Copy:	Standard Windows command (Ctrl C).  This command can be used to cut sections of the log file for storage on the Clipboard.  Such item(s) can be then pasted to a Word document.

Select All:	Selects all files, folders or drives displayed in the Browser window if it is the active window.  Selects all the text in the Report window if it is the active window.

Invert Selection:	When the Browser screen is active this inverts the previous selection.  That is, if one or more files, folders or drives were previously selected, this command selects the remaining files, folders or drives to the exclusion of those previously selected.


The View Menu

These options alter the way the icons and information about files are presented in the browser window. The first four options are mutually exclusive.  That is, selection of one will cancel the previous selection.

Large Icons:	Displays large size icons in Browser window.

Small Icons:	Displays small size icons in Browser window.

List:	Displays list of files, folders or drives in Browser window.

Details:	Displays details (e.g. Name, Size, Type, Date Last Modified, Total Size, Free Space) of files, folders or drives in Browser window.

Arrange Icons:	Directory contents can be arranged by Name, Size, Type and Date of last modification. (Depending on the option All icons either specific or generic icons may be displayed.)

All icons:	Switches the Browser display between generic and file specific icons.

Directory Tree:	Enables the directory tree structure to be viewed or hidden.

Refresh:	Cancels the selection of any item(s) in the Browser window. Also checks to see if there have been any changes to the items displayed in the Browser window (it updates the list if there have been any new files added, removed or any other changes made to the directory that is currently displayed).

View Log file 	Log files for scanning and AutoDownload can be viewed. If you use Windows 95, 98 or ME, there will also be an option to view the resident log file. If you use NT, 2000 or XP, the resident log is written to the event viewer..


The Options Commands (Alt+O)
The Options Menu

Program:	Selecting this menu item opens the Program dialog, which allows changes to the default settings for every subsequent scan. Program dialog

Real-Time Protection:	Selecting this item opens the Real-Time Protection dialog, which allows changes to the way the Real-Time protection operates Real-Time dialog

Options Wizard:	Selecting this item runs the configuration wizard. For further details on the Installation/Configuration wizard please select the on-line help button that is on each dialog of the wizard. Options Wizard

Password Protect Options:	Password protection has been added to stop unauthorized alterations to your eTrust EZ Antivirus configuration. The password protection can be enabled by selecting Options | Password Protect Options and entering a password.

NOTE: The password that is entered is case dependent, so an "e" is not the same as an "E". The default password is eTrust EZ Antivirus.

See Password protection for further details.


Options wizard
The Options Wizard

For help on any of the options which are displayed during installation please select the context sensitive help button on each page of the wizard


The Window Menu

Report: 	Selecting this option activates the Report window.

Browser:  	Selecting this option activates the Browser window.

Directory Tree:	Enables the directory tree structure to be activated or deactivated.


The Help Menu

Help Topics: 	Accesses eTrust EZ Antivirus On-line Help

Virus Information: 	Gives basic information about different types of viruses. For details about any specific virus please see www.ca.com/virusinfo/encyclopedia

About: 	This dialog displays the version number of your current copy of eTrust EZ Antivirus. Provided that the name of the registered user, the name of the registered company and the eTrust EZ Antivirus customer number were entered during installation, these details are also displayed in this box.


Browser window: Introduction
How to use the eTrust EZ Antivirus Browser Window

The eTrust EZ Antivirus Browser window can be used to view the contents of folders, directories, drives, and to select items for scanning.

To open (display the contents of) a folder, directory or drive that is in the Browser window, double-click on the item or click <Enter> if the item has already been highlighted.

Press the "Level Up" toolbar button to move to the parent directory of the directory currently displayed.

How to select files in the browser window

How to start scanning the selected files


DAT file updates
Virus Data File updates are available to update eTrust EZ Antivirus

Open eTrust EZ Antivirus from the using the tray icon. Select Tools | Auto Download and follow the prompts from there. Information about the latest dat file can be found at:

http://www.my-etrust.com/news/notification/


Browser window: How to select file(s) for scanning
Selecting the File, Folder, Directory or Drive for Scanning

To select an item in the Browser for scanning, click it with the mouse.

Multiple items can be selected by using standard Windows actions with the <Shift> and <Ctrl> keys. All items in the Browser window can be selected by using the  Edit | Select All command.

If you select individual files to be scanned they are scanned.

If you select directories or drives, only the files with extensions in the executable list are scanned.

For further information on the list of files considered executable click here.

How to start scanning the selected files


Scanning files from the browser window
How to Start a Scan

Once item(s) have been selected for scanning, any of the following actions initiates the scan:

1.	pressing the GO toolbar button;

2.	selecting the File | Go menu item;

3.	pressing the right mouse button and selecting the 'eTrust EZ Antivirus' option in the pop-up menu;

Results of the scan are displayed in the Report window and also written to the log file. (see the Options | Program | Reporting menu for the name of the log file). Depending how the item(s) for scanning were selected, one of the following options occurs;

1.	If the Browser window  is active when a scan is started:

2.	If the Report window  is active when a scan is started:


When a scan is activated from the browser window
If the Browser Window is active when the scan is started:

Item(s) that have been selected in the Browser window are scanned.

The Browser window is active immediately after item(s) have been selected.

If no item(s) are selected and a scan is started eTrust EZ Antivirus displays a message box prompting you to select a file, folder or drive in the Browser window and then to try again.


When a scan is activated from the report window
If the Report Window is active when a scan is started:

eTrust EZ Antivirus displays a message box prompting you to select item(s) and then to try again.

This occurs even if an item has been highlighted in the Browser box.

Click on the Browser icon to make it active, and then try again


Report window
About the Report Window

The report window displays the results of scans. The Options | Program | Scanning  menu allows changes to the types of files scanned (either all files or executables only) and also allows sub-directories  to be scanned. Sometimes cautions and warnings may occur during a scan, see Log File details  for further details.

The Options | Program | Reporting  menu can set the report window to show all files scanned or only those that are infected or suspected. Checking the check box Cumulative report causes the report window to show the results of the current scan after the results of the last i.e. causes a log. Not checking the box cleans the report window before the results of a scan are displayed.


How to use the report window
How to use the eTrust EZ Antivirus Report Window

The Report window displays the results of scans done in the current session.

The various options possible while using the Report window are described below;

1.	Text can be copied to the Clipboard using the Copy command;

2.	All the text in the Report window can be selected for copying using the Edit | Select All command;

3.	The results that are displayed in the Report Window can also be emailed. See the Options menu for further details.

4.	The names of the files that have been scanned can be displayed in the report window.  Either all of the file names scanned can be displayed or only those that are suspected of having a virus can be displayed. This option can be set under the Options | Program | Reporting menu


How to use the options | program window
How to Edit the Defaults (Options | Program menu)

The Program dialog is opened by selecting Options | Program from the menu. It provides an opportunity to change the eTrust EZ Antivirus default options for Scanning, Actions, Reporting, Boot Sectors and Memory. Each option can be examined by selecting the appropriate tab at the top of the window. The processes involved in adjusting the default settings are detailed below:

NOTE: 	Set All files if you suspect that you may have a virus or you have just had a virus – it may find infected overlay files with obscure extensions that Files of these types test may not test, as well as any non-executable files the virus has corrupted by trying to infect.

Select the options below for information on:

Scan Options

Standard/Non-Standard Scan

Include subfolders

Skip renamed files

Heuristic Scan

File Types

File Types to scan

Reporting

Reporting when a virus is found

Download Scheduler

Cleaning Options

Action - Infected files

Action - Uncleanable files

Advanced Cleaning

Boot Sectors

Scan boot sectors plus options

Memory (Not available for NT users)

Real-Time memory checking

Scheduled Scan

Scheduled Scan


Tools menu
The Tools Menu

The Tools menu (<Alt> T) allows a template or reference disk to be created for each disk drive. A template is a copy of the current boot sector. eTrust EZ Antivirus can compare the saved copy of the template with the current template to determine if changes have occurred. The reference disk stores copies of the templates to a floppy disk.

