home *** CD-ROM | disk | FTP | other *** search
/ PC World 2001 March / PCWorld_2001-03_cd.bin / Software / Antiviry / nav32 / 0201i32.exe / whatsnew.txt < prev    next >
Text File  |  2001-02-01  |  30KB  |  516 lines
  1. **********************************************************************
  2. **                                                                  **
  3. **  What's New in the NAV Virus Definitions Files      WHATSNEW.TXT **
  4. **                                                                  **
  5. **  Symantec AntiVirus Research Center (SARC)      February 1, 2001 **
  6. **                                                                  **
  7. **********************************************************************
  8. This document contains the following topics:
  9.  
  10.  * Virus Alerts
  11.  * New Technologies
  12.  * Changes Incorporated Into This Update
  13.  * Enabling Scanning Features
  14.  * Additional Information
  15.  
  16. **********************************************************************
  17. ** Virus Alerts                                                     **
  18. **********************************************************************
  19. VBS.LoveLetter, a new worm which has been wide-spread since May 4th,
  20. is detected by this definition set.  
  21.  
  22. The ten most commonly reported viruses, worldwide:
  23.  
  24.     1  W32.Navidad
  25.     2  W95.MTX
  26.     3  W32.HLLW.QAZ.A
  27.     4  VBS.Stages.A
  28.     5  VBS.LoveLetter
  29.     6  VBS.Network
  30.     7  Wscript.KakWorm
  31.     8  W32.Funlove.4099
  32.     9  PrettyPark.Worm
  33.    10  Happy99.Worm
  34.  
  35. **********************************************************************
  36. ** New Technologies                                                 **
  37. **********************************************************************
  38.  
  39. DATE         Technologies Added
  40. ----         ------------------
  41. 8/19/98    * Excel heuristics which detect and repair new and unknown
  42.              macro viruses in Excel 95 & 97 documents.
  43.  
  44. 9/16/98    * Added repair for encrypted Excel 97 documents.
  45.  
  46. 10/21/98   * Heuristics to detect AOL Password Stealer Trojans.
  47.            * WORD Heuristics improvement to increase detection rate.
  48.  
  49. 12/17/98   * Macro Exclusion Engine to speed up the scanning for Word
  50.              and Excel documents.
  51.            * PowerPoint engine to scan PowerPoint related viruses.
  52.              To enable this technology please read "Enabling/Disabling
  53.              PowerPoint Scanning" section later in this document.
  54.  
  55. 02/18/99   * Detection and repair of macro viruses in Word and Excel
  56.              2000 documents.
  57.  
  58. 05/15/99   * Added repair for PowerPoint viruses.
  59.            * Improved heuristics to detect more WORD 97 related
  60.              viruses.
  61.  
  62. 06/10/99   * Menu repair technology for WORD macro viruses that change
  63.              command bar customizations in NORMAL.DOT.
  64.  
  65. 07/12/99   * Added support for scanning of Ichitaro 8/9 documents.
  66.              (Ichitaro is a Japanese word processing program).
  67.  
  68. 08/19/99   * Added detection and repair for embedded documents inside
  69.              PowerPoint 97.
  70.  
  71. 11/22/99   * Added detection and repair for Trojans embedded in OLE
  72.              files, such as Windows scrap files and MS Office
  73.              documents.
  74.            * Added detection for viruses which infect Microsoft
  75.              Project documents (P98M.Corner.A, for example).
  76.  
  77. 02/10/00   * Added support for scanning of UNIX executables.
  78.            * Added detection for infected Visio documents.
  79.  
  80. 12/18/00   * Added heuristics for for 32-bit Windows viruses.
  81.            * Added a script scanner which increases our capabilities for 
  82.              detecting script based threats.
  83.  
  84. **********************************************************************
  85. ** Changes Incorporated Into This Virus Definitions Update          **
  86. **********************************************************************
  87.  
  88. DATE
  89. ----
  90. 12/21/00   * A memory initialization problem in NAV NLM 4.x products 
  91.            was identified in the 12/20/2000 definitions release, which
  92.            included an updated scanning engine.  This problem has been 
  93.            resolved in definitions dated 12/21/2000 or later. 
