Compu-Fix

home *** CD-ROM | disk | FTP | other *** search

/ Compu-Fix / Compu-Fix.iso / misc / virust / vt40b.doc < prev next >

Wrap

Text File | 1993-03-01 | 48.1 KB | 1,026 lines

THE VIRUS TERMINUS -- V4.0B Copyright 1990-92 By S.T.CALISE All Rights Reserved!! TABLE OF CONTENTS page Shareware Notice ........................... 2 Registration Information ........................... 2 Hardware/Software Required ........................... 3 Background Information ........................... 3 Installation ........................... 3 QUICK Installation ........................... 5 Configure ........................... 7 Default Parameters ........................... 7 Terminus Start-Up Options ........................... 7 Start-Up Self Test ........................... 7 Experimental Virus Data ........................... 8 File Management ........................... 9 Mouse Operation ........................... 9 Directory Views ........................... 10 SCAN/CLEAN Files Menu ........................... 10 SCAN/CLEAN Drive(s) Menu ........................... 11 Validation Functions Menu ........................... 11 Program Defaults ........................... 11 SCAN/CLEAN French Messages ........................... 11 SCAN/CLEAN Spanish Messages ........................... 11 Adding NEW Options ........................... 11 SCAN/CLEAN Option Switches ........................... 12 Memory Available Function ........................... 13 SCAN/CLEAN Reports ........................... 15 Directory PICK LIST ........................... 15 SCAN/CLEAN Version Notes ........................... 15 WRITE PROTECTED Floppy Notes ........................... 15 VIRUS Fact Sheets ........................... 16 DIRECTORY PATH FINDER ........................... 16 REPORT FUNCTIONS Menu ........................... 17 MAKELIST v1.2 Utility ........................... 17 Operation Restrictions ........................... 17 Acknowledgements ........................... 18 Upgrades ........................... 18 Registration Form ........................... 18 - PAGE 2 - ***** READ README.1ST file NOW! ***** SHAREWARE NOTICE: You may copy and pass on this SHAREWARE version of THE VIRUS TERMINUS(c) provided the following guidelines are adhered to. All original files must remain intact and with no modifications or additions of any kind. It must remain as a program PACKAGE consisting of only the files listed below. Your paid registration is required for ANY further use past a twenty-one(21) day trial period of examination or testing The VIRUS TERMINUS(c). Programs included in THE VIRUS TERMINUS(c) Package: VT40B.EXE ; VTCF1.EXE ; VTCF2.EXE ; VTCF3.EXE; REGISTER.EXE ; PRINTDOC.BAT ; VT40B.DOC ; README.1ST (8 files) The author and holder of copyright hereby disclaim all warranties relating to this software, whether express or implied, including and without limitation to any implied warranties of merchantability or fitness for a particular purpose. The USER of this software shall bear all risk as to the quality and performance of the software. The USER shall also bear full responsibility for any accidental or other damage caused, related or attributed to the use and/or performance of this software. THE VIRUS TERMINUS(c) IS DISTRIBUTED 'AS IS' . ******************** The VIRUS TERMINUS(c) may not be used in a business, corporation, government or agency environment without a negotiated site license. All rights are strictly reserved. Please contact the holder of copyright for further information on site licenses. ******************** ***** REGISTER SOFTWARE: A convenient registration form has been provided with this working program. Run the program REGISTER.EXE from any DOS prompt(Prints to any standard device). The most recent version of THE VIRUS TERMINUS(c) will be sent to you upon registration. Registration allows continued use of this software on a single computer unless otherwise licensed. Please answer all questions and include the $20.00 registration fee in U.S. funds. Mail the completed form with your remittance to: S.T. Calise 673 Herbertsville Rd. Brick, New Jersey 08724 USA See Page #18 for information on upgrades and registration form. - PAGE 3 - HARDWARE RECOMMENDATIONS RAM MEMORY: 640K BYTES MEMORY (512K MIN) and 450Kb FREE DISK DRIVE: HARD DRIVE + (1 or 2 FLOPPYS) or 2 FLOPPYS WITHOUT A HARD DRIVE - ONE SHOULD BE 720K, 1.44M, or 1.2M HIGH CAPACITY TYPE (See note on 360Kb installation.) VIDEO : (IBM MDA),(CGA C80) TEXT MODE/EMULATION REQ. or