All product names are trademarks of their respective holders.
This Read Me file provides the most up-to-date information about using SAM. Before using SAM, please read this file.
_________________________________________
New Virus Information
• Registration
Please send in your completed registration card so that we can keep you informed of new viruses as they are discovered, and notify you of SAM software updates as they become available.
• Word Macro Viruses
- Microsoft Word files that are infected with a macro virus and successfully repaired by SAM 4.0.8 may be falsely reported as infected by SAM 4.0.7 and other anti-virus products. To prevent this, after repairing the file in SAM 4.0.8, open the file in Word and save it using the Save As command with the Allow Fast Save option turned off (when the Save As dialog box appears, click the Options button, then uncheck the Allow Fast Save option).
- If you are using System 7.0 or later with File Sharing turned on, SAM cannot scan Microsoft Word documents as they are opened by Word. To be sure that your Word documents are virus-free, scan them before you open them in Microsoft Word.
If File Sharing is turned off, SAM can scan Word documents as they are opened. Note that if you disable File Sharing while Word is running, you must quit Word and relaunch it before SAM can scan Word files as they are opened.
_________________________________________
Invisible File
SAM creates an invisible file named SAM QuickScan File on any drive that it scans. The size of this file depends on the number of files residing on the scanned drive.
Note: The SAM QuickScan File is not known to have posed any problems to users of any SAM version. This information is simply provided to comply with all international laws requiring that a user be advised of hidden (or invisible) files created on, or copied to, his hard disk.
_________________________________________
What's new:
• SAM 4.0.8
- Added Virus Definition for the FormatC Word macro Trojan Horse.
- Added repair capability for all Word macro viruses and Trojans (Word Macro 9508 & 9509, DMV, Colors, and FormatC). Note: SAM 4.0.8 is required to repair macro viruses, but the 4.0.8 Virus Definitions file will detect macro viruses using SAM 4.0.7 and earlier versions.
- Fixed a Suspicious Activity compatibility problem with DiskLock 4.0.
- Fixed a problem which caused scans to fail under low memory conditions.
• SAM 4.0.7
- Added Virus Definitions for DMV and Colors Word macro virus strains.
• SAM 4.0.6
- Added Virus Definitions for Word Macro 9508 and Word Macro 9509 strains.
- Fixes problems with some versions of Apple Guide.
- Fixed problems with Open Transport on new Power Macintoshes such as the 8500 and 9500.
• SAM 4.0.5
- Added Virus Definition for the HC 9507 HyperCard virus.
- SAM is now compatible with the new Resource Manager, including the Power Macintosh 9500.
- Fixes intermittent Trojan Horse alerts on Power PC machines when launching Microsoft Excel or Word.
• SAM 4.0.4
- SAM will no longer cause problems with the Power Macintosh 6100/66 DOS Compatible when inserting DOS floppy disks running under DOS and the Scan Floppies option is set to ask the user to Scan or Skip. When the DOS card is active and the Macintosh is not, SAM will no longer try to scan floppies.
- Fixed compatibility problems with Empower by Magna. Empower 5.0 is also required to address these problems.
• SAM 4.0.3
- Added option to inform the Norton AntiVirus NLM (NetWare Loadable Module) when a virus alert occurs in SAM.
- Fixed a problem scanning DOS disks introduced by the release of System 7.5.
- Fixed a problem where the Alert Sound would not play.
• SAM 4.0.2
- Added virus definition for 'NVP Trojan'.
• SAM 4.0.1
- Fixed problems with Remembering Suspicious Activities with newer machines and updated System Enablers.
- Fixed compatibility problems with After Dark 3.0.
_________________________________________
SAM Installation
• If you have an earlier version of SAM installed:
- Although the SAM Installer replaces SAM files within the System Folder, it DOES NOT replace the previous version of SAM Virus Clinic™ during installation. If you have SAM 3.5 installed you should remove it from your disk. Delete the following files from your SAM 3.5 Folder including the SAM 3.5 folder itself:
SAM Virus Clinic™
SAM 3.5 Read Me
- If the copy of SAM™ Intercept or SAM™ Intercept Jr. you are updating has been disabled by an extension manager or has been renamed, it may not be removed during installation. If SAM Intercept or SAM Intercept Jr. (version 3.5) was not removed during installation, delete the disabled SAM™ Intercept or SAM™ Intercept Jr.
Note: there is no ™ in the file names for SAM 4.0. or later.
• SuperLaserSpool
If you are using SuperLaserSpool you may experience difficulty while installing SAM. Disable SuperLaserSpool by temporarily moving it out of the System Folder and restarting your Macintosh before installing SAM.
