home *** CD-ROM | disk | FTP | other *** search
- [Dr.Web] menu contains three commands
- [DOS shell], [About...], and [Exit].
-
- [Test] menu contains five commands
- [Test memory], [Scan], [Cure],
- [Statistics], and [Report].
-
- [Setup] menu contains three commands
- [Desktop], [Options], and [Paths].
-
- Speedkeys:
-
- Alt-X, Alt-F4 - Shell to DOS,
- F1 - Help,
- F5 - Scan (a given file, directory,
- drive),
- Ctrl-F5 - Cure (a given file, directory,
- drive),
- F9 - Display configuration options
- panel,
- F10, Space - Main menu,
- Tab, Shift-Tab - Move from one menu field to
- another,
- Esc - Abort scanning.
- {}
- Unknown error!
- {}
- File not found!
- Specify the pathname correctly.
- {}
- Disk error!
- If this happened during writing,
- check whether there is enough free
- disk space.
- {}
- Memory allocation error!
- Reboot the system and repeat
- the command once again.
- {}
- Insufficient memory space!
- Free the memory and repeat
- the command once again.
- {}
- Dr. Web's environment settings corrupted!
- Possibly, error in memory allocation.
- {}
- Disk error!
- ..., probably at physical level!
- Check your disk!
- {}
- Error reading REPORT file!
- Probably,you opened a nonexistent REPORT
- file. Deselect the DON'T CREATE button in
- the REPORT FILE field in OPTIONS panel.
- {}
- Drive not found!
- Type a different drive name letter.
- {}
- [DOS Shell] command
- temporarily interrupts Dr. Web to shell to
- DOS. To resume Dr. Web session, type EXIT and
- press RETURN.
-
- [About] command
- displays information about Dr. Web.
-
- [Exit] command
- terminates the current Dr. Web session.
- {}
- [Test memory] command
- scans computer memory for resident viruses at
- any time in a scanning session.
-
- [Scan] command
- scans user-defined drives, directories, and
- files for computer viruses or suspicious
- files.
-
- [Cure] command
- removes viruses from boot sectors and files.
-
- [Statistics] command
- displays full statistical data for each drive
- tested in the current scanning session.
-
- [Report] command
- opens the REPORT file containing the results
- of testing or curing of memory, boot sectors,
- drives and files. Its name is specified in the
- REPORT FILE text box in the panel displayed on
- choosing the FILES... command from the SETUP
- menu. This field is operative only if either
- the OVERWRITE or APPEND button in the REPORT
- FILE field in the OPTIONS panel of the SETUP
- is selected.
- {}
- [Desktop...] command
- provides a few options for configuring the
- screen display mode to suit user's
- preferences.
-
- [Options...] command
- provides a few options for configuring the way
- in which scanning progress is reported on the
- screen.
-
- [Paths...] command
- is used to specify the pathnames and search
- pattern of files that are essentional for the
- normal operation of Dr. Web program.
- {}
- The original boot sector is not found in the
- "hide-out" where the detected virus must conceal
- it. Either this virus is a modification of some
- known virus and hides the boot sector elsewhere
- or your computer is infected with a few boot
- viruses such that one virus is superimposed on
- another. If this is the case, your computer
- cannot be booted from such an infected disk.
-
- For help, call the technical maintenance service
- of DialogueScience,Inc., Moscow.
- {}
- This virus does not save the original boot
- sector. If you permit Dr. Web to cure the
- machine, a standard boot sector will be restored
- instead of the original boot sector of your
- machine. DO NOT permit Dr. Web to cure your disk
- if it is formated by nonconventional disk
- administrators like ADM, Disk Manager, SSTOR,
- etc., otherwise data on your disk may be lost.
- {}
- You can suppress this prompt by selecting the
- TEST ONE FLOPPY ONLY check box in the panel
- displayed on choosing the DESKTOP command from
- the SETUP menu.
- {}
- The file cannot be restored because it is
- infected by
-
- (1) an overwriting virus which does not save the
- original program code, or
-
- (2) a companion virus, or
-
- (3) a trojan virus, or
-
- (4) the file is damaged beyond repair.
-
- Delete and restore the file from a backup copy.
- {}
- Curing is not possible because your computer is
- protected by SHERIFF security system. To clean
- the computer, quit Dr. Web, disable SHERIFF, and
- then cure your computer.
- {}
- Dr. Web has detected self-infection. This
- happens, as a rule, when Dr. Web is infected by
- an hitherto-unknown virus. Close down your
- computer and forward a copy of the infected Dr.
- Web program to its designer or our authorized
- dealer. Soon you will receive a cost-free
- add-on database file to kill the virus or the
- next upgraded version capable of detecting and
- eradicating this virus.
- {}
- This message warns you that the file had one size
- prior to opening and a different size after
- opening. Possibly, memory contains an active
- resident virus that has infected the file. In
- such a case, the file size increases. Or there
- may be an active stealth virus in the memory that
- is trying to hide its copy in the file being
- tested. In such a case, the file size decreases.
-
- Close down the computer, reboot from a "clean"
- bootable diskette and test the suspected files.
