home *** CD-ROM | disk | FTP | other *** search
- SYMANTEC CORPORATION - PETER NORTON GROUP
- READ.ME file for THE NORTON ANTIVIRUS Version 1.5
- June 17, 1991
-
-
- WELCOME TO THE NORTON ANTIVIRUS!
-
- This file contains information about The Norton AntiVirus that is not included
- in the User Manual. Please read this file thoroughly before you install or
- use The Norton AntiVirus. To print this file from the DOS prompt, type:
-
- COPY READ.ME PRN:
-
-
- This document has three sections;
-
- 1) General Program Information
- 2) Compatibility Information
- 3) Additional Information (includes changes to the User Manual)
-
-
- *******************************
- * GENERAL PROGRAM INFORMATION *
- *******************************
-
- ***** CONTENTS OF THE NORTON ANTIVIRUS DISK *****
-
- The Norton AntiVirus disk contains the following files:
-
- FILENAME DESCRIPTION
- --------- -----------
- INSTALL.EXE Install program
- NAV.EXE Virus Clinic
- NAV._XE Inoculation file for Virus Clinic (this is a hidden file)
- NAV_.SYS Comprehensive Virus Intercept device driver
- NAV&.SYS Execution Scan Virus Intercept device driver
- NAV.HLP Help file
- NAV.ICO Windows icon file
- NAV.PIF Windows PIF file
- UNINSTAL.EXE Removes Virus Intercept from CONFIG.SYS
- UNINSTAL.DOC Documentation for UNINSTAL.EXE
- UNINOC.EXE Removes inoculation files
- UNINOC.DOC Documentation for UNINOC.EXE
- READ.ME The file you are reading
- TIPS.DOC Common questions and answers
-
- NOTE: The Norton AntiVirus version 1.5 does not include a NAV.DEF file.
- This file was provided in earlier versions for use in restoring virus
- definitions that were deleted. If you need to restore virus
- definitions that were deleted, simply copy the NAV_.SYS file that you
- received in this package (from the original distribution disk or from
- your working copy) to your NAV directory, overwriting the existing
- NAV_.SYS file. If NAV_.SYS is loaded in memory, you must disable
- it before it can be overwritten (press and hold both shift keys
- during boot-up).
-
-
- ***** CHOOSING AND USING THE PROTECTION THAT'S RIGHT FOR YOU *****
-
- There are three device drivers in The Norton AntiVirus, each designed to
- reside quietly on your system and watch for viruses. They require 1K, 4K,
- and 33K of memory, respectively. Which device driver is right for you
- depends on your system's requirements. The following information can
- help you in choosing the right protection for your computer. Each of the
- device drivers operates and detects viruses in DOS and Windows and can
- take advantage of your high memory when loaded high.
-
- NAV&.SYS (1K device driver)
- If you have limited memory, or have a large number of TSRs that you
- load into high memory, use NAV&.SYS. This very small device driver
- detects viruses when an infected program is run but, because of its
- small size, does not detect Boot Sector infections.
-
- NAV&.SYS /B (4K device driver)
- This small device driver performs the same operations as the 1K
- device driver, with the addition of Boot Sector virus detection.
-
- NAV_.SYS (33K device driver)
- This device driver performs all of the operations of the 1K and 4K
- versions and also scans files during a DOS "copy" or "move" operation.
- Like the 1K and 4K device drivers, it will detect a virus in an
- infected program upon execution. Additionally, NAV_.SYS will prevent
- you from copying an infected program from a diskette onto your
- computer.
-
- Each of these device drivers provides significant virus protection. Choose
- the one that best matches your system's memory requirements.
-
-
- ***** WINDOWS USERS *****
-
- Each of the three Virus Intercept device drivers included in The Norton
- AntiVirus operates with Microsoft Windows.
-
- If, when in Windows, you execute an application that displays in
- graphics mode you will not see a Virus Alert message on the screen
- when a virus is detected. You will, however, hear the audible
- alarm, provided that the Special Sound option is set on.
-
-
- ***** UPGRADING TO 1.5 *****
-
- To upgrade to The Norton AntiVirus version 1.5 from a previous version,
- follow these four steps:
-
- 1. Run UNINSTAL.EXE (found in your existing NAV directory)
- 2. Restart your computer
- 3. Run UNINOC.EXE (found in your existing NAV directory)
- 4. Install The Norton AntiVirus version 1.5 (see the User
- Manual for details)
-
- The above procedure removes Virus Intercept (NAV_.SYS or NAV&.SYS) from your
- CONFIG.SYS file and deletes inoculation files created by older versions of
- The Norton AntiVirus.