  94.  
  95. 12/29/00   * A false positive for Bloodhound.W32.EP was corrected.
  96.  
  97. 01/04/01   * A false positive for W32.Navidad.16896 was corrected.
  98.            * A false positive for Backdoor.Trojan was corrected.
  99.  
  100. 01/18/01   * Modification to repair of Microsoft Word and Excel files 
  101.              for Office 2001.
  102.              
  103. 02/01/01   * A false positive for Backdoor.Trojan was corrected.
  104.  
  105. New virus definitions (by Virus Name):
  106.  
  107.         Virus Name                Infection Type          Week added
  108.         ----------                --------------          ----------
  109.         BackFont.905              File infector            01/15/01
  110.         Backdoor.BO2K.cfg         File infector            01/22/01
  111.         Backdoor.NetTerrorist     File infector            01/29/01
  112.         Backdoor.SubSeven.213     File infector            01/29/01
  113.         Backdoor.SysOCXDLL        File infector            01/22/01
  114.         Bat.Pot                   File infector            01/15/01
  115.         Burglar.1042              File infector            01/22/01
  116.         Burglar.1356              File infector            01/22/01
  117.         Burglar.1356 (2)          File infector            01/22/01
  118.         Dialer.Trojan             File infector            01/15/01
  119.         EICAR Test String (2)     File infector            01/10/01
  120.         EICAR Test String (3)     File infector            01/10/01
  121.         HTML.Davinia              File infector            01/15/01
  122.         HTML.Davinia.dam          File infector            01/15/01
  123.         HybrisF                   File infector            01/12/01
  124.         IRC.DMSetup.H             File infector            01/10/01
  125.         IRC.Menak.Worm            File infector            01/22/01
  126.         IRC.XCod                  File infector            01/29/01
  127.         Invert.CMOS               File infector            01/12/01
  128.         Invert.CMOS.ow            File infector            01/12/01
  129.         JS.KakWorm.F              File infector            01/29/01
  130.         JS.KakWorm.Variant        File infector            01/29/01
  131.         LDA.306                   File infector            01/29/01
  132.         Linux.Lotek               File infector            01/10/01
  133.         Linux.Ramen.Worm          File infector            01/22/01
  134.         NatalCom.Trojan           File infector            01/10/01
  135.         NatalCom.Trojan (2)       File infector            01/10/01
  136.         NatalCom.Trojan (3)       File infector            01/10/01
  137.         O97M.Toraja.F             File infector            01/29/01
  138.         PHP.Neworld               File infector            01/29/01
  139.         PHP.Sysbat                File infector            01/29/01
  140.         Pers(b)                   Boot infector            01/29/01
  141.         Retoob(b)                 Boot infector            01/29/01
  142.         VBS.Bunny.Intended        File infector            01/15/01
  143.         VBS.DWorld.A              File infector            01/22/01
  144.         VBS.DWorld.A(2)           File infector            01/22/01
  145.         VBS.DWorld.A.bat          File infector            01/22/01
  146.         VBS.DWorld.A.ini          File infector            01/22/01
  147.         VBS.DWorld.A.ini(2)       File infector            01/22/01
  148.         VBS.Davinia.A             File infector            01/15/01
  149.         VBS.Fonts.C               File infector            01/10/01
  150.         VBS.Insect.A@mm           File infector            01/15/01
  151.         VBS.Legal.A               File infector            01/22/01
  152.         VBS.Retnirp               File infector            01/29/01
  153.         VBS.Ribas@mm              File infector            01/10/01
  154.         Viroped.492               File infector            01/29/01
  155.         W2KM.Davinia.A            File infector            01/15/01
  156.         W32.Aid                   File infector            01/29/01
  157.         W32.Ataxia                File infector            01/29/01
  158.         W32.Demiurg.16354         File infector            01/10/01
  159.         W32.Demiurg.dr            File infector            01/10/01
  160.         W32.Eclypse.A             File infector            01/29/01
  161.         W32.Eclypse.B             File infector            01/29/01
  162.         W32.Eva.D                 File infector            01/22/01
  163.         W32.Ginseng               File infector            01/10/01
  164.         W32.HLLP.Zori             File infector            01/10/01
  165.         W32.HLLW.Dennis           File infector            01/10/01
  166.         W32.HLLW.Shorm            File infector            01/29/01
  167.         W32.Halen.2596            File infector            01/22/01
  168.         W32.Hatred.gen            File infector            01/22/01
  169.         W32.Icecubes.Worm.B       File infector            01/10/01
  170.         W32.Icecubes.Worm.gen     File infector            01/10/01
  171.         W32.Idele.2560            File infector            01/10/01
  172.         W32.Poetry                File infector            01/22/01
  173.         W32.Rigel                 File infector            01/29/01