- {}
- Drive not ready!
- Insert a diskette into drive
- and repeat the test or abort testing.
- {}
- This panel displays full statistical information
- about the drives checked in the current scanning
- mission.
- {}
- Screen mode
- -----------
- [X] Expanding windows
- smoothly and gradually opens menu and
- message panels.
-
- [X] Mouse support
- provides mouse support. Deselect this option
- if a nonstandard mouse driver not compatible
- with Microsoft mouse is installed in your
- machine.
-
- [X] Load screen font
- loads national screen fonts
- of Dr. Web program.
-
- [X] Beep
- option enables and disables sound alarm on
- detecting known viruses in memory, boot sectors
- or files.
-
- [X] Autosave setup
- automatically saves the user-defined
- settings in the configuration file DRWEB.INI
- prior to ending a session or shelling to DOS.
-
- Additional preferences
- ----------------------
-
- [X] "Snow" prevention
- If snow appears on CGA monitors,
- check this item to suppress the glow
- of electron beam in its reverse scanning path.
-
- [X] Screen output via BIOS
- uses BIOS Int 10h to send the output
- to the screen. This mode is very
- slow compared to direct access of videomemory
- which is the default mode. Check this item if
- problems arise in outputing to screen by
- direct access of videomemory.
-
- [X] Print "Ok" after filename
- writes "Ok" after the name of a file
- on the screen if the file is found
- clean in the course of testing.
-
- [X] Print packer name
- writes the name of the packer,
- achiver, or the encoder programs in
- the scanning progress window. This option is
- operative only if the CHECK PACKED, CHECK
- ARCHIVES, or CHECK E-MAIL box is selected in
- the FILES field of the panel displayed on
- choosing the OPTIONS command from the SETUP
- menu.
-
- [X] Report for each drive
- generates a report containing the
- scanning results upon completion of
- scanning a logical drive. To resume scanning,
- click or choose OK from the report panel.
-
- [X] Test one floppy only
- will not prompt you for testing
- another diskette. Deselect this
- option when you want to test more than one
- diskette.
-
- Language (if available)
- --------
- tells Dr. Web to display menus and messages in
- the selected language if an alternative
- language is supported.
-
- Color Scheme
- ------------
- Choosing one of the six option buttons, adjust
- the color display to suit best your preference:
-
- () Color 1 Default color scheme of Dr. Web
- program,
- ( ) Color 2 This scheme is created with Turbo
- Vision,
- ( ) Color 3 This scheme is drawn from Norton
- Utilities Version 5,
- ( ) Color 4 This scheme is drawn from ADinf
- program,
- ( ) Mono 1 Both these schemes display the
- message in white against black
- ( ) Mono 2 background. Choose Mono 1 or 2
- that is best suited for your
- monitor.
-
- Screen height
- -------------
- Vertical size of screen displays
- () 25 lines
- ( ) 30 lines
- ( ) 45 lines
- {}
- Main settings
- -------------
- are the basic configuration parameters
- controlling the operation of Dr. Web.
-
- [X] Memory test
- tells Dr.Web to verify the memory at
- the start of each scanning session.
- The memory range to be tested is selected
- in this panel in the MEMORY RANGE field.
-
- Memory range
- ------------
- ( ) 640 - conventional memory
- () 1088 - conventional memory, UMB, and HMA.
-
- [X] Boot sector test
- tells Dr.Web to scan the master boot
- record and boot sectors of drives.
-
- [X] Heuristic analysis
- tells Dr.Web to check files and boot
- sectors of drives for new and
- unknown viruses. In this mode Dr. Web will
- verify whether a program is an executable file
- or a virus code.
-
- [X] Check TSR viruses
- tells Dr.Web to check the changes in
- file size (if any) at the time of executing the
- seek and open commands. Many resident viruses
- infect a file when it is opened for reading or
- writing. Resident stealth viruses, on the
- contrary, try to conceal their presence in
- infected files.
-
- Files
- -----
- field contains check boxes to tell Dr. Web to
- verify packed files and to cure infected
- files. The cure check box is operative only
- when the CURE command is chosen from the TEST
- menu or when its speedkey Ctrl-F5 is pressed.
-
- [X] Check packed
- When this box is selected, packed
- files will be exploded in a
- temporary directory prior to testing. For this
- purpose, you must specify a drive for creating
- a temporary directory in the TEMP DRIVE text
- box in the panel displayed on choosing the
- FILES... command from the SETUP menu.
-
- [X] Check archives
- box tells Dr.WEb to check the files
- inside an archive file created with
- ARJ, PKZIP, RAR, LHA, ZOO, ICE and HA.
-
- [X] Check E-mail
- tells Dr.Web to check the files
- encoded by UUENCODE and MIME
- utilities.
-
- [X] Delete damaged
- When this box is selected, Dr. Web
- will delete the virus infected and
- damaged files that do not yield to restoration.
-
-
- [X] Prompt for cure
- When this box is selected, Dr. Web
- will ascertain your intention prior
- to curing an infected file. When this box is
- deselected, Dr. Web will automatically remove
- virus codes from infected files.