• Installed File Location
Following is a list of files and the proper locations of those files on your disk:
SAM Folder:
SAM
SAM Help
SAM 4.0 Read Me
Startup Disk Builder
Teach Text
System Folder:
SAM Virus Definitions
SAM Virus Help
Extensions:
SAM Intercept (System Folder under System 6)
SAM Intercept Jr. (not installed when SAM Intercept is installed)
Apple Modem Tool (Communications Folder under System 6)
XMODEM Tool (Communications Folder under System 6)
Control Panels:
SAM alias (not installed under System 6)
Preferences Folder:
SAM Preferences (System Folder under System 6)
SAM User Definitions (System Folder under System 6)
Apple Modem Tool Prefs (System Folder under System 6)
_________________________________________
Custom Installation
• SAM Intercept vs. SAM Intercept Jr.
There is no need to use SAM Intercept and SAM Intercept Jr. at the same time. We recommend using SAM Intercept because it provides more configuration options, making it easy to suit your exact needs. SAM Intercept Jr. should be used only in low memory situations (RAM or hard drive space). Please refer to "Choosing SAM Intercept or SAM Intercept Jr." in the SAM user manual for more information.
• Startup Disk Builder
If you install SAM 4.0 using the Custom Install option, you will not be prompted to create a Decontamination Disk. If you perform a custom installation, be sure to create a Decontamination Disk using the Startup Disk Builder application. For instructions, see "Creating a Decontamination Disk" in Chapter 5 of the SAM user manual.
Remember that Startup Disk Builder should only be used to create System 7 Decontamination Disks.
Do not use preformatted DOS disks for the Decontamination Disk being built by Startup Disk Builder, unless you Erase Disk… from the Special menu in the Finder. This will be addressed in a future version of SAM.
_________________________________________
Decontamination Disk
The SAM Install #2 disk shipped with SAM can be used to startup the following Macintosh models:
If you have a Macintosh which came with a CD-ROM, you will need to create a Disk Tools disk from a disk image on the CD. Please see the documentation that came with your Macintosh for instructions on how to create the Disk Tools disk.
_________________________________________
Special Considerations
• Retrospect/Retrospect Remote
When you back up to floppy disks with Retrospect, SAM will warn of suspicious activities. If you Remember these activities (by clicking the Remember button in the Suspicious Activity Alert) you will not see these alerts again. Some of the common suspicious activities are "Format without a dialog" and "Bypassing the file system".
When you update Remote control panels from within Retrospect, SAM will warn of suspicious activities. If you Remember these activities (by clicking the Remember button in the Suspicious Activity Alert) you will not see these alerts again.
You can customize SAM to automatically remove these Suspicious Activity Alerts after a specified number of seconds. For more information, see "Customizing Alerts" in Chapter 7 of the SAM user manual.
To avoid SAM's alerts altogether when using Retrospect and Retrospect Remote, change SAM's "Prevention" preferences from Standard to Custom and uncheck the "Add startup document", "Format without dialog", and "Bypass file system" options. For more information see "Customizing Suspicious Activity Monitoring" in Chapter 7 of the SAM user manual.
• INITPicker
When using SAM with INITPicker you may experience difficulties. SAM Intercept (or SAM Intercept Jr.) may be loaded twice, and you may not be able to change the load order of SAM Intercept. The work around for these problems is to rename SAM Intercept and then be sure that INITPicker loads SAM Intercept first.
Locate SAM Intercept. It's in the Extensions folder under System 7.x and in the System Folder under 6.0.x. Click between the "S" and the "A" in the SAM Intercept filename (under the icon) and press delete several times to remove the special character and the "S". Retype the "S". Use INITPicker to move SAM to the top of the INIT list (this causes SAM Intercept to load before other INITs in the list). Restart your Macintosh.
• Automatic Compression (such as AutoDoubler and SpaceSaver)
When you decompress files, SAM will warn of Suspicious Activities. If you Remember these activities (by clicking the Remember button in the Suspicious Activities Alert) you will not see these alerts again. You can also customize SAM to automatically remove these Suspicious Activity Alerts after a specified number of seconds. For more information, see "Customizing Alerts" in Chapter 7 of the SAM user manual.
_________________________________________
Update Virus Definitions
• AutoDoubler
If you are using AutoDoubler 2.0.4 or earlier on a Power Macintosh, you may experience problems when updating the SAM Virus Definitions using the Update Virus Definitions… command. Please turn AutoDoubler off before you use the Update Virus Definitions… command. This problem will be addressed in a later version of AutoDoubler.
• SAM Virus Definitions Update Server
The phone number for the SAM Virus Definitions Update Server is 1-541-334-4082.
In Europe, the phone number is +31-71-353299.
In Australia, the phone number is 02-817-2698.
In SouthEast Asia, the phone number is +61-2-817-2698.
If you are outside these areas, please contact your local dealer or Symantec office.
_________________________________________
United Kingdom Support Information
If you have any technical queries, please contact our Technical Services department on 01628 788580. If you would like any information on SAM upgrades or other Symantec products, please call our Customer Services team on 01628 592320 and they will be happy to help.