  174.         W32.Roussarc.int          File infector            01/10/01
  175.         W32.Spit.C                File infector            01/22/01
  176.         W32.Spit.D                File infector            01/29/01
  177.         W32.Vicevi.worm           File infector            01/29/01
  178.         W32.Voyager.C             File infector            01/10/01
  179.         W32.WIT.A                 File infector            01/10/01
  180.         W32.WIT.B                 File infector            01/10/01
  181.         W32.XCod@m                File infector            01/29/01
  182.         W95.BeeFree               File infector            01/22/01
  183.         W95.Etymo                 File infector            01/29/01
  184.         W95.Examplo               File infector            01/29/01
  185.         W95.Iced.1376             File infector            01/29/01
  186.         W95.Matrix.817            File infector            01/29/01
  187.         W95.Matrix.909            File infector            01/29/01
  188.         W95.Repus.128             File infector            01/10/01
  189.         W95.Resurrel              File infector            01/10/01
  190.         W95.Senti.9269            File infector            01/10/01
  191.         W95.Trood.worm            File infector            01/10/01
  192.         W95.Xine.Gen              File infector            01/29/01
  193.         W95.ZMist                 File infector            01/22/01
  194.         W97M.Antiv.A              File infector            01/15/01
  195.         W97M.Bablas.BG            File infector            01/15/01
  196.         W97M.Bablas.BH            File infector            01/22/01
  197.         W97M.Bablas.BI            File infector            01/29/01
  198.         W97M.Bablas.BJ            File infector            01/22/01
  199.         W97M.Bablas.BK            File infector            01/22/01
  200.         W97M.Bablas.BL            File infector            01/22/01
  201.         W97M.Bablas.BM            File infector            01/29/01
  202.         W97M.Bablas.Dam           File infector            01/15/01
  203.         W97M.Bobo.E               File infector            01/22/01
  204.         W97M.Cobra.M              File infector            01/29/01
  205.         W97M.Death.B              File infector            01/15/01
  206.         W97M.Erab.A               File infector            01/22/01
  207.         W97M.Gesture.B            File infector            01/29/01
  208.         W97M.GoodDay.C            File infector            01/10/01
  209.         W97M.Intended             File infector            01/22/01
  210.         W97M.Invert.B             File infector            01/12/01
  211.         W97M.Iseng.B              File infector            01/10/01
  212.         W97M.Latenit.A            File infector            01/10/01
  213.         W97M.Macroble.D           File infector            01/22/01
  214.         W97M.Macroble.E           File infector            01/29/01
  215.         W97M.Marker.EK            File infector            01/29/01
  216.         W97M.Melissa.W            File infector            01/18/01
  217.         W97M.Myna.Y               File infector            01/15/01
  218.         W97M.Nagem.E              File infector            01/10/01
  219.         W97M.Nagem.E (1)          File infector            01/10/01
  220.         W97M.Nagem.F              File infector            01/12/01
  221.         W97M.Puyah                File infector            01/29/01
  222.         W97M.Remplace.J           File infector            01/15/01
  223.         W97M.Shepmah.F            File infector            01/10/01
  224.         W97M.Sherlock.D           File infector            01/22/01
  225.         W97M.Thus.AZ              File infector            01/22/01
  226.         W97M.Thus.CA              File infector            01/10/01
  227.         W97M.Thus.CE              File infector            01/15/01
  228.         W97M.Thus.CF              File infector            01/22/01
  229.         W97M.Thus.CG              File infector            01/22/01
  230.         W97M.Titch.G              File infector            01/29/01
  231.         W97M.Toy.A                File infector            01/29/01
  232.         W97M.VMPCK1.BS            File infector            01/22/01
  233.         W97M.Vmpck1.EA            File infector            01/22/01
  234.         W97M.Walrus.kit           File infector            01/22/01
  235.         W97M.Wrench.H             File infector            01/22/01
  236.         W98.Universe.B.Worm       File infector            01/29/01
  237.         W98.Universe.Worm         File infector            01/29/01
  238.         Win.Klon.12800            File infector            01/12/01
  239.         X97M.Demiurg.A            File infector            01/10/01
  240.         X97M.Gene.A               File infector            01/22/01
  241.         X97M.Laroux.JG            File infector            01/29/01
  242.         X97M.Reten.A              File infector            01/10/01
  243.         X97M.Sufe.B               File infector            01/12/01
  244.         X97M.Sufe.C               File infector            01/15/01
  245.         X97M.Vcode.A              File infector            01/29/01
  246.         Year 1992                 File infector            01/29/01
  247.  