VGA/EGA Downward Compatible to CGA OPERATION : KEYBOARD or MS COMPATIBLE MOUSE OPTIONAL SOFTWARE REQUIREMENTS: PC/MS DOS V2.1 - 5.0 Version v85 or higher - SCAN, CLEAN; VALIDATE.COM; VIRLIST.TXT from McAfee Associates (See Version notes & restrictions in VT40B.DOC) **** NOTE: Run VT40B.EXE in the following manner if you have CGA C80 capability but use a green, amber, white, etc. monochrome display device:(parameter IS case sensitive) A> VT40B.EXE M (press ENTER) ***** BACKGROUND INFORMATION: This program was designed to be an intelligent front end for McAfee's VIRUSCAN SCAN, CLEAN, VALIDATE & VIRLIST programs. One of the main objectives in writing this program was to help reduce the amount of user input required each time a file is scanned, cleaned or paced through the validate functions. The SCAN/CLEAN program switches have been made visible and can be set through an easy to use interface. This version of THE VIRUS TERMINUS(c) is a full working copy. Please register your copy so that you may receive the latest version and be eligible for future updates. Bolster the SHAREWARE CONCEPT by sending the required fee and information requested on the registration form which is found at the end of this document or run REGISTER.EXE to get a printed form. ***** INSTALL THE VIRUS TERMINUS(c): THE VIRUS TERMINUS(c) operates most efficiently when used in conjunction with a hard drive. You may also run this program from a floppy drive when your hard drive is infected.(360K, 720K, 1.2MEG, 1.44MEG disk size) McAfee Associates files : SCAN.EXE; CLEAN.EXE; VALIDATE.COM; VIRLIST.TXT VIRUS TERMINUS files : VT40B.EXE; VTCF1.EXE; VTCF2.EXE VTCF3.EXE; MS/PC DOS files needed : COMMAND.COM - PAGE 4 - -------------------------------------------------------------- HARD DRIVE: 1. Create one subdirectory for SCAN,CLEAN,VALIDATE, VIRLIST.TXT, and THE VIRUS TERMINUS. (Separate directories are allowed for SCAN, CLEAN , VALIDATE, AND VIRLIST.TXT) 2. Copy McAfee Associates FILES and VIRUS TERMINUS files to the subdirectory* * 3. Change the current drive and subdirectory to the location of The VIRUS TERMINUS and then run the file VT40B.EXE. Press <ENTER> after typing each of the following lines. C: cd\location vt40B.exe C: may be D: or whatever drive you installed The VIRUS TERMINUS program on. cd\location may be cd\utility\viruscan or any subdirectory you placed the TERMINUS files in. 4. Press F5 to configure. Then use main menu select #5 to create VCLEAN.LST ------------------------------------------------------------ FLOPPY : 1. Format blank disk.(360K, 720K, 1.2Meg, 1.44Meg) 2. Copy McAfee Associates and VIRUS TERMINUS files to the disk. Copy your shell or file utility to the disk if there's room. DO NOT copy the Virus Terminus files or COMMAND.COM to a subdirectory on your floppy disk. Place them in the ROOT. OK to put SCAN, CLEAN, etc. in a subdirectory. <IMPORTANT!> ---> 3. Copy COMMAND.COM to the disk.(ROOT directory) - PAGE 5 - * 4. Place this disk in DRIVE #A or DRIVE #B A: cd\ vt40B.exe or B: cd\ vt40B.exe Press F5 to configure. Then press #5 at the main menu to create VCLEAN.LST The VIRUS TERMINUS v4.0 first checks for missing programs before you reach the main menu screen. A check for missing programs is also performed each time you exit the default area or return from your SHELL or file utility. The first time you run VT40B.EXE make sure you go no further than the MAIN MENU before you press F5 and make the needed additions or corrections to the DEFAULT TABLE. ********************************************************************* The CURRENT DRIVE and SUBDIRECTORY must be the location of the VIRUS TERMINUS file set. Failure to change over to the TERMINUS drive and subdirectory will cause you to have to re-configure and modify the default table each time you run the program. The default table is always loaded in from the current drive and subdirectory at the time you startup The VIRUS TERMINUS. You may create a DOS BATCH file with the loading sequence previously outlined in HARD DRIVE step #3 and FLOPPY step #4 installation instructions. ********************************************************************* ***** A QUICK INSTALL FOR SYSTEMS ALREADY INFECTED ***** 1. Turn your system on and BOOT from a known non-infected DOS disk.