-
- Infected files defines the method for
- -------------- removing viruses when
- cure command is selected.
-
- () Cure Deletes the virus codes
- from infected files.
-
- ( ) Delete Deletes infected files
- from the drive.
-
- ( ) Rename Renames infected files by
- substituting "V" for the
- first letter in the
- filename extension. Files of extensions COM and
- EXE are renamed with the default name but with
- extensions VOM and VXE, respectively.
-
- Report file will create a file for
- ----------- writting the results of every
- scanning mission.
-
- ( ) Don't create Report file is not created.
-
- ( ) Overwrite The results of every scanning
- mission will be overwritten
- in the report file.
-
- () Append The results of every scanning
- mission will be appended at
- the end of the existing
- report file.
-
- The name of the report file is to be specified in
- the menu box [Setup]|[Files]|[Report file name].
- If the full pathname of the report file is
- entered in this box, the results of a scanning
- mission can be viewed through the command [Test]|
- [Report].
-
- {}
- Virus database path
- -------------------
- In this text box, you type and edit the path
- name of the directory where virus database
- files are stored.
-
- Database search pattern
- -----------------------
- In the text box, you can type a search pattern
- for finding add-on update files to the main
- virus database. Upon finding them, Dr.Web
- automatically appends them to the main virus
- database DRWEBASE.VDB, which is released once
- along with the program update. Add-on files,
- DRWvvvnn.VDB, are released almost once every
- week. Registered users can obtain them free of
- cost from our authorized dealers.
-
- Temp drive
- ----------
- In the text box, type the name letter of the
- drive where Dr. Web can create a temporary
- directory for exploding and testing packed
- files. The TEMP DRIVE must be READ/WRITE and
- have enough free space (about 500-1000 Kb) for
- storing temporary files. If there is a RAM
- drive of sufficient space in your machine, it
- is a good idea to specify it as a TEMP DRIVE
- as this will speed up the work.
-
- Report file name
- ----------------
- In this text box, type the full pathname where
- you want Dr. Web to create a REPORT FILE for
- writing the results of scanning sessions.
-
- File type
- ---------
- field contains four option boxes for choosing
- the type of files to be tested:
-
- ( ) All files files of any extension;
-
- () By format files having internal structure
- of executable program modules
- (COM, EXE, SYS), Winword "macro
- containing" documents (DOC,
- DOT), and Excel spreadsheets
- (XL?);
-
- ( ) Programs executable files of extension
- COM, EXE, SYS, BAT, CMD, DRV,
- BIN, DLL, OV?, BOO, PRG, VXD,
- 386, SCR, FON, DO?, XL?, WIZ;
-
- ( ) User-defined In the text box under this
- └ COM EXE SYS field, you can enter and edit
- the type of files and their
- filename extension. Only files of the type
- specified in this text box will be tested
- and cured in scanning sessions, unless you
- type a different file specification in the
- panel displayed on choosing the SCAN command
- from the TEST menu. For example, if the user-
- defined files field specifies COM and EXE
- files but you specify BIN files in the SCAN
- command panel, then Dr. Web will verify only
- BIN files and ignore COM and EXE files in the
- current session.
- {}
- In the text field of the SCAN PATH panel, type
- the name of a drive, directory, subdirectory or
- file for testing and curing. The pathname can be
- specified with global wildcard characters; e.g.,
- C:, C:\DOS, C:\DOS\*, C:\DOS\FILE.*, C:\DOS\*.*,
- ... If several paths are specified concurrently,
- they must be separated by intervening spaces, for
- example, C: D:\FILE.EXE E:\UTIL\UNKNOWN\*.COM.
-
- The global characters * and *: denote that all
- logical drives in the hard disk must be scanned.
- {}
- Insufficient space in TEMP DRIVE for exploding
- this packed file. Specify a different drive
- having sufficient free space for creating a
- temporary directory in the text box under TEMP
- DRIVE in the panel displayed on choosing the
- PATHS... command from the SETUP menu. Otherwise
- the whole or a part of the file will be skipped
- in scanning.
- {}
- This file or the boot sector of the drive is
- infected. Unless you permit Dr. Web to cure the
- situation, the consequences will be unpredictable
- and disastrous.
- {}
- Virus databases not found!
- Virus databases essential for searching and
- curing are missing. Check whether they exist in
- the disk or whether the path and pattern are
- properly specified in the VIRUS DATABASE PATH and
- DATABASE SEARCH PATTERN fields.
- {}
- Main virus database not found!
- There is no main virus database DRWEBASE.VDB.
- Check whether this file exists in the disk or
- whether the VIRUS DATABASE PATH and DATABASE
- SEARCH PATTERN fields of the FILES group in the
- SETUP panel are properly filled in.
- {}
- You have typed certain options that are not valid
- for Dr. Web command line. Type the command line
- properly and run Dr. Web once again.
- {}
- Memory seems to contain an active TSR virus.
- Reboot the computer from a "clean" bootable
- diskette containing the Dr. Web program and test
- the memory and drives in your system.
- {}
-