  248.  
  249. New virus definitions (by Week added):
  250.  
  251.         Virus Name                Infection Type          Week added
  252.         ----------                --------------          ----------
  253.         Backdoor.NetTerrorist     File infector            01/29/01
  254.         Backdoor.SubSeven.213     File infector            01/29/01
  255.         IRC.XCod                  File infector            01/29/01
  256.         JS.KakWorm.F              File infector            01/29/01
  257.         JS.KakWorm.Variant        File infector            01/29/01
  258.         LDA.306                   File infector            01/29/01
  259.         O97M.Toraja.F             File infector            01/29/01
  260.         PHP.Neworld               File infector            01/29/01
  261.         PHP.Sysbat                File infector            01/29/01
  262.         Pers(b)                   Boot infector            01/29/01
  263.         Retoob(b)                 Boot infector            01/29/01
  264.         VBS.Retnirp               File infector            01/29/01
  265.         Viroped.492               File infector            01/29/01
  266.         W32.Aid                   File infector            01/29/01
  267.         W32.Ataxia                File infector            01/29/01
  268.         W32.Eclypse.A             File infector            01/29/01
  269.         W32.Eclypse.B             File infector            01/29/01
  270.         W32.HLLW.Shorm            File infector            01/29/01
  271.         W32.Rigel                 File infector            01/29/01
  272.         W32.Spit.D                File infector            01/29/01
  273.         W32.Vicevi.worm           File infector            01/29/01
  274.         W32.XCod@m                File infector            01/29/01
  275.         W95.Etymo                 File infector            01/29/01
  276.         W95.Examplo               File infector            01/29/01
  277.         W95.Iced.1376             File infector            01/29/01
  278.         W95.Matrix.817            File infector            01/29/01
  279.         W95.Matrix.909            File infector            01/29/01
  280.         W95.Xine.Gen              File infector            01/29/01
  281.         W97M.Bablas.BI            File infector            01/29/01
  282.         W97M.Bablas.BM            File infector            01/29/01
  283.         W97M.Cobra.M              File infector            01/29/01
  284.         W97M.Gesture.B            File infector            01/29/01
  285.         W97M.Macroble.E           File infector            01/29/01
  286.         W97M.Marker.EK            File infector            01/29/01
  287.         W97M.Puyah                File infector            01/29/01
  288.         W97M.Titch.G              File infector            01/29/01
  289.         W97M.Toy.A                File infector            01/29/01
  290.         W98.Universe.B.Worm       File infector            01/29/01
  291.         W98.Universe.Worm         File infector            01/29/01
  292.         X97M.Laroux.JG            File infector            01/29/01
  293.         X97M.Vcode.A              File infector            01/29/01
  294.         Year 1992                 File infector            01/29/01
  295.         Backdoor.BO2K.cfg         File infector            01/22/01
  296.         Backdoor.SysOCXDLL        File infector            01/22/01
  297.         Burglar.1042              File infector            01/22/01
  298.         Burglar.1356              File infector            01/22/01
  299.         Burglar.1356 (2)          File infector            01/22/01
  300.         IRC.Menak.Worm            File infector            01/22/01
  301.         Linux.Ramen.Worm          File infector            01/22/01
  302.         VBS.DWorld.A              File infector            01/22/01
  303.         VBS.DWorld.A(2)           File infector            01/22/01
  304.         VBS.DWorld.A.bat          File infector            01/22/01
  305.         VBS.DWorld.A.ini          File infector            01/22/01
  306.         VBS.DWorld.A.ini(2)       File infector            01/22/01