The re-installation of an old template can cause files to be lost if the drive structure was changed after the template was made. For this reason the ability to re-install templates (emergency functions) are protected with a password.

NOTE:	New templates are required if more drives are added, the partitions of current drives change, or the operation system is updated.

Record Templates

Record Reference Disk

Emergency functions

Change Password

Auto Downloads


Making a drive template
How to Record Templates

The tools menu allows a template to be created for each local hard disk drive. eTrust EZ Antivirus checks that the template matches the current boot sector as part of the first scan of any session.

A dialog displays all of the drives available. Click on each drive (or use the space bar and arrow keys) to select the drive(s) that you wish to make templates for.

Options:

OK:	A template for each of the selected drives is made.

Cancel:	No templates are made.

Help:	Displays this help screen.


Making a reference disk
How to make a Reference Disk

A reference disk can be made to store copies of the current templates. These templates can be re-installed at a later date if the drive has been corrupted by an unrecoverable virus.

Select the floppy drive that produces the reference disk by using the arrow keys or selecting from the scroll-down menu. Enter a caption in the Identification field ( <Alt> I) so that copies of the current template(s) can be recognized at a later date. As a default, the  Identification field type-in box stores the time and date that the templates are created.

This disk should now be kept in a safe place.

NOTE:	To format a new disk insert it into the floppy drive, in Explorer click the drive, then click the right-hand mouse button. Select Format, Full and Start.


Emergency functions
Emergency Services

The re-installation of an old template can cause files to be lost if the drive structure was changed after the template was made. For this reason the ability to re-install templates is protected with a password .

When the correct password has been entered the Emergency Services dialog appears. Select the local hard drives that you wish to verify then select <Enter> to begin the comparisons. As each of the drives are checked a dialog appears with the results of the comparison.

If a drive template was not created, a dialog confirms that no comparison is possible. It is only possible to check local hard drives.

If the Boot sector, DOS and large IDE template attributes match the current drive configuration, select the OK button to begin the next comparison.

If the template does not match the current drive configuration, eTrust EZ Antivirus offers to replace it with the original template.

YES:	Loads the original template over the current configuration.

NO:	The template remains the same and is not replaced.


Change password for emergency functions
How to change the Emergency Functions Password

For security reasons the password should be changed periodically.

To change the emergency password;

1.	Enter the current emergency password in the Current Password text box

2.	Enter the new password in the New Password text box

3.	Re-enter the new password in the Confirm New password text box

4.	Click the OK button


The Options Program Report Browse dialog.
How to use the Report File Dialog

This dialog allows the user to define the location of the log file. The file structure can be navigated and new files/folders can be created as required.

This dialog is accessed from the Options | Program | Reporting menu command and pressing of the Browse button.  It enables you to browse for alternate files to use as the log file or to create a new file in a chosen directory.

NOTE:	As the log file needs to be DOS editable the name must NOT contain spaces; unprintable characters or contain directory names longer than eight characters.

Toolbar buttons used in this window are explained below:

Up One Level 	Press the "Level Up" toolbar button to move to the parent directory of the directory currently displayed.

Create New Folder 	Used to create a new folder in the folder, directory or drive displayed in the Report File window.

List  	Select this button to list the files, folders, directories and/or drives available. The List and Details buttons are mutually exclusive.

Details 	Select this button to display the details (type, size, and date last modified) for the files, folders, directories and/or drives available. The List and Details buttons are mutually exclusive.

The File name dialog allows the name for a new log to be entered

Save as type changes the type of file to be displayed.

Save & Cancel Buttons


Virus in Memory! dialog
Virus in Memory

The Virus in memory! dialog appears immediately if a virus is detected in resident memory. The first function performed by eTrust EZ Antivirus when a scan is activated is to check resident memory for viruses.

Resident memory (RAM) is checked for viruses at the start of each eTrust EZ Antivirus session (i.e. when the first scan is requested eTrust EZ Antivirus checks resident memory and then checks the item(s) requested for scanning.)

Options:

Yes	A message confirms if eTrust EZ Antivirus has disabled the virus(es). If it has not been possible to disable the virus e-mail Customer support

Once eTrust EZ Antivirus has dealt with the virus in memory it automatically checks the boot sectors of all hard drives. See below.

No	Check the  Help | Virus Information menu for details on virus payloads. WARNING: If the virus present on your computer has a "payload"  it may severely damage your files(s) and drive(s).

Details	The Detail of viruses in memory  dialog displays the number, name and memory location of the virus(es) that have been found.

Help	Displays this help page.


Virus in Memory! dialog
Details of the Virus(es) in memory

This dialog is displayed when the Details option is chosen on the Virus in memory dialog.

This dialog displays the number, name and memory location of the virus(es) that have been found in resident memory.

Selecting the OK button closes the dialog and returns to the Virus in memory dialog.

Virus in memory dialog


Repair infected (hard disk) boot sectors
If eTrust EZ Antivirus finds a Hard Disk Boot Sector Virus

eTrust EZ Antivirus checks drive boot sectors if the Options | Program | Boot Sectors menu has the Scan boot sectors option enabled and the infected drive is scanned.

If a virus is detected, the Repair infected boot sector? dialog is displayed. This displays the name of the drive and the type of virus found. It also displays options to repair the boot sector (if this is possible).

Options:

Yes	eTrust EZ Antivirus displays the Make a Rescue Disk dialog. A rescue disk can be made to store copies of the current file structure. The structure can be re-installed at a later date if the drive is corrupted by an unrecoverable virus.

No	The fact that the virus has been found is recorded in the log file.

WARNING:	If the virus present on your computer has a "payload" it may severely damage your files(s) and drive(s). Check the Help | Virus Information menu for details on virus payloads.

Help	Displays this help page.

YES - Make a rescue disk


Virus payloads or warheads
Payloads and Warheads

The first virus writers were content with proving that they could write a virus, but now most add a PAYLOAD or WARHEAD. This may be in the form of a message displayed on the screen or it may be something that interferes with the operation of the computer in an 'amusing', irritating or destructive manner.

With warheads, there is a conflict between the desire to show off and the need to be inconspicuous so that the virus will propagate widely. This is usually achieved by making a warhead wait a certain amount of time or wait for an unusual event, or trigger so that the virus does not declare itself until it has had a chance to propagate.

WARNING:	It is unwise to deliberately trigger a virus' s warhead. There are often variations and revisions made to viruses. Viruses that have been harmless in the past may have been modified to cause substantial damage. Some people cannot resist the temptation to run a virus and the consequences of doing so can be disastrous.


Make a rescue disk dialog
How to make a Rescue Disk:

A rescue disk can be made to store copies of the current boot sector. The current boot sector can then be re-installed at a later date if the virus has corrupted the original boot sector and it is unrecoverable. This dialog is activated by selecting Yes in the Repair infected boot sector? dialog.

Insert a blank formatted disk in the floppy drive. (If you do not have a new disk see NOTE: below). Select the floppy drive that will produce the reference disk by using the arrow keys or selecting from the scroll-down menu. Enter a caption in the Identification field ( <Shift> I) so that the rescue disk can be recognized at a later date. As a default, the Identification field type-in box stores the time and date of the creation of the disk.

NOTE:	To format a new disk check that the disk can be written to (i.e. the hole in the top, right side of the disk is open), insert it into the floppy drive, in Explorer click the floppy drive once, then click the right-hand mouse button. Select Format then Start.

STOP!	As soon as the rescue disk is created it will be infected with the virus and has the potential to infect other PCs. Do not use this disk in any other PC.

Options:

Yes	The rescue disk is created allowing eTrust EZ Antivirus to recover the current boot sector if the original has been corrupted by the virus. Once the disk is created, eTrust EZ Antivirus checks to see if the original boot sector is recoverable and displays the Ready to replace boot sector?  dialog.

No	The virus is removed. If the original boot sector can be found and it has not been corrupted eTrust EZ Antivirus displays the Ready to replace boot sector? dialog. If the original boot sector has been destroyed by the virus eTrust EZ Antivirus displays the Master boot record damaged dialog.