(Place the DOS system disk in drive #A - WRITE PROTECT) 2. Format a blank disk using the DOS format command. Use the FORMAT.COM file found on your non-infected DOS disk. Avoid accessing or using any files and utilities found on your hard disk. Format the highest capacity floppy your system drives will allow. Current program version sizes allow 360K, 720K, 1.2MEG, 1.44MEG disk sizes. - PAGE 6 - 3. Follow these guidelines for the drive specification that you are using: A. Copy SCAN.EXE, CLEAN.EXE, VALIDATE.COM, VIRLIST.TXT to the newly formatted disk. B. Copy VT40B.EXE, VTCF1.EXE, VTCF2.EXE, and VTCF3.EXE to the newly formatted disk. DO NOT put these files in a subdirectory on your disk. Put them in the ROOT. <IMPORTANT!> ---> C. Copy COMMAND.COM to the new formatted disk. DO NOT put this file in a subdirectory on your disk. Put it in the ROOT. D. Copy your DOS shell or file utility to the newly formatted disk, but remember that the disk will be write protected - copy, move, SCAN/CLEAN reports etc. won't work! E. Place this disk in DRIVE #A or #B and type each of the following lines pressing <ENTER> after each: A: cd\ VT40B.EXE or B: cd\ VT40B.EXE F. Press F5 as soon as you are in the main menu and configure VIRUS TERMINUS. Also, press #5 in the main menu to create VCLEAN.LST. G. NOW write protect the disk! H. Select #1 or #2 at the MAIN menu and then press F7- SELF-TEST to make sure the installation did not infect your work disk. ***** 360Kb Disk Installation: This version of The Virus Terminus(VT40B.EXE, VTCF1.EXE, VTCF2.EXE, VTCF3.EXE) plus COMMAND.COM, SCAN, CLEAN, VALIDATE and VIRLIST.TXT will fit on a 360Kb DSDD disk. There is enough room to fit all files on a NON-boot disk with approx. 70Kb space left for temporary files, SCAN /CLEAN reports etc. (approx. 70Kb free non-boot disk DOS 3.3 and approx. 30K free DOS 5.0) ***** NOTE: The Report option of SCAN and CLEAN will not work since you will have write protected the disk. All requests to SCAN/CLEAN single or job batch files will be directed to the ENTIRE SUBDIRECTORY.Terminus must make a temporary file named OPTIONS.$$$ on your disk when you are in the SCAN/CLEAN FILE(s) submenu. This will be impossible if your floppy is write protected! Instead, when your disk is - PAGE 7 - write protected, Terminus sends SCAN/CLEAN a set of command line options which include the name of the of the subdirectory you select. ( \*.* instead of individual file names.) DO NOT run any programs located on your hard drive until you are sure ALL files and the entire system has been disinfected! SUGGESTION: If your system is not infected it would be wise to make up a disk like one of those previously described so that if ever the need arises you will be prepared to meet any virus infection threat without delay and inconvenience. ***** VIRUS TERMINUS START-UP OPTIONS: /S = Check Snow - Use to clear up display - older CGA's /M = Mono - Eliminates window background colors and makes certain texcolor adjustments. Use with green/amber CGA, gray VGA display, Laptop models, etc. Mouse will work if present. DO NOT use with true IBM MDA(Monochrome). /T = Start-up SELF-TEST - Checks Terminus file set, SCAN, CLEAN, VALIDATE and MEMORY. Implement as follows: (or any combination thereof) A> vt40B.exe S (press ENTER) or A> vt40B.exe M (press ENTER) A> vt40B.exe T (press ENTER) or A> vt40B.exe MST (press ENTER) ***** CONFIGURE THE VIRUS TERMINUS: THE VIRUS TERMINUS(c) may be configured from the main program menu or any sub-menu while the program is running. It is highly recommended that you configure your paths and parameters when running the program for the first time. DON'T RUN THE VIRUS TERMINUS FROM YOUR HARD DRIVE IF THE DRIVE IS INFECTED. Use the floppy installation and disinfect your drive first - then install and run from your hard drive. Above all, FOLLOW THE DIRECTIONS THAT CAME WITH SCAN or CLEAN. Here is an explanation of the program default parameters: VIRUS TERMINUS PRGM DIR: Directory where the VIRUS TERMINUS files will be found. SCAN.EXE PROGRAM DIR: Directory where SCAN.EXE is located at. CLEAN.EXE PROGRAM DIR: Designates where CLEAN.EXE is located at. SCAN/CLEAN REPORTS DIR: Same directory as TERMINUS PRGM DIR. VALIDATE.COM PRGM DIR: Location of VALIDATE.COM VIRLIST.TXT FILE DIR: Location of VIRLIST.TXT - PAGE 8 - DOS SHELL PATH & FILE: This parameter will describe where the DOS Shell will be located and the name of the shell program. If you use PCTOOLS, XTREE, or any other hard drive or file manager just enter the directory and name name of the program that must be executed to make your shell work. You may even use DOS COMMAND.COM if no shell is available or you are working from a floppy with limited space available. When you press <F3> the program control will go to the file you specify. EXP.VIRUS DAT.FILESPEC: Path and filename for the experimental data to be used with SCAN. Please read the DOCS that came with SCAN. USE WITH CAUTION!