  307.         VBS.Legal.A               File infector            01/22/01
  308.         W32.Eva.D                 File infector            01/22/01
  309.         W32.Halen.2596            File infector            01/22/01
  310.         W32.Hatred.gen            File infector            01/22/01
  311.         W32.Poetry                File infector            01/22/01
  312.         W32.Spit.C                File infector            01/22/01
  313.         W95.BeeFree               File infector            01/22/01
  314.         W95.ZMist                 File infector            01/22/01
  315.         W97M.Bablas.BH            File infector            01/22/01
  316.         W97M.Bablas.BJ            File infector            01/22/01
  317.         W97M.Bablas.BK            File infector            01/22/01
  318.         W97M.Bablas.BL            File infector            01/22/01
  319.         W97M.Bobo.E               File infector            01/22/01
  320.         W97M.Erab.A               File infector            01/22/01
  321.         W97M.Intended             File infector            01/22/01
  322.         W97M.Macroble.D           File infector            01/22/01
  323.         W97M.Sherlock.D           File infector            01/22/01
  324.         W97M.Thus.AZ              File infector            01/22/01
  325.         W97M.Thus.CF              File infector            01/22/01
  326.         W97M.Thus.CG              File infector            01/22/01
  327.         W97M.VMPCK1.BS            File infector            01/22/01
  328.         W97M.Vmpck1.EA            File infector            01/22/01
  329.         W97M.Walrus.kit           File infector            01/22/01
  330.         W97M.Wrench.H             File infector            01/22/01
  331.         X97M.Gene.A               File infector            01/22/01
  332.         W97M.Melissa.W            File infector            01/18/01
  333.         BackFont.905              File infector            01/15/01
  334.         Bat.Pot                   File infector            01/15/01
  335.         Dialer.Trojan             File infector            01/15/01
  336.         HTML.Davinia              File infector            01/15/01
  337.         HTML.Davinia.dam          File infector            01/15/01
  338.         VBS.Bunny.Intended        File infector            01/15/01
  339.         VBS.Davinia.A             File infector            01/15/01
  340.         VBS.Insect.A@mm           File infector            01/15/01
  341.         W2KM.Davinia.A            File infector            01/15/01
  342.         W97M.Antiv.A              File infector            01/15/01
  343.         W97M.Bablas.BG            File infector            01/15/01
  344.         W97M.Bablas.Dam           File infector            01/15/01
  345.         W97M.Death.B              File infector            01/15/01
  346.         W97M.Myna.Y               File infector            01/15/01
  347.         W97M.Remplace.J           File infector            01/15/01
  348.         W97M.Thus.CE              File infector            01/15/01
  349.         X97M.Sufe.C               File infector            01/15/01
  350.         HybrisF                   File infector            01/12/01
  351.         Invert.CMOS               File infector            01/12/01
  352.         Invert.CMOS.ow            File infector            01/12/01
  353.         W97M.Invert.B             File infector            01/12/01
  354.         W97M.Nagem.F              File infector            01/12/01
  355.         Win.Klon.12800            File infector            01/12/01
  356.         X97M.Sufe.B               File infector            01/12/01
  357.         EICAR Test String (2)     File infector            01/10/01
  358.         EICAR Test String (3)     File infector            01/10/01
  359.         IRC.DMSetup.H             File infector            01/10/01
  360.         Linux.Lotek               File infector            01/10/01
  361.         NatalCom.Trojan           File infector            01/10/01
  362.         NatalCom.Trojan (2)       File infector            01/10/01
  363.         NatalCom.Trojan (3)       File infector            01/10/01