Help	Displays this page.

Ready to replace boot sector?

Master boot record damaged


Install a standard boot sector
If the original Boot Sector has been corrupted:

If the virus has damaged or destroyed the original boot sector, eTrust EZ Antivirus displays the Master boot record damaged dialog. This allows the option of installing a standard boot sector which will recover the drive for almost all systems. If the installation fails to recover the drive, the rescue disk (if one was created) can be used to reverse the cleaning process. Email Customer support

NOTE:	If a standard boot sector is installed on a non-standard drive, the drive will be corrupted and all files may be lost. A rescue disk can reverse the cleaning process and re-install the infected (but functional) boot sector.

Options:

YES	Installs a standard boot  sector.

NO	The fact that the virus has been found will be recorded in the log file.


Install original boot sectors
Installing the Boot Sector:

At this point the original boot sector (or a standard replacement if the original was not recoverable) is able to be installed as the boot sector for the hard drive.

NOTE:	If a standard boot sector is installed on a non-standard drive, the drive will be corrupted and all files may be lost. A rescue disk can reverse the cleaning process and re-install the infected (but functional) boot sector.

Options:

YES	Replaces the boot sector.

NO	The fact that the virus has been found will be recorded in the log file.


Repair infected (floppy disk) boot sectors
"Replace Floppy Boot Sector?" dialog

eTrust EZ Antivirus checks floppy boot sectors if the Options | Program | Boot Sectors menu has the Scan boot sectors option enabled and the infected drive is scanned.

If a virus is detected the Repair infected boot sector? dialog is displayed. This displays the name of the drive and the type of virus found. It also displays options to replace the boot sector (if it is possible to repair it).

Options:

Yes	eTrust EZ Antivirus replaces the existing boot sector with a standard floppy boot sector.

No	The fact that the virus has been found is recorded in the log file.

WARNING:	If the virus present on your floppy has a "payload" it may severely damage your files(s) and spread to other drive(s) and floppies. Check the Help | Virus Information menu for details on the amount of damage this virus can cause.


Removing file viruses
How to remove File Viruses

File viruses are automatically removed, if the Options | Program | Action tab has been set to Clean infected files. Other possible options are to automatically delete or rename the file. Whichever option is selected, the name of the virus and the name of the infected files is written to the log file.

When a scan is performed on a group of files, the name of the infected file(s) along with the name of the virus and the action eTrust EZ Antivirus has taken is displayed in the eTrust EZ Antivirus Report window.  By default only those files that are infected are displayed. All the files scanned can be displayed if the Options | Program | Reporting All files scanned option is selected.


What the Ok & Cancel do.
The OK/Save and Cancel Buttons

OK/Save	Closes the dialog and saves any changes or selections that you have made.

Cancel	Closes the dialog without saving any changes or selections.


File monitoring Save & Cancel buttons.
Real-Time File OK and Cancel Buttons

OK	Closes the Real-Time Protection Options dialog  A summary of the current settings is displayed Selecting OK saves the changes that have been made.

Cancel	Closes the Real-Time Protection Options dialog without saving any changes or selections that you have made in this dialog box.


Password protection
Password Protecting Your eTrust EZ Antivirus Setup

Many system administrators have asked that we provide password protection to stop unauthorized alterations to the eTrust EZ Antivirus configuration. This password protection can now be enabled by selecting Options | Password Protect Options and entering a password.

NOTE: The password that is entered is case dependent, so an "a"  is not the same as an "A.


Contact Information

We are serious about providing high quality, problem free products and services.

If you have a question about any my-eTrust.com product or service, please review the following support options:

•	Offline Help: To view our off-line Frequently Asked Questions please Click Here

•	Ask Sammy is our my-eTrust.com online knowledge base. Ask Sammy provides answers to your questions regarding our products and the my-eTrust.com web site. This knowledge base provides answers to Technical, Sales, Purchasing, Billing, Account, Licensing and Registration related questions.

To Search our online knowledge base please see http://www1.my-etrust.com/ask.sammy
To View our Frequently Asked Questions (FAQ) simply click on the link at the bottom of that page.

•	Free Email Support is available 24 hours a day, 7 days a week. To submit an email support query, please see http://crm.my-etrust.com/caUSP/CT/portlet_email.asp .
Once you fill in your email address and message and click submit, your email is sent to our knowledge base for a quick search. You will receive an email back from the Ask Sammy Knowledge Base with the best results for your search. If, in fact, the Ask Sammy response does not answer your question, simply email EZ_AVSupport@ca.com (including the original message text) and your email will be sent to a support representative. We will try our best to get back to you within 48 hours of your email to the representative.

•	Submit a Virus Sample: If you suspect that you have a file that is infected with a virus that IS NOT detected by eTrust EZ Antivirus Personal Edition, please visit the following Virus Submission page:
http://www.my-eTrust.com/services/virusSample.cfm
eTrust Global Antivirus Research Centers will make a signature update file available within two business days of receiving the sample.

*To access any of the links on this page please copy and paste the URL into your browsers address bar.*


EICAR
Eicar - A file to test your configuration

This is a program from the European Institute for Computer Anti-Virus Research that can help test the virus detection capabilities of Antivirus software.

This is a small .COM file for DOS that simply prints the message

EICAR-STANDARD-ANTIVIRUS-TEST-FILE!

when executed. It has the useful property that it consists entirely of printable ASCII characters, so you can easily email or fax it to someone.

Many anti-virus products detect this file as if it had a virus. Most give a special message to make it clear that this is a test file and not a real virus. For example, when the EICAR file is scanned, the following message is displayed:

EICAR.COM is the EICAR test string reviewer test file.

The main use of the EICAR test file is to test that your Anti-Virus software is configured and operating correctly. For example, it could be used to test that Real-Time protection is active and behaving accordingly.

While this file obviously has absolutely no virus code in it, you should only distribute it to people who have a clear understanding of what it does. Also, do not store it on production machines that run anti-virus software (except as part of a deliberate test), as it will probably trigger whatever alarm bells are in place.

Please refer to the EICAR Standard Anti-Virus Test File web page (www.eicar.org/anti_virus_test_file.htm) for more information.

Here is the EICAR test string, in its entirety:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Welcome to eTrust EZ Antivirus Personal Edition

Congratulations on choosing eTrust EZ Antivirus Personal Edition to protect your computer against viruses, trojans and other malicious software.

eTrust Antivirus is a cutting edge, high performance antivirus package specifically designed to protect small businesses and home users from everyday virus threats.

eTrust Antivirus is designed to protect individual computers without having to be installed from a network server. If you wish to install anti-virus protection to many computers in a business environment we recommend you evaluate other anti-virus products in the eTrust EZ Antivirus range.

This high quality Antivirus tool comes with FREE software updates to registered users.

Registered users also receive FREE Internet E-mail support. The answers to many support questions can be found in the online help. From your web browser you can open http://www.my-etrust.com/ask.sammy where you will find the answers to around 80% of the questions that are asked of our support team.

By registering, you are automatically subscribed to our FREE Virus Threat Notification System as well as our Update Notification Service. Anytime a new virus is found that is actually spreading around the world, this service sends an email to you when a new virus signature update is available. This handy service ensures that you are kept up to date and protected against the very latest viruses. The Update Notification Service only alerts you when a new virus signature is posted on the Internet.


Entering the password
Password

The password can be invoked by either selecting Options | Password protect options, or Tools | Emergency.

Options | Password protect options:

This feature is in eTrust EZ Antivirus for Windows 95, 98, NT, 2K, ME or XP workstation because many system administrators asked that we provide password protection to stop unauthorized alterations to the eTrust EZ Antivirus configuration. The password protection can be enabled by selecting Options | Password Protect Options and entering a password.

The password protection of the Options menu can be disabled by selecting Options | Password Protect Options and entering the correct password. (The password protection for the Tools | Emergency menu is not affected by disabling the Options menu password).

