About (Help menu)
This command displays a screen with
the program's copyright and version number
information.

Add virus definition (Definitions menu)
Use this command to add a definition for a newly
discovered virus to Norton AntiVirus.
Choose Add virus definition to enter the definition's
parameters. You can obtain those parameters by calling
the 24-Hour Virus Newsline. (See Appendix D in the User
Manual).
 
In the Name field enter the name of the virus
definition (from 1 to 26 characters). In the Length
field enter the length of the definition in bytes. In
the Checksum field enter the hexadecimal string used
to check the virus definition for errors. Record the
actual definition in the 11 lines in the Definition
field.
 
To record the definition, we suggest you type two
characters, then a space, then type the next two
characters and a space, and so on. (The spaces are not
necessary but make the definition easier to read.) You
can end a line at any point. Use the down arrow key to
go to the next line. Continue entering the definition
until you are finished.
 
The definition must be error free before the OK button
is enabled. After you enter the last character of the
definition, press Enter to check the definition. If
there is an error, Virus Clinic positions the cursor
as close to the error as possible. Correct the error.
Then save the definition.

Advanced (Scan options)
Choose Advanced scan to have Norton AntiVirus search
for both known and unknown viruses. Auto-inoculate
is a feature which may only be used with Advanced
scan ON.
 
The Advanced scan option adds to the Basic level scan,
the capability of verifying a checksum for each
program file. This allows detection of an unknown
virus. 
 
When Advanced scan is used with Auto-inoculate set ON,
checksum files are created during a scan of each
program file (unless it is already infected with a
known virus).
 
When Auto-inoculate is set OFF, Norton AntiVirus will
validate that the checksum is correct. For normal 
operation, this option should be turned OFF.
 
The Advanced option also affects the operation of
Virus Intercept. When Advanced is ON, Intercept will
both scan for known viruses and validate that the
checksum is correct. If Intercept detects a change
in the program that might be an infection by an
unknown virus, an alert will occur.

Alert message (Configure)
This option lets you customize the virus infection
alert. The message you enter in the text field
appears in all alerts.
 
Select Alert message. Type a message between 1 and
76 characters long in the text field.

Audit trail (Configure)
The Audit trail keeps a permanent record of all of
Virus Intercept's activity. The Audit trail logs all
the Virus Infection Alerts that are displayed and your
responses to those alerts. The default filename of
the Audit trail log is AUDIT.LOG, but you may change
this.

Basic (Scan options)
The Basic option directs Scan to searches for known
viruses in the drives, directories, or files you have
selected. With a Basic scan, Virus Clinic scans all
files, not just certain types.

Change password (Options menu)
Use this command to change your password. "Set
password" becomes "Change password" on the Options
menu after you set your password.
 
Choose Change password and type your existing password
in "Enter old password." Then type your new password in
"Enter new password." The program then verifies your
new password.

Color palette (Configure)
Changes the colors on your screen. You should choose
an option that corresponds with the display adapter
card in your computer. If you don't like the colors
shown on your screen, you can try a different option.

Configure (Options menu) 
Controls the way Virus Clinic and Virus Intercept work
on your computer. Choose Configure to open the
Configuration options dialog box. The following
Configuration options are available;
 
Special sound - When checked, turns on the special
virus alert sound. (See the help topic:Special sound.)
 
Disable alert box on monochrome monitor - When
checked, turns OFF Virus Infection Alerts on a
monochrome monitor.
 
Disable alert box on color monitor - When checked,
turns OFF Virus Infection Alerts on a color
monitor.
 
Remove alerts after [n] seconds - Sets the number of
seconds (1-60) an alert is displayed before the
default is activated and Intercept removes the alert.
 
Alert message - Lets you enter a message up to 76
characters in length that will appear in the virus
infection alert box.
 
Audit trail - When checked, keeps a record of Virus
Intercept's activity. (See the help topic:Audit
Trail.)
 
Disable scanning of network drives - When checked,
prevents the scanning of network drives. (See the
help topic:Disable scanning of network drives.)
 
Disable scan Cancel button - When checked, deactivates
the Cancel button in the Scan results screen.
 
Disable Repair file button - When checked, deactivates
the Repair file button in the Scan results screen.
 
