********************************************************************** Norton AntiVirus 2001 for Windows NT / Windows 2000 README.TXT Copyright (c) 2000 Symantec Corporation August 2000 ********************************************************************** HOW TO USE THIS DOCUMENT ********************************************************************** To view README.TXT on screen in Notepad or WordPad, maximize the Notepad or WordPad window. To print README.TXT in Notepad or WordPad, choose Print from the File menu. If you use another word processor, select the entire document and format the text in 10-point Courier before printing to ensure proper spacing. To print README.TXT from the DOS prompt, type COPY README.TXT PRN: ********************************************************************** NORTON ANTIVIRUS NOTES ********************************************************************** This README.TXT file covers compatibility information, late-breaking news, and usage tips for Norton AntiVirus. The following topics are discussed: * Email message headers contain "X-NAV-TimeoutProtection" * Installation requires Administrator rights * Access privileges required for installation * If you are also running older versions of Norton products * Using Norton AntiVirus Email Scanning with Wingate * Using Norton AntiVirus with Pegasus Mail * Using Norton AntiVirus with directory symbolic links/NTFS junctions * Automatic LiveUpdate requirements * Using Netscape with Norton AntiVirus * Using Norton AntiVirus with Netscape 6.0 * Using Norton AntiVirus with Netscape 4.x * Print versions of Norton AntiVirus Guide * Uninstall Beta versions of Norton AntiVirus * LiveUpdate subscriptions * Uninstalling LiveUpdate or LiveReg * Quarantining non-deletable files * Using Norton AntiVirus with non-administrative rights * Restart your machine after repairing boot viruses * Short File Name (SFN) alias generation during install * Using the /INTERACTIVE switch with the AT command to schedule scans * Creating a test text file that looks like a virus * Uninstalling Norton NT Tools * Long Filenames and LiveUpdate * "Rename Error" occurs during installation * Disabling email scanning while a download is in progress * Inoculation Change Alerts * Dynamic Volumes on Windows 2000 * Error starting email protection * Using Norton AntiVirus with Netscape Previews * Email protection does not work with Eudora 5 beta ********************************************************************** Email message headers contain "X-NAV-TimeoutProtection" ------------------------------------------------------- Norton AntiVirus (NAV) Email Protection options include a feature called Timeout Protection. This provides protection for your email client software during email transfers. If your POP3 email server sends a message with an attachment to the NAV POP3 email scanner without Timeout Protection enabled, there is a possibility you could lose the message. Timeout Protection sends "X-NAV-TimeoutProtection?:X" as a continuous header to the email client until the incoming message is complete. If you have multiple "X-NAV-TimeoutProtection?:X" entries in the header, it indicates how long it took to get the complete message from your POP3 incoming mail server. To turn off Timeout Protection, follow these steps: 1. Start Norton AntiVirus 2001. 2. Click Options. 3. Double-click Email Protection, and then click Advanced. 4. Uncheck "Protect against timeouts when scanning email." This will remove the "X-NAV-TimeoutProtection?:X" header information. 5. Restart your computer. Installation requires Administrator rights ----------------------------------------- When installing on Windows NT 4.0 or Windows 2000 you need to have administrator rights. Logging in as a user and trying to run setup as an Administrator will not work. Access privileges required for installation ------------------------------------------- As part of Norton AntiVirus installation, shared Symantec files, which are components of all Symantec products, are always installed to \Program Files\Symantec -- even if a custom location for the Norton AntiVirus program files is specified during install. If you do not have write (and create, if necessary) privileges to this location, the install will fail. If you are also running older versions of Norton products --------------------------------------------------------- If you have both this new Norton product installed and any 2000 version Norton product installed on your computer, the LiveAdvisor button on the menu bar of your 2000 version Norton product will be removed. As LiveAdvisor is no longer being used for information delivery, there is no loss of functionality. As was explained in the final LiveAdvisor messages, Symantec has replaced the LiveAdvisor delivery mechanism with information on the Symantec web site (http://www.symantec.com) and product-specific newsletters (http://www.symantec.com/techsupp/bulletin/index.html). In this way we can offer information of specific interest to you as quickly as possible. Using Norton AntiVirus Email Scanning with Wingate ------------------------------------------------- Norton AntiVirus email scanner uses port 110 to check incoming email for viruses. Wingate also uses this port. To change the port Norton AntiVirus uses, change the following Windows registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus \eMail Protection\Default Port Change