Tools | Emergency:

The re-installation of an old template could cause files to be lost if the drive structure was changed after the template was made. For this reason the ability to re-install templates is protected with a password.

The Emergency Password dialogue appears when the Tools | Emergency functions menu is selected. It prompts for a password to allow access to the emergency options, and continues to prompt until the correct password is entered.

NOTE:	The password can be up to 11 printable characters and is case dependant, so an "a" is not the same as an "A".


The Standard or Non-Standard Scan option
Scan Options (Options | Program | Scan Options)

Non-Standard Scan: We STRONGLY recommend you do not use this option. It causes your Antivirus protection to examine every byte of a file when checking for viruses. This increases the time your Antivirus software takes to check your files and disks and is only recommended if you have had a virus.
You can choose either Standard or Non-Standard Scan but not both.

Standard Scan:  Choosing this option causes your Antivirus protection to examine the entry point and selected areas of a file when checking for viruses. This is the preferred mode for routine checking of your files and disks as it is both extremely fast and extremely accurate.
You can choose either Standard Scan or Non-Standard Scan but not both.

Include subfolders

Show network drives

Skip renamed files

Heuristic Scan


Skip renamed files
Include Subfolders/Skip renamed files/ Show network drives

Include subfolders:	eTrust EZ Antivirus checks the subdirectories or subfolders of the current directory or folder.

Show network drives: If your PC is attached to a network and this option is enabled, the network drives are displayed (and can be scanned) in the Browser.
Enabling this option also causes files that are stored on network drives to be scanned by the resident protection before they are used by the PC.

Skip renamed files:	Causes eTrust EZ Antivirus not to check those files which have been renamed by eTrust EZ Antivirus during previous scans. Renaming occurs if the default in Options | Program | Scan Options is set to Rename and a suspect file is found. The file extension is changed so that the first letter is an underscore. Thus.exe becomes ._xe.

Heuristic Scan:	Heuristic scanning uses a rules-base to detect viruses that have not been seen by CA before. So if it looks like a virus, and acts like a virus then it is a virus. This type of scanning may occasionally trigger a false alarm; although it may also save you from a new virus.


Scan all files or only executables?
File Types to Scan (Options | Program | File Types)

This dialog allows you to determine which files types are scanned for viruses.

All files: 	Causes eTrust EZ Antivirus to check every file it encounters for viruses. You can choose either All files or Files of these types, but not both.

Files of these types:	Causes eTrust EZ Antivirus to check files that it considers susceptible to infection. For a list of the file types that will be checked please select Options | Program | File type.

Add, Delete and Default buttons: For more information Click Here

Scan archives (zip): If this option is enabled eTrust EZ Antivirus scans ZIP files.

Compressed archives can contain other compressed archives (this is called nested archives). eTrust EZ Antivirus scans ten levels deep into any compressed archive.

Add eTrust EZ Antivirus to context menus for these file types: If this option is selected and you are using MS explorer (or another navigation tool) you can select a file, directory or drive, right click the mouse button, and eTrust EZ Antivirus will scan your selection.

NOTE: When you are upgrading eTrust EZ Antivirus and choose Next> to continue past this screen eTrust EZ Antivirus checks your current list of file extensions. If you do not have all of the file extensions that we recommend (as they are susceptible to infection) a dialog appears and prompts you to update your extension list.


Add delete default buttons
Add, Delete and Default Buttons

These buttons allow you to change the list of file extensions that eTrust EZ Antivirus considers when determining if a file may be infected.

Add: Allows you to add to the list of file extensions eTrust EZ Antivirus considers executable. With the advent of Macro language viruses, it is now possible for a file with any extension to contain a virus that can infect your PC. Selecting this button causes an input window to appear. You then have the opportunity to enter the new file name extension in the type-in box. If you wish to scan compressed archives we recommend you use the scan compressed archives option rather than adding them to the list of file types to scan.

Delete: If you select a file extension from the displayed list and press this button, the file extension will be removed from the list that eTrust EZ Antivirus considers executable.

Default: Restores the default list of file extensions that eTrust EZ Antivirus considers executable.


Overwriting Viruses

Most viruses are careful not to destroy the infected file, but overwriting viruses overwrite part of the infected file, so that it may no longer operate. However, this makes these viruses extremely obvious, so they are unlikely to spread far.

The Zeroto-0, or Australian 403 virus, is of this type. When an infected file is run, the virus searches for an uninfected.COM file and replaces it with a 403 byte file which only contains the virus. The original file is destroyed, so infected files appear to run, but do nothing.


How to alarm when a suspected file is found
Reporting (Options | Program | Reporting)

This dialog controls what is displayed in the Report window and written to the log file.

File names reported

All files scanned:	Causes eTrust EZ Antivirus to display, on a separate line, the name of each file it scans (which in turn causes the name of every file scanned to be written to the log file, regardless of whether it had a virus or not). This is useful in explicitly identifying which files are not infected (eTrust EZ Antivirus uses a separate line for each infected file).

Infected files only: 	Causes eTrust EZ Antivirus to report on a separate line, the name of each file it finds to be suspect or infected.

The All files scanned and Infected files only options determine which file names are to be listed in the Report window. These two options are mutually exclusive.

Write log: 	The name of the log file to which all scan results are written is displayed in the type-in box. The location of the log file can be changed using the Browse button to select an existing file or allow the entry of a new file name.

Cumulative report:	If this option is enabled the results of each scan are stored cumulatively in the log file. If it is NOT enabled the log file is cleaned and overwritten each time a scan is performed.

Limit log size to:	Once you perform a scan and the file becomes larger than (the default) 32Kb it is automatically overwritten with the newer information. The log file size can be configured by editing the "limit log file size to" field.

Configure Download Scheduler

NOTE: As the log file needs to be DOS-editable, the name MUST NOT contain spaces, unprintable characters or contain sub-directory names longer than eight characters.


Auto Downloads

If you ARE connected to the Internet and you are using MS IE 4.0 or equivalent, Auto Download offers an easy way to update your software to detect the latest viruses.

How to use the Auto download feature:

1. Open eTrust EZ Antivirus and select Tools | Auto Download

2. The Auto Download dialog is displayed.

3. The Save As dialog is displayed and asks where to store the update files. Leave the default settings and select 'SAVE'. The file is downloaded to your computer. (This may take a few minutes depending how fast your modem is). A message is displayed when the files have been successfully downloaded. You are then asked if you wish to install the files. Select 'YES".

4. A message appears to let you know the Minor Update has completed successfully. Click 'OK'.

If you are NOT connected to the Internet it is not possible to update your computer using this method. If you have access to the Internet but not on the machine that you wish to update, you can download a DAT file update kit from the web site, save it onto a floppy and copy it to other computers.


Configure out of date warning
Advanced Virus Update Settings

I will remember to download the Virus Update Myself

If you select this option your Antivirus protection will not prompt you, or automatically try to update itself. If you do not have Internet access you might want to select this option.

Just remind me to download the Anti-Virus update every…

Click here for more information on this option

Download the Anti-Virus Update every:

Click here for more information on this option


Remind me to update
Just remind me to download the Anti-virus update every…

Please choose how often you would like to be reminded to update your software. Select either Month, Week or the number of days between each reminder.


Download Scheduler
Autodownload Schedule

On these days

Select the days of the week, and the time of day you want your Antivirus software to be updated.

Every X hours

If you would like to be kept up to date with the very latest protection you can select this option and your Antivirus software will check for new information every X hours.

Automatically connect to the Internet if I’m not already online

If you want to check for the very latest Antivirus signatures your Antivirus software needs to connect to www.my-etrust.com. If you are not already connected to the Internet is it okay to automatically connect and look for any updates?

Only start and AutoDownload when the processor is idle

This option causes your Antivirus software to delay checking if you are busy on your computer. So if you do not wish to be interrupted by scheduled updates then select this option.


Infected files
Cleaning Options (Options | Program | Cleaning Options)

The following mutually exclusive options are available for dealing with infected files.

Action - Infected Files

Report only: Causes eTrust EZ Antivirus to report, but not attempt to clean, infected files.