Disable Repair all button - When checked, deactivates
the Repair all button in the Scan results screen.
 
Disable Delete button - When checked, deactivates the
Delete button in the Scan results screen.
 
Disable Reinoculate button - When checked, deactivates
the Reinoculate button in the Reinoculate alert. (See
the Help topic for Disable Reinoculate button.)
 
Disable Proceed button - When checked, deactivates the
Proceed button in the Reinoculate alert. (see the help
topic for Disable Reinoculate button.)
 
Monitor - Lets you choose between a monochrome or
color display adapter card if you have both types in
your system. (See the help topic:Monitor.)
 
Color palette - Lets you change the selection for the
type of adapter card connected to your computer.
 
See the Help topic for each Configuration option for
more information.

Directory (Scan menu)
This command scans all files in a selected directory
and its subdirectories
 
To scan a directory, do one of the following:
  - Type the full name of the directory in the
   "Directory to scan" field, and press Enter.
 
  - Use the Directories list box to build the pathname
    in the "Directory to scan" field, and press
    Enter.
 
Select Begin to begin scanning the directory.

Definitions menu
The items on this menu let you manage the virus
definitions that Norton AntiVirus uses to search for
during a scan. The functions are the following:
 
     Add virus definition - Enter the definition
     manually for a newly discovered virus.
 
     Load virus definition - Update Norton AntiVirus
     with new virus definition file.
 
     List virus names - Display the virus names that
     Norton AntiVirus searches for (also includes the
     ability to delete selected virus definitions.)

Disable alert box on monochrome monitor (Configure)
Turns OFF Virus Infection Alerts on a monochrome
monitor.

Disable alert box on color monitor (Configure)
Turns OFF Virus Infection Alerts on a color monitor.

Disable Delete button (Configure)
Deactivates the Delete button in the Scan results
screen so that an infected file cannot be deleted
from within the program.

Disable Proceed button (Configure)
Deactivates the Proceed button in the virus infection
and inoculate alerts. With the Proceed turned OFF, you
cannot open or launch a file that is infected.

Disable Reinoculate button (Configure)
Deactivates the Reinoculate button in the Reinoculate
alert box.
 
If the checksum file for a program doesn't
match the program when Virus Intercept examines the
checksum, Virus Intercept displays the Reinoculate
alert telling you these don't match. Selecting
Reinoculate overwrites the existing checksum file.
When the Reinoculate button is turned OFF, the
checksum file cannot be regenerated.

Disable Repair all button (Configure)
Deactivates the Repair all button in the Scan results
screen. When the Repair all button is turned OFF, you
cannot repair all infected files at once. Instead,
infected files must be repaired individually.

Disable Repair file button (Configure)
Deactivates the Repair button in the Scan results
screen so that individual infected files cannot be
repaired.

Disable scan Cancel button (Configure)
Prevents a scan from being canceled in Virus Clinic
until the scan is completed.
 
Disable scanning of network drives (Configure)
Prevents the scanning of network drives, by insuring
network drives are not listed in the Scan drives, Scan
directories, or Scan files list boxes. This option is
designed for the network administrator who wants to
prevent unauthorized persons from scanning network
drives, which could degrade network performance.

Drive (Scan menu)
Searches all disk drives or one disk drive for
infected files.
 
Choose Drive from the Scan menu to open the Scan drive
dialog box.
 
   Scan all - Searches all drives for infected files.
              You are given the option to scan floppies
              as well.
 
   Scan - Searches the selected drive for infected
          files.
 
First, select a drive from the Drives list box, then
select Scan or Scan all to begin.

Enter password (Options menu)
Use this command to enter your password, if you have
created one, when you want to change the configuration
options. (See "Configuration" for more information on
the Configuration Options.)

File (Scan menu)
Use this command to scan a file or group of files.
You may specify files in one of two ways:
 
   - Type the name of the file you want to scan in
     the Name field, or use the standard DOS
     wildcards (* and ?) to scan a group of files.
 
   - Use the Files list box to locate the name of the
     file to be scanned, and press Enter.
 
Change the directory or drive if the file you want to
scan is not listed.

Help index (Help)
Choose Index to display a list of the commands and
features within Virus Clinic. Select an item from the
Help index, then select the Help button to display the
Help information.