** EXP. VIRUS DATA ON/OFF: Set this switch to 'ON' and the experimental virus data file will be used by SCAN. /EXT FRENCH MESSAGES ON/OFF: Turns on/off SCAN/CLEAN French messages. /FR SPANISH MESSAGE ON/OFF: Turns on/off SCAN/CLEAN Spanish messages. /SP DISABLE CTRL-BRK ON/OFF: Disable CTRL-BRK key combo during SCAN & CLEAN operations. /NOBREAK DISABLE MORE? ON/OFF: Disable SCAN/CLEAN MORE? prompt when screen is full. /NOPAUSE ADD SCAN PRGM OPTIONS : Enter options not available with The Virus Terminus program. Clear by entering <SPACE> ADD CLEAN PRGM OPTIONS : Enter options not available with The Virus Terminus program. Clear by entering <SPACE> * NOTE: The state of each switch can be changed after THE VIRUS TERMINUS is up and running. This is the only area where the options /FR, /SP, /EXT, /NOBREAK, and /NOPAUSE may be activated. ***** EXPERIMENTAL VIRUS DATA: Please read the SCAN docs to get a better understanding of what an 'experimental virus data file' consists of. If you decide that you need to utilize this function, press F5-CHG.DEF and make an entry to the default 'EXP.VIRUS DAT.FILESPEC'. This entry will be the path and filename for your experimental virus data file. Next, turn default switch 'EXP. VIRUS DATA ON/OFF' to the 'ON' position. NOTE: This is the only way to tell THE VIRUS TERMINUS program to relay the /EXT switch to SCAN. Be sure to go back to CHANGE DEFAULTS and turn this switch off when you are finished! This SCAN function was deliberately left remote from the sub-menu switches since most users of SCAN and THE VIRUS TERMINUS will not need to use it. - PAGE 9 - ***** FILE MANAGEMENT You may jump in and out of THE VIRUS TERMINUS, each time copying, moving, deleting, etc. the files you choose. Just press F3 at any menu. THE VIRUS TERMINUS will suspend operation while you are in your shell/utility. You can get back to THE VIRUS TERMINUS by using the EXIT/QUIT function of your utility or by typing 'EXIT' at the DOS command prompt. DO NOT attempt to go back to THE VIRUS TERMINUS by re-launching VT40B.EXE instead of using your SHELL's 'EXIT' function. PCTOOLS V5.5 V6.0 & V7.1, XTREE PRO and the NORTON COMMANDER were tested successfully with the 640K memory model*. You may even specify COMMAND.COM so that you have direct access to DOS. The VIRUS TERMINUS program is very small and does not reserve much memory for code and data(195K). * It is reccomended that your system have 640K memory. You will need this much memory if you plan to run PCTOOLS v7.1 N.R. full blown shell from THE VIRUS TERMINUS. Other shells need less RAM and will reduce the required memory reserve. See page #10 on how to determine available RAM. SPECIAL NOTE TO USERS OF PCTOOLS(tm) PCSHELL: IF you add an entry to your application menu and run THE VIRUS TERMINUS from there, you should not experience any problems. If you run VT40B.EXE from the directory on your hard disk directly by pressing return or clicking when the file is highlighted and you have QUICK RUN 'ON' in your option menu, you will have much less memory to work with.(about 200K less) Turn QUICK RUN 'OFF' or add an entry to your applications menu and run it from there. Also, it is not advised to run PCTOOLS(tm) RESIDENT since this will eat up more memory needed for THE VIRUS TERMINUS and SCAN/CLEAN/VALIDATE. Do not change your PCTOOLS configuration or attempt to save a new configuration file. ***** MOUSE OPERATION: The two button Microsoft Mouse hardware specifications are supported by this program when used in conjunction with a color display/card that supports the IBM CGA C80 standard. The program's video mode auto-detect logic disables mouse operation if a Monochrome Display Adapter is detected. Only keyboard entry is functional in MONOCHROME video mode(IBM MDA standard). Logitech and all other Microsoft Mouse compatible mice should function properly. The program logic checks for a 'connected' mouse. You should not experience any trouble if your mouse is truly MS compatible, connected to the serial port or buss card, and the mouse driver software was installed prior to running this program. - PAGE 10 - ***** DIRECTORY VIEWS: You may view the contents of any floppy or hard drive directory/paths by clicking the mouse button when the cursor is over F8 or by pressing F8. ***** PROGRAM MENU SELECTIONS SCAN/CLEAN FILES: Use this