Clean: Causes eTrust EZ Antivirus to attempt to disinfect virus-infected files, returning the files to working order. By selecting this option you automatically enable the Advanced Cleaning Options which can be configured by selecting the button below.

Rename: Causes eTrust EZ Antivirus to change the first letter of the extension of any file infected with a virus to an underscore '_' (.DOC becomes ._OC). This allows you to keep the file for further examination.

Delete: Causes eTrust EZ Antivirus to irreversibly delete any file that it finds has been infected with a virus. The file is first overwritten with 'D's and then set to zero length, so no recovery of the deleted files is possible.

NOTE: Use this option with caution, as there is no possibility of recovering files deleted in this manner.

Action - Uncleanable Files:

Report only: Causes eTrust EZ Antivirus to report, but not attempt to clean, infected files.

Rename: Causes eTrust EZ Antivirus to change the first letter of the extension of any file infected with a virus to an underscore '_' (.DOC becomes ._OC). This allows you to keep the file for further examination.

Delete (use with caution): Delete causes eTrust EZ Antivirus to delete irrevocably any file that it finds has been infected with a virus. The file is first overwritten with 'D's and then set to zero length, so no recovery of the deleted files is possible.

Advanced Cleaning


advanced cleaning
Advanced Cleaning (Options | Program | Cleaning Options | Advanced Cleaning)

System Cleaning: These options are used to clean infected operating systems. We recommend that these options are enabled.

Cleaning Registry Some types of viruses require the registry to be cleaned to fully remove the infection.

Clean INI files Some types of viruses write to win.ini. This option allows eTrust EZ Antivirus to clean up the win.ini file when a virus is detected.

Kill processes Sometimes it is difficult to clean a virus as it is running as a process. This option allows eTrust EZ Antivirus to kill viruses processes during the clean up procedure.

Rebootable clean After cleaning some viruses it is necessary to reboot the computer to completely remove the virus. This option allows eTrust EZ Antivirus to reboot during the cleaning of these types of viruses.

Delete trojan/worm/droppers eTrust EZ Antivirus attempts to delete these types of files as there is nothing to be recovered from them. If the attempt to delete fails the files are treated as if they are incleanable files. For further information on the treatment for uncleanable files Click Here

Delete damaged files Some types of viruses (such as overwriting viruses) destroy parts of the host making it impossible to recover the file. This option allows eTrust EZ Antivirus to delete these types of virus.


Boot sectors and IDE drives
Boot Sectors (Options | Program | Boot Sectors)

This dialog sets up the defaults for the treatment of boot sectors.

Scan boot sectors Allows eTrust EZ Antivirus to scan boot sectors. Turning this option off causes all the other options in this dialog box to become inactive.

Consider a boot sector bad if it contains: The following options tell eTrust EZ Antivirus how to define a bad boot sector; The first option gives adequate protection, whilst the last gives an extremely high level of protection. The three levels of protection are mutually exclusive. i.e. only one can be chosen.

Known viruses only Causes eTrust EZ Antivirus to consider a boot sector bad only if it contains a known virus.

Invalid boot sector or known virus Causes eTrust EZ Antivirus to consider a boot sector bad if it contains an invalid boot sector or a known virus.

Unknown or invalid boot sector, or known virus

STOP! 	Replacing unknown boot sectors may cause problems with some backup programs and copy-protected software. You should only use this setting if you are aware of the potential problems. Causes eTrust EZ Antivirus to consider a boot sector bad if it contains an unknown or invalid boot sector or a known virus.

Replace bad boot sector Causes eTrust EZ Antivirus to replace bad boot sectors. eTrust EZ Antivirus will always warn you before replacing a boot sector.


Real-Time memory checking
Memory (Options | Program | Memory for Windows 95/98 Only)

Enable Memory Scanning (For Windows 95 and 98 only)

This dialog enables eTrust EZ Antivirus to monitor Real-Time memory for viruses.

If another anti-viral program is running it may cause false alarms as virus templates may be detected from the other program.


AutoDownload
AutoDownload (Options | Program | AutoDownload)

Proxy Server

A proxy server is the computer that you connect to for access to the Internet. The installation program automatically tries to find these details from your Internet browser. If the installation program is unable to find these details you will need to select the ‘Use the following proxy server’ option and enter the details yourself.

Do not use a proxy server for Auto Downloads

This allows you to enable or disable the use of a proxy server.

Choose the proxy server automatically (From Control Panel)

This is the default option. Selecting this option causes EZ Antivirus to automatically search your computer for the proxy server details.

Use the following proxy server:

Try the ‘Choose the proxy server automatically’ option first. If this does not allow you to update you will need to find your proxy server details and enter then in the fields below.

Proxy Server Authentication

Users who are part of a company network sometimes need to give their network username and password details for AutoDownload to be able to use the Internet to get the new signature files. Your details are encrypted for security reasons so when you type it in a series of asterisks ‘*’ is displayed instead of your password.

Advanced Options

By using the advanced options, you can tailor the AutoDownload process to address your specific needs.

Interactive update

When this option is enabled, AutoDownload prompts you and asks you to confirm details. If you want to “watch” this process as it happens, leave this option on. If you do not want to see any feedback from the Autodownload, simply turn this option off.

Keep downloaded file

When Autodownload is used, EZ Antivirus downloads the latest Antivirus signatures from the EZ Antivirus web site (or confirms that you already have the latest signatures). These signatures come in a single packaged file. It is up to you to decide if you wish to keep this packaged file after EZ Antivirus has installed the new signatures. Once the AutoDownload process is complete, the signatures are installed, and you do not need to keep the packaged file. However, you may decide to keep the packaged file for other reasons. For example, perhaps you would like to put the packaged file onto a floppy disk to physically carry over to another computer, or to keep the packaged file on a shared drive where other users can run it.  The packaged file is executable, and is intelligent enough to update the signatures on any machine running EZ Antivirus (regardless which directory EZ Antivirus is installed in). You may wish to take advantage of this flexibility.

Schedule Options


Proxy server details
How to find your proxy server details

For Internet Explorer:

The 'Choose the proxy server automatically' option can automatically find your proxy server details if you have Internet Explorer loaded on you machine.

For Netscape:

Please check the instructions that match your version of Netscape. To determine which version you have, open Netscape and select Help | About Communicator.

Netscape 3.x

Open Netscape, select Options | Network Preferences | Proxies | Manual proxy configuration | View.

You need to copy the details stored next to the 'HTTP Proxy'. You will also need to copy the Port number for the HTTP proxy.

Netscape 4.x

Open Netscape, select Edit | Preferences… | Advanced | Proxies | Manual Proxy Configuration | Configure.

You need to copy the details stored next to the 'HTTP Proxy'. You will also need to copy the Port number for the HTTP proxy.


Command Line Switches

Command line switches can be used by selecting Start | Run…, typing in the full path and filename (ie. C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VET32) and adding any of the command line switches.

For the most up to date list of switches please select Start | Run… and type “C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\Vet32” /help.


Schedule a scan
Autodownload Schedule

The eTrust EZ Antivirus suite includes the ability to automatically perform periodic scanning on your computer.

Scan on These Days

Select this option to scan your machine at a specific time on a specified day(s).

Only Start Scan When Processor is Idle

If you have specified a day and time to perform a scan, you can also intelligently choose not to scan at that time if your machine is busy with other tasks. This is a performance enhancing feature - the scan will still take place, but not at the cost of possibly slowing down your other applications.

Note: If you have programs like SETI@home (setiathome.ssl.berkeley.ed) running on your computer your processor will never be idle, so this option would be inappropriate.

Scan All Fixed Hard Drives

The scan checks all (except removable) hard drives.

Use Custom Command Line

eTrust EZ Antivirus has an extensive list of command line switches. These can be used to customize exactly how the scan is performed.


Virus checking in Real-Time memory (Defaults)
Real-Time Protection

The eTrust EZ Antivirus suite includes memory Real-Time programs to automatically check files and floppy disks for viruses. Settings for these programs are controlled by this dialog.