List virus names (Definitions menu)
Displays the list of known viruses that Norton
AntiVirus scans for.
 
Print - Print the list of virus names to the printer.
Save - Store the list of virus names to a file.
(The default filename is SUMMARY.TXT, but you may
change it.)
Delete - Remove the selected virus name from the list.

Load virus definition (Definitions menu)
Updates the Norton AntiVirus virus definitions from a
file. New virus definitions files will be available
from the Symantec Bulletin Board Service. (See
Appendix D in the User Manual.)
 
Choose Load virus definition, then type the name of
the virus definitions file in the filename dialog box.
Select OK to update the definitions in Norton
AntiVirus.

Monitor (Configure)
If you have both a monochrome and a color adapter card
in your system, you may use these radio buttons to
choose which one the Norton AntiVirus will use.
Otherwise it displays the type of the monitor adapter
card you have installed in your computer and the radio
buttons are dimmed if you only have one adapter card.

Save as
Enter a filename that will be used to save the   
information and select Ok to save.

Options menu
Lets you set the Norton AntiVirus' configuration
options, determine what the program scans for, and set
or change your password.
 
Configure - Determines how the program options work on
your computer.
 
Scan options - Lets you decide if Virus Clinic
searches only for known viruses or for both known and
unknown viruses.
 
Enter password - Lets you enter your password so that
you can access the Configuration options.
 
Set/Change password - Lets you specify or change a
password that allows access to the Configuration
Options.
 
Remove alert after [ ] Seconds (Configure)
Enter the number of seconds you want a virus infection
alert to appear on the screen before Intercept selects
the default action and closes the alert. You can
enter a number between 1 and 60.

Scan options
The Scan options determine the types of viruses, known
and/or unknown, that Norton AntiVirus looks for during
a scan, and also whether or not to inoculate new files
automatically.
 
Basic - Searches for known viruses.
 
Advanced - Searches for known and unknown viruses. but
requires more space than Basic.
 
Auto-inoculate - Creates a checksum file the first
time you scan a file or when the file is started.

Scan results
Screen shows a scan's progress while the scan is in
operation. When the scan finishes, any infected
files are displayed in the Scan results list box.
The infected file's name, its complete pathname, and
the virus type are displayed. At the end of the
list is the Scan Summary, which lists the Total files
scanned and the Total viruses found, if any.
 
The buttons on the left let you work with the Scan
results to handle any infected files. For example,
you can print the Scan Summary, repair an infected
file, or delete an infected file. Here is a brief
summary of those buttons:
 
Scan - Rescans the selected drives, directories, or
       files that were originally scanned.
 
Repair - Repair the selected infected file.
 
Repair all - Repair all infected files in the Scan
             results list box.
 
Delete - Delete the selected infected file.
 
Print summary - Print the entire contents of the
                Scan results list box.
 
Save summary - Save the results in the Scan results
               list box to an ASCII text file.
 
Cancel - Cancels a scan in progress.
 
Quit - Closes the Scan results screen and returns to
      the main program screen.
 
Note: Some of these functions may be disabled using
      the Configure command in the options menu.

Set password (Options menu)
Use this command to set your password in Virus Clinic.
You cannot change certain Configuration Options
without your password. "Set Password" becomes
"Change Password" after you have created one. Keep in
mind when creating a password, that the Set password
command is case-sensitive and that passwords entered 
with any combination of upper or lower case characters
will have to be re-entered in the exact case(s)
before access is permitted. (Hint:It is a good idea to
check if the Num Lock button is ON or OFF before
entering passwords.)
  
To access the Configuration Options screen after you
have set your password, use the Enter password
command.

Special sound (Configure)
Turns on the special virus alert sound. When Virus
Intercept detects a virus, it plays a siren-like sound
to warn you of the virus. If you have turned OFF the
virus alert in the Configuration options, this sound
is your only warning of a virus.

Virus
Alters how your computer operates without your
knowledge or permission.
 
Known viruses - Viruses and their strains that Norton
AntiVirus has a definition for.
 
Unknown viruses - Any changes that Norton AntiVirus
detects and thinks may be characteristic of an unknown
virus.
 
If Norton AntiVirus alerts you of an unknown virus, it
may be caused by a virus, or it could simply be caused
by an update to a program file. (See "Scan options"
for more information.)