  364.         VBS.Fonts.C               File infector            01/10/01
  365.         VBS.Ribas@mm              File infector            01/10/01
  366.         W32.Demiurg.16354         File infector            01/10/01
  367.         W32.Demiurg.dr            File infector            01/10/01
  368.         W32.Ginseng               File infector            01/10/01
  369.         W32.HLLP.Zori             File infector            01/10/01
  370.         W32.HLLW.Dennis           File infector            01/10/01
  371.         W32.Icecubes.Worm.B       File infector            01/10/01
  372.         W32.Icecubes.Worm.gen     File infector            01/10/01
  373.         W32.Idele.2560            File infector            01/10/01
  374.         W32.Roussarc.int          File infector            01/10/01
  375.         W32.Voyager.C             File infector            01/10/01
  376.         W32.WIT.A                 File infector            01/10/01
  377.         W32.WIT.B                 File infector            01/10/01
  378.         W95.Repus.128             File infector            01/10/01
  379.         W95.Resurrel              File infector            01/10/01
  380.         W95.Senti.9269            File infector            01/10/01
  381.         W95.Trood.worm            File infector            01/10/01
  382.         W97M.GoodDay.C            File infector            01/10/01
  383.         W97M.Iseng.B              File infector            01/10/01
  384.         W97M.Latenit.A            File infector            01/10/01
  385.         W97M.Nagem.E              File infector            01/10/01
  386.         W97M.Nagem.E (1)          File infector            01/10/01
  387.         W97M.Shepmah.F            File infector            01/10/01
  388.         W97M.Thus.CA              File infector            01/10/01
  389.         X97M.Demiurg.A            File infector            01/10/01
  390.         X97M.Reten.A              File infector            01/10/01
  391.  
  392.  
  393. Name Changes (by Old Virus Name):
  394.  
  395.         Old Virus Name            New Virus Name          Date changed
  396.         --------------            --------------          ------------
  397.         IRC.DMSetup.G@m        to IRC.DMSetup.G            01/10/01
  398.         Mrod.5154              to ILoveDOS.5154            01/29/01
  399.         Mrod.5154 (2)          to ILoveDOS.5154 (2)        01/29/01
  400.         Mrod.5154 (3)          to ILoveDOS.5154 (3)        01/29/01
  401.         Mrod.5154 (4)          to ILoveDOS.5154 (4)        01/29/01
  402.         VBS.Fonts              to VBS.Sorry.C              01/15/01
  403.         VBS.Fonts.B            to VBS.Sorry.B              01/15/01
  404.         VBS.Fonts.C            to VBS.Sorry.D              01/15/01
  405.         W32.Demiurg.16354      to W32.Demig.16354          01/22/01
  406.         W32.Demiurg.dr         to W32.Demig.dr             01/22/01
  407.         W97M.Latenit.A         to W97M.Lateni.A            01/29/01
  408.         X97M.Toraja.C          to O97M.Toraja.C            01/10/01
  409.  
  410.  
  411. Name Changes (by Date changed):
  412.  
  413.         Old Virus Name            New Virus Name          Date changed
  414.         --------------            --------------          ------------
  415.         Mrod.5154              to ILoveDOS.5154            01/29/01
  416.         Mrod.5154 (2)          to ILoveDOS.5154 (2)        01/29/01
  417.         Mrod.5154 (3)          to ILoveDOS.5154 (3)        01/29/01
  418.         Mrod.5154 (4)          to ILoveDOS.5154 (4)        01/29/01
  419.         W97M.Latenit.A         to W97M.Lateni.A            01/29/01
  420.         W32.Demiurg.16354      to W32.Demig.16354          01/22/01
  421.         W32.Demiurg.dr         to W32.Demig.dr             01/22/01
  422.         VBS.Fonts              to VBS.Sorry.C              01/15/01
  423.         VBS.Fonts.B            to VBS.Sorry.B              01/15/01
  424.         VBS.Fonts.C            to VBS.Sorry.D              01/15/01
  425.         IRC.DMSetup.G@m        to IRC.DMSetup.G            01/10/01
  426.         X97M.Toraja.C          to O97M.Toraja.C            01/10/01
  427.         
  428.  