the value of this entry to an unused port (port 22000 is usually available). If you enter a port that is already in use, Poproxy (the Norton AntiVirus email scanner) will not start. You must also unconfigure all of your email clients and re-configure them so they will work with the new port. Even after doing this some email clients, including Netscape, will not work because they do not support ports other than 110. Using Norton AntiVirus with Pegasus Mail ---------------------------------------- When using Norton AntiVirus email Scanning with Pegasus mail using long email address, you may reach the Pegasus 55 character email address limit. To retrieve email again, disable Norton AntiVirus email protection from this account. You will need to update your server name and user name in Pegasus mail. Using Norton AntiVirus with directory symbolic links/NTFS junctions ------------------------------------------------------------------- Using directory symbolic links, also known as NTFS junctions, on Windows NT4 & Windows 2000 machines may increase hard drive scanning times due to repeat scanning. Automatic LiveUpdate requirements --------------------------------- Automatic LiveUpdate requires Microsoft Internet Explorer 5.0 or later and Microsoft Task Scheduler. Using Netscape with Norton AntiVirus ------------------------------------ If Norton AntiVirus is installed as a Netscape helper application, a downloaded file will be lost if Netscape is closed before the download is complete. Using Norton AntiVirus with Netscape 6.0 ---------------------------------------- Norton AntiVirus Netscape Plug-in does not support Netscape 6.0 due to the removal of helper application functionality from Navigator. Using Norton AntiVirus with Netscape 4.x ---------------------------------------- Netscape 4.x uses a feature called Smart Download. This feature is launched each time you download a zip file and it handles the download without running it through the Norton AntiVirus plugin. Virus protection will be provided by Norton AntiVirus AutoProtect when you extract files from the compressed file. Print versions of Norton AntiVirus Guides ----------------------------------------- Print versions of the Norton AntiVirus Users Guide can be ordered through Symantec Customer Service. Uninstall Beta versions of Norton AntiVirus ------------------------------------------- If you tested a Beta version of Norton AntiVirus, uninstall the Beta before installing the release version. This removes unneeded files that would otherwise remain on your disk and prevents problems that could arise due to changed file formats. LiveUpdate subscriptions ------------------------ With the purchase and installation of Norton AntiVirus 2001, you automatically qualify for limited free use of LiveUpdate to receive virus definition updates. Your installed Norton AntiVirus program will notify you when your subscription is about to expire and provide information on how to extend your subscription to ensure continuing, up-to-date protection. Uninstalling LiveUpdate or LiveReg ---------------------------------- Because LiveUpdate and LiveReg are shared by several Symantec products, it is not uninstalled automatically if you select Uninstall Norton AntiVirus. Do not uninstall these components if there is any other Symantec software installed on your system. To uninstall LiveUpdate or LiveReg, choose Add/Remove Programs from the Windows Control Panel and select LiveUpdate or LiveReg. Quarantining non-deletable files -------------------------------- Norton AntiVirus cannot automatically quarantine non-deletable files (for example, files infected by the DirII virus). To manually add these types of files to the Quarantine, open the Quarantine and choose Add Item. Using Norton AntiVirus with non-administrative rights ----------------------------------------------------- Because Norton AntiVirus is a system-level application, when running LiveUpdate under Windows NT, you must log in as the same user with administrative rights as when you installed Norton AntiVirus. When logged in without administrative rights, Norton AntiVirus will always consider your virus definitions out of date. Restart your machine after repairing boot viruses ------------------------------------------------- We recommend that you reboot after repairing any boot virus on the hard drive. Some boot viruses, mostly stealth types, subtly confuse NT and its handling of floppies. Reboot after the repair to ensure proper operation. Short File Name (SFN) alias generation during install ----------------------------------------------------- If you are installing Norton AntiVirus to a custom location that is a Long File Name (LFN) folder, SFN alias generation must not be disabled during the install. To re-enable SFN alias generation, run REGEDT32 and change the following registry key entry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem NtfsDisable8dot3NameCreation should be set to 0 to enable SFN alias generation. You must restart your computer in order for changes in SFN alias generation to take effect. Set the value back to 1 after installation to disable SFN alias generation, if desired. Using the /INTERACTIVE switch with the AT command to schedule scans ------------------------------------------------------------------- You must use the /INTERACTIVE switch to schedule scans with the AT command. If NAVWNT is launched from the