main menu selection when all you need to do is scan or clean an individual or batch of files. The /A ALL switch is forced on. You may choose file(s) from a paged directory display if your disk is not write protected. Your selection is from the PICK LIST or by further selection from the PATH FINDER if you select NEW ENTRY. Each time you SCAN or CLEAN files you are given a choice of what subdirectory to pick files from. You must specify a VIRUS CLEAN CODE before you can 'CLEAN' a file or batch of files. Use menu selection #2 and get the code for the virus you wish to disinfect. The code needed will be displayed during a SCAN operation and may also be found in the CLEAN DOCS. If you receive a prompt that says LIST EMPTY, return to the main menu and press #5 to create VCLEAN.LST from the McAfee file VIRLIST.TXT . A manual entry mechanism is also available for entry of ID codes. Press <ALT-E> key combo. SCAN/CLEAN DRIVE(s): Use this main menu selection when you wish to scan ENTIRE floppy disks or a hard drive. Turn the /MANY switch on if you want to SCAN/CLEAN more than one floppy disk. Each time you SCAN or CLEAN a drive you are sent to the drive selection list. Select the drive you wish to SCAN or CLEAN and away you go. - PAGE 11 - VALIDATE FUNCTIONS: Use this main menu selection if you wish to utilize the SCAN validation functions. You can add, remove or check the validation check sums added to .COM or EXE files to see if there have been any changes made to these files. The file display is filtered to display only .COM and .EXE files. The check function will reveal file tampering which the normal SCAN can't detect provided you have previously added validation checksum to the file you are checking. It changes the files length by about ten bytes. Read the SCAN DOCS for more information. CERTIFY VALIDATION selection in this submenu allows you to check for files which DO NOT have validation code attached to them. Turn REPORTS ON! to capture the list. The CRC CHECKSUM menu selection will perform a two method check on the file of your choice which will provide a comparison for future checks. The file display for this selection IS NOT filtered since you may perform a CRC checksum on ANY FILE. ***** SCAN/CLEAN with FRENCH MESSAGES: Toggle the /FR switch option ON! and SCAN or CLEAN will output messages in French. Option found in Default Table area. ***** SCAN/CLEAN with SPANISH MESSAGES: Toggle the /SP switch option ON! and SCAN or CLEAN will output messages in SPANISH. Option found in Default Table area. ***** ADDING NEW or EXTRA OPTION PARAMETERS: Modify the default table entries designated as ADD SCAN PAREMTERS and ADD CLEAN PARAMETERS. Refer to your SCAN.EXE and CLEAN.EXE documentation for a list of valid parameter options. - PAGE 12 - ***** SCAN/CLEAN OPTION SWITCHES Point the mouse cursor over the word ON! or OFF to change add or delete options. Press a letter key (A through H) if you are using the keyboard. A. SCAN/CLEAN ALL FILE TYPE EXTENSIONS: SCAN/CLEAN OPTION = /A SCAN and CLEAN will process ALL files found instead of just .EXE .COM .BIN .OV? .PGM .PIF .PRG .SYS .XTP .SWP B. SCAN & OVERWRITE/DELETE INFECTED FILES: SCAN OPTION = /D Instructs SCAN to overwrite / delete any infected files when found . Use with caution! C. TURN MEMORY CHECK ON: SCAN/CLEAN OPTION = /NOMEM Terminus automatically sends this option to SCAN / CLEAN. You must turn this switch ON! to check memory. /M is then sent to SCAN / CLEAN so that ALL memory resident virus infections are searched for . READ SCAN documentation for more information on the /M option. D. CHECK MEMORY ABOVE 640KB: SCAN/CLEAN OPTION = /CHKHI Instructs SCAN/ CLEAN to check memory 640K to 1088K (1024) . This switch will not function when MEMORY CHECK switch #C is set to the OFF position. E. SCAN/CLEAN MULTIPLE FLOPPYS: SCAN/CLEAN OPTION: /MANY Allows SCAN/CLEAN of multiple floppys. F. DOS 4.0+ BOOT SECTOR, P-TABLE, NO FILES: SCAN/CLEAN OPTION: /MAINT Instructs SCAN/CLEAN to perform partition, boot record etc. type operations with considerations for DOS 4.x and higher. NO files are processed when using this option & Terminus checks to see if you have DOS 4.0 or higher and will not allow you to use /MAINT it if not. G. FAST DISPLAY & SKIP INSIDE LZEXE/PKLITE: SCAN/CLEAN OPTION: /FAST Speeds up SCAN / CLEAN operations by not checking inside LZEXE / PKLITE envelopes. Display output which shows name of file being processed is disabled . This option may cause missing of some virus infections Read SCAN documentation