-
- If your AUTOEXEC.BAT file contains a line executing the /C+ compatibility
- switch (for example C:\NAV\NAV /C+), delete this line.
-
- NOTE: If you are using the WINDOWS.BAT file to run Windows, replace it
- with the WINDOWS.BAT file described in the User Manual Supplement
- (version 1.5).
-
-
- ***** LOADING BOTH NAV_.SYS AND NAV&.SYS *****
-
- Loading both NAV_.SYS and NAV&.SYS, in any order, will halt your system.
- This can be resolved by rebooting, stopping Virus Intercept from loading
- (hold both Shift keys down while your system boots), and removing either
- command line from your CONFIG.SYS file.
-
-
- ***** CONFIGURATION INFORMATION IN NAV_.SYS *****
-
- The Norton AntiVirus stores its configuration and other information
- in NAV_.SYS. Consequently, NAV_.SYS should not be marked READ-ONLY.
-
- Virus definitions are read into memory at boot time. If Virus Intercept is
- active and you add or delete virus definitions, these changes will take
- effect only AFTER you reboot.
-
-
- ***** NOTES ON VIRUS INTERCEPT *****
-
- NAV&.SYS and NAV&.SYS /B require DOS version 3.1 or higher. If you are
- using an earlier version of DOS, use NAV_.SYS.
-
- When boot sector viruses are detected by NAV&.SYS /B, the Virus Alert
- message is displayed on the 25th line. If the current display is in
- graphics mode, an audible alarm will sound though an alert message will
- not be displayed.
-
-
- ***** NAV_.SYS CANNOT BE READ FROM OR WRITTEN TO *****
-
- When active in memory, NAV_.SYS prevents any reads or writes to itself.
- Consequently, you cannot view, erase, modify, or change the attributes of
- the NAV_.SYS file while Virus Intercept is active.
-
-
- ***** AUDIT TRAIL FILE *****
-
- If you have entered a time-out for the Virus Alert message, you must
- specify an Audit Trail file, so that a record is kept of any virus alerts.
-
-
- ***** GRAPHICS MODE AND MULTIPLE VIDEO DISPLAY MEMORY PAGES *****
-
- When executing programs that display in graphics mode or use multiple video
- display memory pages, you may not see a Virus Alert message on the screen
- when a virus is detected. The Brief editor or Codeview are programs that
- exhibit these characteristics. You should set the Special Sound option on
- so that in the event the alert message is not seen, the audible alarm will
- be heard.
-
-
- ***** SPECIAL SOUND *****
-
- When the special sound is enabled, keyboard input is not recorded until
- the special sound has completed.
-
-
- ***** LAPTOP / MONOCHROME SYSTEMS USERS *****
-
- The color palette options provide a wide variety of color options. On any
- monochrome (two-color) system, best results may be obtained with the
- PLASMA screen options, which present the screens in actual black and white.
- (The main difference between "Plasma Color" and "Plasma B&W" is that the
- B&W screen has a textured background and the Color screen a solid
- background.)
-
-
- *****************************
- * COMPATIBILITY INFORMATION *
- *****************************
-
- ***** QEMM/386^MAX USERS *****
-
- High memory manager programs allow you to use video display memory space for
- loading other programs. A conflict may occur with The Norton AntiVirus if
- such usage is not prevented. QEMM and 386^Max are examples of high memory
- manager programs that will use this area unless it is specifically excluded.
- To avoid a conflict, make sure your CONFIG.SYS file contains the command line
- switches necessary to exclude the video display memory space. For example:
-
- DEVICE=QEMM.SYS X=B000-B7FF
-
- - or -
-
- DEVICE=386MAX.SYS X=B000-B7FF
-
- The "X=B000-B7FF", in this case, tells these high memory managers not to use
- the monochrome video display memory space for loading other programs.
-
-
- ***** DESQVIEW AND MULTITASKING *****
-
- Use NAV_.SYS when using DESQview since NAV&.SYS does not detect program
- executions under a multitasking environment.