Scheduling Service (AT) without the /INTERACTIVE switch, Norton AntiVirus remains in memory with no way of terminating. The following examples demonstrate correct usage to schedule automatic scans three times per week. AT 17:30 /interactive /every:M,W,F "c:\Program Files\NAVNT\navwnt" /L See your Windows documentation for more information on using the AT command. Creating a test text file that looks like a virus ------------------------------------------------- To create a harmless text file that will be detected as a virus, which you can use to verify detection of viruses, logging, and alert functioning, visit this site: http://www.eicar.org/anti_virus_test_file.htm Disable Auto-Protect temporarily before you save the file. Uninstalling Norton NT Tools ---------------------------- If Norton NT Tools is uninstalled after Norton AntiVirus is installed, the shared file S32STAT.DLL is removed. Reinstall Norton AntiVirus to correct the problem. Long Filenames and LiveUpdate ----------------------------- Long Filenames (LFNs) must be enabled to install LiveUpdate. "Rename Error" during Norton AntiVirus installation --------------------------------------------------- If you experience a Comctl32.dll rename error when installing Norton AntiVirus, an error dialog box on your screen shows the following information: RENAME ERROR An error occurred renaming a file "Cannot create a file when that file already exists"(error #183). Current File Name: C:\WINNT\System32\Comctl32.dll New File Name: C:\WINNT\System32\comctl32.bak To fix the Comctl32.dll rename error: 1) From Windows Explorer, access the following directory: \winnt\system32 2) Right-click the following file: comctl32.bak Select Rename 3) Type the following as the new name for the file: comctl32.old 4) Run the Norton AntiVirus install program (setup.exe) again. Disabling email scanning while a download is in progress -------------------------------------------------------- Norton AntiVirus does not support disabling email scanning while an email download is in progress. If you do this and if the email that you are downloading contains an infected file attachment, portions of this infected file attachment might be left in your TEMP directory (usually C:\WINDOWS\TEMP or C:\TEMP). It is recommended that you delete this file. If you should attempt to extract the infected contents of this file, Norton AntiVirus Auto-Protect will protect you from any infections. Inoculation Change Alerts ------------------------- When responding to an inoculation change alert, you must determine if the change is legitimate (choose Inoculate to let Norton AntiVirus generate new inoculation data) or the change indicates the activity of a virus (choose Repair to let Norton AntiVirus restore the item). The following examples demonstrate legitimate changes. In these cases you should choose Inoculate to let Norton AntiVirus generate new inoculation data. * Installing or Upgrading Windows If you are running Norton AntiVirus and reinstalling or upgrading Windows, you may receive more than one inoculation change alert. Choose Inoculate, not Repair, to respond to the alert. Windows modifies boot records during the install operation and restarts your system more than once. Each time your system is restarted, these changes are properly detected by Norton AntiVirus. If you choose Repair, you are undoing some of the changes that Windows is making and, therefore, corrupting your boot records. You may not be able to start your system from its hard disk. If this occurs, start up from a floppy disk and reinstall Windows. * Partitioning Software If you use partitioning software (such as Partition Magic) or drive overlay software (such as Disk Manager and EZ drive), you may receive inoculation alerts for legitimate changes. When you set or modify partitions after Norton AntiVirus is installed, choose Inoculate, not Repair, to respond to these alerts. For example, Partition Magic may generate several legitimate inoculation alerts when setting or modifying partitions. If you choose Repair, your drive may be rendered inaccessible with little chance of recovery. Dynamic Volumes on Windows 2000 ------------------------------- Norton AntiVirus does not fully support Dynamic Volumes. Scanning these drives might result in the error message "Unable to read boot record on drive." This is because these drives are not bootable. However Norton AntiVirus will scan the drive for infected files. Error starting email protection ------------------------------- If you see the error "Norton AntiVirus is unable to start email protection. Please ensure that TCP/IP is installed and port 110 is available," it might be because you are running a firewall program. If you are using a firewall, the firewall must be configured to allow Poproxy.exe permission to access the Internet on port 110. Using Norton AntiVirus with Netscape Previews ----------------- Norton AntiVirus does not automatically configure Netscape Previews for email protection. You can configure it manually for email protection. Email protection does not work with Eudora 5 beta ------------------------------------------------- Norton AntiVirus email protection does not work with the beta release of Eudora 5. Manual configuration does not work. ********************************************************************** END OF FILE **********************************************************************