for more info. - PAGE 13 - H. TURN ON SCAN/CLEAN REPORT FUNCTION: SCAN/CLEAN OPTION: /REPORT Turns on SCAN/CLEAN text file reports. The report for each run of SCAN / CLEAN is placed in the TERMINUS directory. The name of each report is automatically generated Read VT40B.DOC for more info. ***** MEMORY AVAILABLE FUNCTION: (LARGEST CONTIGUOUS RAM BLOCK) Memory available for SHELL launch or VIRUSCAN operations can be found by pressing CTRL-F key combination while in ANY MENU or CHANGE DEFAULTS. The amount of free memory reported is based on the largest number of free * contiguous * paragraphs(16 bytes) reported by DOS function $48 of INTerrupt $21. This is RAM memory available not DISK space! Only conventional - 640K area is tested. (no extended,etc.) This figure also does not include the amount of RAM currently being used by The Virus Terminus. Reading the documentation which comes with your SHELL will reveal the memory required for proper operation. Compare this to MEMORY FREE to find out whether your SHELL will function properly when it is launched from THE VIRUS TERMINUS. THE VIRUS TERMINUS needs about 200K BYTES to work properly. This figure includes both program and data storage. There is an additional overhead of 200Kb needed for SCAN, VTCF3 etc. to work. This number is an inflated estimate and should only be used as a guide. The actual RAM overhead needed varies from program to program. The SAME AMOUNT of FREE MEMORY should be reported when you return to THE VIRUS TERMINUS after using your SHELL. The amount of MEMORY FREE will decrease if your SHELL mis-behaves and does not release all memory it previously claimed. Decreasing MEMORY FREE will also occurr if you do not 'EXIT' your shell and, instead, re-launch THE VIRUS TERMINUS by executing VT40B.EXE. Doing this will eventually allocate all remaining memory so that even THE VIRUS TERMINUS will not work properly and you will be forced to do a hardware RESET. ***** SOME REASONS/SOLUTIONS FOR INSUFFICIENT MEMORY: 1. Your DOS shell, i.e. PCTOOLS PCSHELL.EXE etc. , is being run resident and a large portion of the program remains in memory at all times. Read the DOCS that came with your shell to find out how to reduce the amount of memory required by your resident shell. 2. Too many popup etc. TSR's are installed in memory. Remove those that are absolutely not needed. Examine your CONFIG.SYS and/or AUTOEXEC.BAT to determine what if any TSR's may be removed. Read the DOCS that accompanied the TSR's. - PAGE 14 - 3. You re-executed The Virus Terminus from your shell or the DOS prompt. If you jump out of The Virus Terminus to go to your shell by pressing <F3>, don't re-start The Virus Terminus again. The proper way to return is to type EXIT at the DOS prompt if you are using COMMAND.COM or use the EXIT/QUIT function of your shell to return back to the Virus Terminus. 4. Take advantage of DOS 5.0 ability to "loadhigh" certain programs out of the 640Kb conventional memory space. Read your DOS manual to find out how. 5. When all else fails ... Run The Virus Terminus from the DOS prompt with no TSR's or DOS shell running in the background. 6. Some or all of the programs still resident in memory do not reside in a contiguous manner. There is free RAM space between programs which can't be used. Try using a TSR manager and at the very least inspect memory with a utility like PCTOOLS Memory Map to ascertain what programs have caused gaps. (DOS 5.0 MEM works great too!) 7. You may be using too many device drivers. If possible move them out of the way or relocate them.(Read your DOS manual) 8. <BTW> , if you have trouble loading/running the Virus Terminus you may more than likely experience the same problem with other utilities too! The Virus Terminus needs only 198Kb for itself and approximately 200Kb contiguous RAM overhead for SCAN/CLEAN/VALIDATE, VTCF3.EXE, etc. ***** SCAN/CLEAN REPORTS: A separate report is generated by SCAN/CLEAN for each file group processed. Multiple floppys get one report for each batch done. Each drive processed by SCAN/CLEAN will receive one report if /MANY option is OFF. A report counter is initialized when THE VIRUS TERMINUS is first run. Each report generated is given a different name by using the report counter value as part of the name(rpt_1.txt, rpt_2.txt, etc,) You may generate 9999 different reports before the counter recycles back to #1. It is important to note that the reports will always start with rpt_1.txt each time the program is run. Therefore, if you wish to save