  429. Deletions (by Virus Name):
  430.  
  431.         Virus Name                Infection Type          Date removed
  432.         ----------                --------------          ------------
  433.         EICAR Test String.68      File infector            01/10/01
  434.         Year 1992                 File infector            01/22/01
  435.         
  436.  
  437. Deletions (by Date removed):
  438.  
  439.         Virus Name                Infection Type          Date removed
  440.         ----------                --------------          ------------
  441.         Year 1992                 File infector            01/22/01
  442.         EICAR Test String.68      File infector            01/10/01
  443.  
  444.  
  445. **********************************************************************
  446. **  Enabling Scanning Features                                      **
  447. **********************************************************************
  448.  
  449. Several scanning features can be enabled through the use of an INF 
  450. configuration file.  For NAV for Windows 95/NT version 4.x and later, 
  451. or NAV for OS/2, this configuration file should be called NAVEX15.INF
  452. and should be placed in the directory where NAV is installed (i.e.,
  453. C:\Program Files\Norton AntiVirus).  For NAV for Netware version 4.x,
  454. the file should be called NAVEX15.INF and should be placed in the 
  455. directory where NAV 4.x is installed (i.e., sys:system\navnlm). For
  456. NAV for Windows 95/NT version 2.0, NAV 4.x for Windows 3.1/DOS,
  457. NAVIEG 1.x, or NAVFW 1.x, the file should be named NAVEX.INF and
  458. should be placed in the directory where NAV is installed (i.e., C:\NAV).
  459. If this configuration file does not exist, create one in the appropriate
  460. directory if you want to change the default settings.
  461.  
  462. To enable a scanning feature for a particular component, one or more 
  463. entries need to be added to the configuration file under the correct
  464. section.  For each platform there is a corresponding section that is used 
  465. in the INF file.  Below is a table of section names and platforms.
  466.  
  467. Section Name    Platform
  468. ------------    --------
  469. NAVW32          Windows 95/98/NT
  470. NAVAP           Windows 95/98/NT Auto-Protect
  471. NAVDX           DOS
  472. NAVNLM          Netware
  473. NAVWIN          Windows 3.1
  474. NAVOS2          OS/2
  475. NAVAIX          AIX
  476. NAVSOL          Solaris
  477.  
  478. Entries are case insensitive.  Below is a description of possible 
  479. entries.
  480.  
  481. 1. Files can be excluded from scans by the NAVEX engine.  To exclude a
  482. specific file from the NAVEX engine scan, add an entry with the full
  483. path and file name.  This is case insensitive.  No wildcards are allowed.
  484. To exclude multiple files, add a separate entry for each file.  To exclude
  485. a file, add an entry like the one below where <PATH> is the full path
  486. and file name.
  487.         ExcludeFile = <PATH>
  488.  
  489. 2. Files within a directory can be excluded from scans by the NAVEX engine.
  490. To exclude all files within a directory, add an entry with the full 
  491. directory path.  This is case insensitive.  No wildcards are allowed.  This
  492. does not exclude files located in subdirectories of the specified 
  493. directory.  To exclude multiple directories, add a separate entry for each
  494. directory. To exclude a directory, add an entry like the one below where
  495. <DIRECTORY> is the full path.
  496.         ExcludeDirectory = <DIRECTORY>
  497.  
  498. The following example of an INF configuration file excludes two files, 
  499. NOSCAN.EXE and BIGFILE.DOC, from NAVEX scans for the Windows 95/98/NT 
  500. scanner.  It excludes the D:\PRIVATE directory from Windows 95/98/NT 
  501. Auto-Protect.
  502.  
  503. [NAVW32]
  504. ExcludeFile = C:\PROGRAM FILES\NOSCAN.EXE
  505. ExcludeFile = C:\TEMP\BIGFILE.DOC
  506.  
  507. [NAVAP]
  508. ExcludeDirectory = D:\PRIVATE
  509.  
  510. **********************************************************************
  511. **    Additional Information                                        **
  512. **********************************************************************
  513.  
  514. Additional information regarding this virus definitions update can be
  515. found in UPDATE.TXT and TECHNOTE.TXT.
  516.