The Real-Time Protection Options dialog is initiated by selecting Options | Real-Time Protection from the menu. Each of the dialogs can be entered by selecting the appropriate tab at the top of the dialogs.

Enabling	More information

Floppy boot sectors 	More information

Virus Monitoring 	More information

Virus action 	More information

Reporting 	More information


Enabling tab
Enabling (Options | Real-Time Protection | Enabling)

Enable Real-Time floppy disk boot sector protection

You can configure the floppy disk protection by selecting Options | Real-Time protection | Floppy Boot Sectors. Real-Time floppy protection settings

Enable Real-Time File Monitor (File & Macro protection)

This allows eTrust EZ Antivirus to automatically check files, documents and spreadsheets for viruses as they are accessed (either by you, or your operating system).

File monitoring

Virus actions

NOTE: Some installation programs recommend that you disable your Antivirus protection before attempting to install their software. Please scan floppies or CDs BEFORE disabling the Real-Time protection as they may be infected with viruses. 'Shrink wrapped' software has been found to be infected in the past.

To "Disable your Anti-Virus software" remove the checks from each of the Options | Real-Time protection | Enabling options, then close eTrust EZ Antivirus and save your changes.

NOTE: You MUST open eTrust EZ Antivirus and enable these options once you have finished loading the software as the Real-Time protection is the main component of your Antivirus protection.


Floppy boot sector protection
Floppy Boot Sector (Options | Real-Time Protection | Floppy Boot Sector)

This dialog controls the checking of floppy boot sectors for viruses. You may choose the level of protection required from the three (mutually exclusive) options. The first option gives adequate protection, whilst the last gives an extremely high level of protection. These options also contain a message to note if this option is currently loaded.

A known virus Causes eTrust EZ Antivirus to consider a boot sector bad only if it contains a known virus. This is the default level of protection.

An invalid boot, sector or known virus Causes eTrust EZ Antivirus to consider a boot sector bad if it contains an invalid boot sector or a known virus.

An unknown or invalid boot sector, or known virus This option causes eTrust EZ Antivirus to consider a boot sector bad if it contains an unknown or invalid boot sector or contains a known virus.

STOP!	Replacing unknown boot sectors may cause problems with some backup programs and copy-protected software. You should only use this setting if you are aware of the potential problems. Please contact eTrust EZ Antivirus support if you have any questions.

Replace any boot sector considered bad Causes eTrust EZ Antivirus to replace bad boot sectors.


File monitoring tab
Virus Monitoring (Options | Real-Time Protection | Virus Monitoring)

This dialog controls which events trigger eTrust EZ Antivirus's automatic file monitors to scan files. There are three events where files may be monitored for viruses. You may enable as many of these options as you wish as they are not mutually exclusive.

An infected file may trigger more than one of the following options. A warning will be issued from each of the options that is activated, so it is possible for a single infected file to create multiple warnings.

Monitor Activation

If the file is infected with a virus it may activate as soon as the file is opened (macro viruses normally infect normal.dot when the infected file is opened). For this reason Opening will automatically be enabled when you select either Executing or Closing if you are using eTrust EZ Antivirus for Windows 95, 98 or ME. eTrust EZ Antivirus for Windows NT, 2K or XP can be fully configured and allows any configuration to be set by the user.

Executing programs If a virus is found when a Windows application is run, the Real-Time protection will prevent the file from running. If the Real-Time protection only suspects a virus is present you will be given the choice of whether or not to run the file.

Opening files Scan files when they are opened for use.

Closing files Scan files as they are closed after use.

Heuristic Scan uses a rules to detect viruses that have not been seen by your Antivirus software before. This type of scanning may occasionally trigger a false alarm.

Scan Network Files The resident protection can be configured to scan all files that are passed to, or are copied from, the network drive by enabling the Options | Real Time Protection | File Monitoring | Scan Network Files. Once this is set every file that is moved to or from the network drive, as you go about your daily business, is checked for viruses.

Scan All Files (This option is available for Windows 95, 98 and ME only)

This option causes eTrust EZ Antivirus to check each file for viruses as the file is opened or closed. As each file is used it is checked for viruses if this option is enabled and the file type is listed in Options | Program | File Types. If this option is disabled it may take slightly less time for eTrust EZ Antivirus to scan files (as some types of files will not be scanned before use).


Virus actions tab
Virus Actions (Options | Real-time Protection | Virus Actions)

Action - Infected Files

Report only: Causes eTrust EZ Antivirus to report, but not attempt to clean, infected files.

Report & deny access: Causes eTrust EZ Antivirus to report when an infected file is detected and to lock the file so that it may not be used by other programs.

Clean file: Causes eTrust EZ Antivirus to attempt to disinfect virus-infected files, returning the files to working order.

Action - Uncleanable Files

Report only: Causes eTrust EZ Antivirus to report, but not attempt to clean, infected files.

Report & deny access: Causes eTrust EZ Antivirus to report when an infected file is detected and to lock the file so that it may not be used by other programs.


Reporting tab
Reporting (Options | Real-Time Protection | Reporting)

Write log file

Selecting this option causes a log file to be written when suspect or infected files are detected by the Real-Time file protection. The log file records the filename and path of any infected files, and the results of eTrust EZ Antivirus's attempt to clean the files. eTrust EZ Antivirus for Windows NT, 2K and XP records this information to the event log instead of to the eTrust EZ Antivirus log file.


Alerting tab
Alerting (Options | Alerting)

This dialog enables or disables the display of a message when a virus is detected.

Display message box when virus found

By selecting the "Display message box when virus found" option you are notified if a virus is detected by the Real-Time protection as you go about your daily tasks.


Confirm configuration settings;
Confirm Configuration Selections

This dialog displays a list of all the options that eTrust EZ Antivirus is installed with. If you wish to change the settings; click the <Back button until you see the dialog with the option that you wish to change. Then modify the option and then click Next> until the Confirm Configuration Sections dialog is once again displayed. Click the Finish button to accept the configuration and complete the installation.


Log File Warnings

When scanning files you may find that one or two warnings are recorded in the log file. Attached below is a brief explanation of possible warning messages.

‘Error in scanning - scan abandoned’

Either your computer has run out of free memory, or the file being scanned is corrupt. Please restart you computer and scan again, if the same error occurs please contact Technical Support

‘Unsupported file format - scan aborted’

This file has an unusual structure and we are unable to check it. For further analysis please e-mail a copy of the file to virtue@ca.com.

‘Cannot be scanned because it is encrypted’

This file is encrypted or password protected. Please scan a normal version of the file if you wish to check it for viruses.

‘Scan Incomplete’

An error was found while scanning a set of compressed files (ie .ARJ, .B64, .CAB, .GZ, .JAR, .LZH, .LHA, .MME, .MIM, .MQP, .UUE, .UU and ZIP file formats). If you want to scan the files in this archive please decompress them and scan again.

‘Unable to open file - not scanned’

This is a message that you may see when scan your machine for viruses. If you receive this warning, there is no cause for concern.

When your Antivirus starts scanning, there will be some files that are in use by the operating system or other programs. When the operating system has a file in use, it may lock it to prevent other programs from accessing that file, including your Antivirus software or malicious programs (such as viruses). Because these files are locked by the operating system, it is highly unlikely that they would be susceptible to infection - the viral software simply could not get access in order to infect them.

There are other files which may be reported as being unable to scanned. Examples include files that may be encrypted, or password protected. Often, these files have .dat, .dll or .swp extensions.

Some more specific examples of files that are not scanned because of this process:

C:\WINDOWSS\WIN386.SWP - This is the Windows swap file - it is always in use by the operating system

C:\WINDOWS\Temporary Internet Files\Conent.IE5\index.dat - This file is encrypted

C:\WINDOWS\Cookies\index.dat - This file is encrypted

C:\WINDOWS\History\History.IE5\index.dat - This file is encrypted

C:\Program Files\InoculateIT PE\VIRUSLOG.TXT - This file is in use

C:\Program Files\InoculateIT PE\USVet32.GID - This file is in use


Snooze

The installation of some software may cause complications if your Anti-Virus software is checking system critical files. This option can be used to temporarily suspend your Anti-Virus  protection while the software is being installed. Enter the number of minutes (1-99) that you wish to suspend or ‘snooze’ your protection. At the end of this time your Anti-virus protection is automatically re-activated.