a report copy it to another disk or directory so that the original report is not overwritten the next time that you run THE VIRUS TERMINUS. - PAGE 15 - ***** DIRECTORY PICK LIST: A DIRECTORY PICK LIST is available when selecting directories for file, floppy or hard drive paths. The left mouse button is the same as the <ENTER> key . Pressing <ESC> leaves the PICK LIST with no changes made to the defaults. If you press <ENTER> while 'NEW ENTRY' is highlighted you may edit a new path. There are a total of 15 PICK entries. You may continue to enter new paths after the 15th spot is filled. Each new path will then be placed at the END of the list and the FIRST entry(#1) will be deleted to make room. You may start from scratch simply by using your DOS SHELL to delete the file VTEC40.PCK prior to running THE VIRUS TERMINUS. This yeilds the same effect as running the TERMINUS for the first time since the pick file will not be created on disk until the end of the first work session. ***** SCAN/CLEAN Version Notes: Read the README.1ST file for more specifics! The VIRUS TERMINUS(c) V4.0B was built around SCAN/CLEAN v85 . This version of SCAN/CLEAN incorporates many new options. The most important option to The Virus Terminus users is the @filename list file. The Virus Terminus now uses this option to pass all filename information, options, etc. to SCAN/CLEAN. The speed of the SCAN/CLEAN FILES function of The Virus Terminus has increased many times over because of this option. Floppy users MUST leave the disk containing SCAN, CLEAN, VALIDATE, VIRLIST, and The Virus Terminus program files in either drive #A or drive #B(Don't Remove!). This is where the SCAN/CLEAN will look for the file OPTIONS.$$$ . Hard Drive installation users should just use all the same precautions they have been using . Please note that the VIRUS CLEAN CODE list (VCLEAN.LST) is not provided with this version of TERMINUS. You must have the file VIRLIST.TXT that came with your copy of SCAN or CLEAN. To make the necessary VCLEAN.LST file simply declare the location of VIRLIST.TXT file in the Default Table and then run The Virus TERMINUS. Next, press #5 when you get to the main menu. The utility named MAKELIST v1.2 will do the rest. Note that it is not necessary to create a new VCLEAN.LST file each time you run TERMINUS. You only need to do this the first time or when you change versions of SCAN or CLEAN. ***** WRITE PROTECTED FLOPPY OPERATION: Running The Virus Terminus, SCAN, CLEAN, etc. from a write protected floppy is a must if your system is infected. Doing so, however, imposes a few minor limitations. A.The SCAN/CLEAN report function will not work since SCAN/CLEAN must write to the disk to create a report. - PAGE 16 - B. It is not possible to create a VCLEAN.LST file containing CLEAN-up codes for use with the CLEAN utility. Use the key combo <ALT-E> when you are in the SCAN/CLEAN FILES or DRIVEs submenu to manually enter an ID code. C. The SCAN/CLEAN FILES submenu normally uses the @filename response file for super fast operation. If your floppy is found to be write protected this mechanism is suspended. You are not given choice of individual files. Instead, you must choose from whole subdirectories only. ***** VIRUS FACT SHEETS: This version of The Virus Terminus, v4.0B, introduces a new main menu selection : 6. VIRUS FACT SHEETS. Information on indiviual virus known characteristics, areas of damage, which McAfee Associates dis- infector utility to use, etc. is available. Users must first select a from a group of CLEAN-up ID codes. If SCAN reported an infection and you see the ID code displayed by SCAN, use that one. You may also choose from any of the codes displayed for selection. Most ID codes are similar or related to the actual virus name. ***** DIRECTORY PATH SELECT: The PICK LIST is designed to let you make quick selections. You may choose from one of the PICKS on your list or choose NEW ENTRY. A list of valid logical drives is displayed if you select NEW ENTRY. Select which drive you want to search for a new path on. The next screen displays all found paths/directories on the drive you selected. Only those 35 characters or less with either normal or hidden attributes are available for selection. The 35 character limitation is imposed to help reduce possible command line overflow errors during SCAN, CLEAN, VALIDATE, etc. operations. The drive path scan will develop a list with a maximum of 512 paths/dirs starting with the ROOT directories first and working in until the 512 