-
-
- ***** COMMUNICATIONS PROGRAMS *****
-
- For maximum protection, Virus Intercept Alerts halt all other system
- activity. Consequently, time-sensitive communications programs, such as
- ProComm Plus or Crosstalk, may crash or lose data after an alert is
- displayed. Because NAV_.SYS scans only reads from disk, this is likely to
- happen only if you are multitasking or if you are uploading an infected file
- to someone else.
-
-
- ***** BACKING UP YOUR SYSTEM WITH VIRUS INTERCEPT *****
-
- Virus Intercept is compatible with most popular backup programs, including
- The Norton Backup Version 1.2. Running a backup program while Virus
- Intercept is also running in Advanced mode with Auto-Inoculate OFF may
- cause an alert as you back up any non-inoculated files. The backup program
- will stop and wait for a response to the alert screen. Because some backup
- programs cannot tolerate an unexpected interruption, they may abort.
-
-
- ***** Q&A USERS: *****
-
- If you have difficulty running The Norton AntiVirus from the Q&A main menu,
- create a batch file that executes NAV.EXE and replace the NAV.EXE
- filename in the Q&A utilities menu with the new batch filename.
-
-
- ***** SPECIAL NOTE TO DOS 2.X USERS: *****
-
- Add this statement to your AUTOEXEC.BAT file:
-
- SET NAV=<drive>:\<nav_path>
-
- where <drive> and <nav_path> indicate the drive and full pathname of the
- directory in which you've installed The Norton AntiVirus. This enables the
- correct utilization of the NAV directory that the installation procedure
- optionally placed in your path.
-
-
- **************************
- * ADDITIONAL INFORMATION *
- **************************
-
- ***** DOS ABORT, RETRY, FAIL? MESSAGES *****
-
- Whenever the "Abort, Retry, Fail?" message is displayed when you are using
- The Norton AntiVirus, ALWAYS select "Fail." If a virus is present,
- selecting either Retry or Abort might simply continue the execution of the
- virus itself, further infecting your system.
-
-
- ***** THE NORTON ANTIVIRUS USER MANUAL CORRECTIONS*****
-
- Page 2:
- Audit Trail. The audit trail keeps a permanent record of all
- virus-related activity, including all Virus Intercept alerts and your
- responses.
-
- Page 11:
- Buttons. Buttons are used throughout Virus Clinic to perform an action
- in a screen or a dialog box. For example, in the Scan directory dialog
- box, the buttons are on the right and are surrounded by square brackets
- such as [OK] or [Cancel].
-
- Page 1-10 to 1-11:
- 4. Install asks where you are copying The Norton AntiVirus program
- files from. The source drive where The Norton AntiVirus files are
- located will be displayed in this screen, such as A:\. Press Enter
- to select Continue.
-
- 5. Install asks where you want to copy the program files. Install
- shows the destination drive and directory where the files will be
- copied, such as C:\NAV. Press Enter to continue.
-
- Page 1-19:
- States that Virus Intercept takes 15K of RAM. In fact, Virus Intercept
- takes 1K, 4K or 33K of RAM. The comprehensive Virus Intercept
- (NAV_.SYS) requires about 33K of RAM, the small version of Virus
- Intercept (NAV&.SYS /B) requires about 4K of RAM, and the tiny version
- of Virus Intercept (NAV&.SYS) requires less than 1K of RAM.
-
- Page 3-8:
- The sentence "Delete the file in the Scan Results screen before
- replacing it" should be in a Note rather than a Tip.
-
- Page A-2:
- The last troubleshooting question on page A-2 should read as follows:
-
- When I scan a file, directory, or drive in Virus Clinic, Virus Clinic
- detects a virus in memory and shows a message alerting me of that
- virus. What should I do?
-
- Virus Clinic checks memory for viruses when you perform your first scan
- in this session with Virus Clinic. If a virus is detected, Virus
- Clinic displays the name of the virus. To rid your system of this
- virus, do the following:
-
- 1. Turn off your computer using the power switch.
- 2. Boot your computer from an uninfected, write-protected DOS disk.
- 3. After you boot up your computer, use your write-protected
- working copy of The Norton AntiVirus program disk to start
- Virus Clinic.
- 4. Scan your system for viruses.
- 5. Delete or repair any infected files found during the scan, so
- your system is virus-free.
-
- ***** END OF READ.ME FILE *****