The snooze option can be accessed by right-clicking the tray icon (which is next to the clock).

Caution: If you are temporarily disabling your anti-virus software so you can play games on a network or the Internet, please disable by selecting Options | Resident Protection | Enabling. If you use the snooze option the anti-virus scanning will AUTOMATICALLY restart after the snooze has finished and this may cause your game to be lost.

WARNING: If you are installing software which is infected by a virus, and have used the snooze option, you WILL NOT be protected until your Anti-Virus protection restarts.


Error Autodownload; Autodownload error
Autodownload Error

We have detected that autodownload has failed - this may be due to temporary problems with the internet or the configuration of the computer. We recommend that you manually go to www.my-etrust.com, download, and then install the latest update files. Once you have finished the updating we recommend you thouroughly scan your computer. Please contanct technical support if you have persistent problems getting autodownload to work.


Autodownload Information
Autodownload

Autodownload is used to automatically check to see if you need to update your Antivirus protection.

How to configure when autodownloads occur?

Why does it pop-up just after I have installed a whole new copy? The ‘whole new version’ you get from the web could be many hours old by the time you get it. By checking for new updates at the end of installation we can be sure you are protected against the very latest viruses.

Autodownload doesn’t seem to be working. What is wrong?


Frequently Asked Questions

The eTrust EZ Antivirus support team has compiled a considerable database of support questions. This appendix lists the more common questions as well as their corresponding answers.

To make finding questions easier, they are grouped into categories. A more up to date list of FAQs can be found on the website at http://www.my-eTrust.com/ask.sammy.

Please take the time to read this appendix before contacting eTrust EZ Antivirus for advice as you may already have the answer you need.

Installation/Setup/Configuration Problems

Problems using eTrust EZ Antivirus

General Information

Glossary

This appendix also contains the common error messages that eTrust EZ Antivirus may display, and what they mean. If eTrust EZ Antivirus reports an error that you do not understand, and which is not listed here, please use the support web form to submit your question at http://www.my-etrust.com/services for advice.


Installation - Frequently Asked Questions
Installation/Setup/Configuration Problems

This section of the Frequently Asked Questions contains questions that you may have while installing eTrust EZ Antivirus. If your question is not answered here then click here to return to the main menu.

1) 	How do I check which version of eTrust EZ Antivirus I am running?

2) 	I want to install a program and it has told me to disable my anti-virus software. How do I disable eTrust EZ Antivirus?

3) 	After installing eTrust EZ Antivirus my icons have changed. Why is this, and how can I change them back?

4) 	When I remove eTrust EZ Antivirus from my Windows 95 system it gets to Removing Lines from the Dosstart.bat file and terminates with an error? How can I get around this problem?

5) 	I have configured my Windows 95 PCs to use 'user profiles' with access to the Registry disabled.  I am now having problems installing eTrust EZ Antivirus.  What can I do?

6) 	I get a General file transfer error -3 when I am performing an installation of eTrust EZ Antivirus. What is the cause, and the solution?


Version
How do I check which version of eTrust EZ Antivirus I am running?

Right click on the EZ AV tray icon (located in the bottom right hand corner of your screen) and select Version from the context menu.


Disable Antivirus
I want to install a program and it has told me to disable my anti-virus software. How do I disable eTrust EZ Antivirus?

We advise that you do not disable eTrust EZ Antivirus Real-Time Protection under any circumstances because while eTrust EZ Antivirus is disabled, you are vulnerable to virus infection. Product or demo CD's shipping with viruses unintentionally attached is a rare but genuine threat, which is why the installation of new software is the worst time to disable eTrust EZ Antivirus.

However, if it is absolutely necessary to disable eTrust EZ Antivirus Real-Time Protection, please follow these instructions.

1. Open the eTrust EZ Antivirus program window using the taskbar icon in Windows

2. Go to Options | Real-Time Protection | Enabling

3. Deselect the Boot Sector Monitoring box and the File / Macro Monitoring box.

You will then need to reboot the computer.

To confirm that eTrust EZ Antivirus Real-Time protection. is disabled, you can do the following:

1. Right Click on the eTrust EZ Antivirus Icon in the Taskbar

2. Select Status

3. There should be 2 red crosses displayed to indicate the Real-Time protection is disabled.

WARNING: Ensure that you enable the Real-Time Protection Modules by repeating the steps (1-3), this time checking the boxes to again enable the eTrust EZ Antivirus Real-Time protection.


Icons are gone
After installing eTrust EZ Antivirus my icons have changed. Why is this, and how can I change them back?

This occasionally occurs when eTrust EZ Antivirus is installed while other programs are running. This is not a serious problem and can be easily fixed. Simply exit Windows and re-start the computer in safe mode (to restart in safe mode hit the F8 key when the Starting Windows 95 message appears). Once in Safe Mode reboot the PC selecting Normal mode and you will find that your icons return to their original state.


Deinstall
When I remove eTrust EZ Antivirus from my Windows 95 system it gets to Removing Lines from the Dosstart.bat file and terminates with an error? How can I get around this problem?

Move the Dosstart.bat file to the C:\ directory and attempt the un-install again.


Registry access
I have configured my Windows 95 PCs to use 'user profiles' with access to the Registry disabled.  I am now having problems installing eTrust EZ Antivirus.  What can I do?

eTrust EZ Antivirus can only use the privileges of the user that is logged in at the time of installation. For eTrust EZ Antivirus to complete a successful installation it must have access to the registry. Therefore, a user who has sufficient privileges to the registry must log in and then perform the eTrust EZ Antivirus installation.


User privileges
I get a General file transfer error -3 when I am performing an installation of eTrust EZ Antivirus. What is the cause, and the solution?

During installation eTrust EZ Antivirus creates some registry entries, which can normally only be done if you have system administrator privileges. Please ensure that you are logged into the PC with Administrator rights.


Frequently Asked Questions - Using
Problems Using eTrust EZ Antivirus

This section of the Frequently Asked Questions contains questions that you may have while using eTrust EZ Antivirus. If your question is not answered here then click here to return to the main menu.

1.	I have installed eTrust EZ Antivirus for Windows 95 with the Plus Pack. I have noticed that it contains the McAfee Virus Scanner.  Is it safe to run both eTrust EZ Antivirus and McAfee at the same time?


Running two anti-virus products
I have installed eTrust EZ Antivirus for Windows 95 with the Plus Pack. I have noticed that it contains the McAfee Virus Scanner.  Is it safe to run both eTrust EZ Antivirus and McAfee at the same time?

It is not advisable to run two Anti-Virus programs concurrently. You will need to disable the McAfee software during the installation of the Plus Pack or uninstall the program if it is already installed on the computer.


Frequently Asked Questions - General
General

This section of the Frequently Asked Questions contains questions that are not about either installation or using eTrust EZ Antivirus. If your question is not answered here then click here to return to the main menu.

1) eTrust EZ Antivirus says that my Master Boot Record (MBR) or DOS Boot Sector (DBR) has changed. What does this mean?

2) Why do some zip files take a long time to scan?

3) What are exotic viruses?

4) How can I tell that automatic protection is installed in Windows?

5) Can you please tell me how to check e-mail attachments for viruses

6) I need to disable eTrust EZ Antivirus as I need to load some new software. How do I turn it off?

7) eTrust EZ Antivirus reported that a document may be infected by a virus.  What should I do?

8) Another AntiVirus product is reporting the bloodhound virus. Why is eTrust EZ Antivirus not detecting this virus?

9) Are 'Good Times', 'Win a holiday', 'Budweiser' & ‘JDBGMGR/EXE’ viruses or a hoax?.


MBR changed
eTrust EZ Antivirus says that my Master Boot Record (MBR) or DOS Boot Sector (DBR) has changed. What does this mean?