limit is reached. This is usually good enough for most hard drives. However, some users maintain massive file/dir inventories. Therefore, a manual entry is provided for paths/dirs not found on the list. These key strokes will produce the following results: <PGDN> <PGUP> = Display next or previous window page. <ENTER> = Selects highlighted path. CTRL-E = Enter a path/dir not on the list. CTRL-N = Select new drive and path. CTRL-P = Hardcopy print of the path list with stats. CTRL-T = Creates an ASCII text file of the path list in the ROOT directory of the drive that was scanned. <ESC> = Quit and return to submenu. F1,F10 = HELP - PAGE 17 - ***** REPORT FUNCTIONS: Version 4.0B offers several options. The REPORT FUNCTIONS submenu allows viewing, merging, printing and deleting of report files. DOS BATCH file execution is also available. The MERGE function first displays a list of all report files found in the TERMINUS directory. You may choose from any or all of them. Then MERGE will create a master file which combines ALL chosen report files together. The originals are not deleted. To delete the original report files press F6-DELETE and then choose which ones you wish to delete. Subsequent calls to MERGE will append newly chosen files. User created custom DOS batch files may be launched by pressing sub-menu select #3. This version of The VIRUS TERMINUS allows the user to launch DOS batch files from ANY logical drive and/or subdirectory. ***** MAKELIST v1.2 UTILITY: This utility can be run from the main menu by pressing #5. The purpose of this menu selection is to create a VCLEAN.LST file that can be used to select virus clean ID codes for CLEAN.EXE . The utility reads the McAfee VIRLIST.TXT file to find the needed data. This program feature will help to insure that THE VIRUS TERMINUS does not become obsolete. Each time you receive an update from McAfee Associates run the MAKE VCLEAN UTILITY by pressing #5 while you are in the main menu. ***** OPERATION RESTRICTIONS: DO NOT use the Virus Terminus in any environment or on any machine where another virus disinfector utility is or has been run. This includes but is not limited to TSR virus utilities. No claim is made herein or otherwise as to compatibility with other author/program virus disinfector & detector utilities. The Virus Terminus was designed to run in a stand-alone PC environment. This does not include use in LAN environments, etc. Users should make every effort to use only the most recent versions of SCAN or CLEAN. Version 4.0B of The Virus Terminus was tested with SCAN/CLEAN v85 & v86. Future versions may or may not work depending on the addition or deletion of options and other refinements to SCAN or CLEAN. Call for assistance when in doubt. - PAGE 18 - Registration gives license and right to use The Virus Terminus on a single machine, a copy of most recent version, updates as described in VT40B.DOC user help and technical assistance for The Virus Terminus, (VTV4.0B) NAME : ________________________ CHOOSE ONE DISK MEDIA TYPE STREET : ________________________ 5.25" ____ 3.5" ____ CITY : ________________________ STATE/PROV.: ________________________ OWN/USE A MODEM ? Y__ N__ ZIP CODE : ________________________ COUNTRY : ________________________ TERMINUS OBTAINED FROM? _______________________ TYPE OF USE ? _______________________ BUSINESS___ PERSONAL___ | REGISTRATION / LICENSE $ 20.00 ONLY U.S. FUNDS ACCEPTED! | NJ RESIDENTS ADD SALES TAX $ | 7% = $1.40 ------- MAKE YOUR REMITTANCE TO: | $ | SHIPPING AND HANDLING $ 4.00 S.T.CALISE | OVERSEAS SHIPMENT ADD $2.00 673 HERBERTSVILLE ROAD | ------- BRICK, NJ 08724 USA | TOTAL = $ UPGRADES: REGISTERED users of V4.0B are eligible for upgrades to subsequent releases. Please send $6.00 in U.S. funds to the author at the above address. Don't forget to specify disk media type and your current address. Instant update/ upgrade is also available to REGISTERED users. Contact S.T.Calise at the above mailing address for more information. -------------------------------------------------------------------------- SCAN, CLEAN, VALIDATE, VIRLIST Copyright (c) 1989-1992 by McAfee Associates. PCTOOLS is a registered trade mark of CENTRAL POINT SOFTWARE INC. NORTON COMMANDER is a registered trademark of PETER NORTON COMP., XTREE is a registered trademark of XTREE COMPANY IBM is a registered trademark of International Business Machines COMMAND.COM is copyright by Microsoft Corporation PKLITE(tm) is a trademark of PKWARE, Inc. LZEXE is copyright by Fabrice Bellard *****