When eTrust EZ Antivirus reports that the MBR or DBR has changed, it is comparing a snapshot of this information that was taken when you installed eTrust EZ Antivirus, to the current MBR and DBR. Changes may occur when a new operating system is loaded onto the PC.

Also, if you install eTrust EZ Antivirus to a PC that was already infected with a boot sector virus and clean it, eTrust EZ Antivirus will report the boot sector has been changed.


Compressed file scanning
Why do some zip files take a long time to scan?

Zip files may contain many files inside them which each require scanning and possible cleaning. Zipped files may also contain additional internal zip files which need to be scanned. It takes time to unzip, scan then rezip each file.


Exotic viruses
What are exotic viruses?

eTrust EZ Antivirus distinguishes between "in-the-wild" viruses (viruses that have been reported from a genuine infection) and "exotic" viruses - viruses we have in our collection, but which we have never seen reported as infecting users. If eTrust EZ Antivirus says a file "may have" virus X, please send a sample of the file to Computer Associates by filling out the web form at http://my-etrust.com/services/virusSample.cfm. If it is a genuine infection, a removal procedure will be added to eTrust EZ Antivirus and the virus will be upgraded from "exotic" to "in-the-wild" status.


Real-Time protection
How can I tell that Real-Time protection is installed in Windows?

Right click on the EZ AV tray icon (located in the bottom right hand corner of your screen), and select Status.


E-mail checking
Can you please tell me how to check e-mail attachments for viruses?

eTrust EZ Antivirus’s Real-Time protection checks and cleans any infected e-mail attachments when you open them. You can also Save the attachment to the hard disk and scan it using the main eTrust EZ Antivirus program. To check that Real-Time protection is enabled, move the pointer over the eTrust EZ Antivirus symbol in the system tray (located in the bottom right of the taskbar near the clock).


Disable Real-Time protection
I need to disable eTrust EZ Antivirus to load some new software. How do I do it?

The installation of some software may cause complications if your Anti-Virus software is checking system critical files. This option can be used to temporarily suspend your Anti-Virus  protection while the software is being installed. Enter the number of minutes (1-99) that you wish to suspend or ‘snooze’ your protection. At the end of this time your Anti-virus protection is automatically re-activated.

The snooze option can be accessed by right-clicking the tray icon (which is next to the clock).

Caution: If you are temporarily disabling your anti-virus software so you can play games on a network or the Internet, please disable by selecting Options | Resident Protection | Enabling. If you use the snooze option the anti-virus scanning will AUTOMATICALLY restart after the snooze has finished and this may cause your game to be lost.

WARNING: If you are installing software which is infected by a virus, and have used the snooze option, you WILL NOT be protected until your Anti-Virus protection restarts.


May be infected
eTrust EZ Antivirus reported that a document may be infected by a virus.  What should I do?

eTrust EZ Antivirus uses heuristics to detect polymorphic viruses and certain strains that re occur in the wild. Heuristic or generic scanning is a technique for detecting viruses that performs analysis of virus structure and behaviour instead of using specific virus templates and signatures.

If you are faced with this problem please forward the files to our Support Team by filling out the web form at http://www.my-etrust.com/services/virusSample.cfm.


Bloodhound
Another Antivirus product is reporting the bloodhound virus. Why is eTrust EZ Antivirus not detecting this virus?

Bloodhound is a generic name used by one of our competitors indicating that a specific file may have a virus, but they can't work out if it is definitely a virus or if it is a false alarm. Please forward any suspect files to our support team by filling out the web form at http://www.my-etrust.com/services/virusSample.cfm. They will be checked as soon as possible. If the files do contain a real virus, we will incorporate support for detecting and cleaning it in our next update, and send an update back to you to clean up the problem.


Hoaxes
Are 'Good Times' 'Win a holiday' 'Budweiser' ‘JDBGMGR.EXE’ viruses or a hoax?

The Good Times, Win A Holiday, Budweiser and JDBGMGR.EXE virus message are all hoaxes.

If you ever get any messages that sound similar and could also be a hoax, please e-mail them to the Technical Support Team by filling out the web form at http://www.my-etrust.com/services and we will let you know whether it is a real virus or not! Always verify the authority of such messages (by checking with us or a respected website). While hoaxes don't do any damage, they DO reduce people's overall confidence in using computers.

For more information on Hoaxes, or to verify the integrity of virus information, please visit our Virus Information Center at http://www.ca.com/virusinfo.


Glossary
Glossary Of Terms

Unfortunately the computer industry uses a lot of technical terms that the general public has difficulty understanding. For a complete list of terms please see:

http://www3.ca.com/virusinfo/glossary.asp


Display the readme.hlp file
'Read-me' Help File

Setup can display a 'Read-me' help file, which includes late-breaking information that has not made it into the manual. The 'Read Me' help file also gives a summary of all the changes that have been made since the last version of eTrust EZ AntiVirus.

By clicking the Yes please display the 'Read Me' file the Readme help file is displayed during the installation of eTrust EZ AntiVirus.


Download the latest virus signatures
Download Signature Files

While you have finished installing the Antivirus engine, you MUST now install a virus signature update so you can detect the very latest viruses We HIGHLY recommend that you select ‘Yes, run Autodownload now’ and select Next to continue. You need to be connected to the Internet for the installation program to be able to automatically download the latest virus signatures.

If you select ‘NO, do not run Audtodownload now’  You will have NO anti-virus protection until this update is downloaded and installed.


eTrust EZ AntiVirus
eTrust EZ AntiVirus Program Directory

This is the directory that eTrust EZ AntiVirus is installed to. By default eTrust EZ AntiVirus is installed to C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\, if eTrust EZ AntiVirus has already been installed onto your PC, the directory that it has already been installed to is displayed instead.

If you wish to install eTrust EZ AntiVirus to a different directory click the Browse button and choose another directory.


Desktop options
eTrust EZ AntiVirus Desktop Options

By accepting the default installation, an eTrust EZ AntiVirus short-cut is added to the Tray area (bottom left of your screen, next to the clock if you have one). Once the icon is installed to the Tray you can easily determine if the real-time protection is loaded and active by moving the cursor over the icon: a summary of which components of real-time protection are loaded pops up.

It is possible to remove the eTrust EZ AntiVirus icon from the tray by opening eTrust EZ AntiVirus and selecting Options | Options Wizard… and changing the defaults on the Desktop Options Dialog.


Readme help file
'Read-Me' Help File

Setup can display a 'Read-me' help file, which includes late-breaking information that has not made it into the manual. The 'Read Me' help file also gives a summary of all the changes that have been made since the last version of eTrust EZ AntiVirus.

Select an option and then click Next> to proceed.


Boot Sector Templates

Setup offers to record a template (or copy) of the local hard drive boot sectors. These are used to check if the boot sector has been changed. Select the drive(s) that you wish to make templates for. We recommend templates are made for all local drives. (It is not appropriate to make templates for CD-ROM drives)


Make a reference disks
Reference Disk

The wizard offers to make a reference disk which will hold a template for each of the local drives. We recommend creating a reference disk. You will need a blank disk with no other files on it. Click Next> to proceed.

If you choose to make a reference disk, the "Make a reference disk"  dialog is displayed. Enter a line of text so that you can uniquely identify your PC, insert a freshly formatted floppy, and click OK. When eTrust EZ AntiVirus has finish creating the reference disk, label it as the "Reference Disk", and then store somewhere safe.

If you do not wish to create a reference disk click Next> to proceed.


Scan Hard Disk

By enabling this option the users PC is scanned when eTrust EZ AntiVirus has finished loading. This is recommended as each version of eTrust EZ AntiVirus can only detect those types of viruses that where known about when that version was made. By scanning with a later version you may detect recent discovered types of viruses that have not been detected in the past.


How to find help using the Options | Wizard; Options | Wizard option
Options | Wizard

For further information on any of the options offered by the Options | Wizard, please just run it and select the Help button on the page that you want to know more information about.