A L E R T !

This software and documentation are protected under
the U.S. copyright law, Title 17, USC. Unauthorized
reproduction by any means, sales, bundling, or any
other unauthorized distribution other than as stated
herein are in violation of the copyright law. Persons
infringing on the author's rights may be prosecuted!

The author makes no warranties, either expressed or
implied, with respect to this software or accompanying
documentation. Under no circumstances shall the author
be liable for any incidental or consequential damages
to other software, hardware, loss of data, or loss of
business opportunity resulting from any defect or misuse
of this software or documentation. The total responsi-
bility for its use and performance rests solely with the
user. This entire package is provided "AS IS."

This text file is not intended to serve as the full
ALERT! manual. Instead, this file is intended to
provide a quick introductory to using ALERT! Upon
registering, users receive complete documentation which
explains the theory of operation and many different
protection strategies which can be followed using ALERT!


GENERAL THEORY

ALERT! works by recording the "state" of specified files
in a "list file." Each time ALERT! is asked to check a
file or group of files, it compares the current state
with that recorded in the list. Should a discrepancy be
found, the user is notified so appropriate action may be
taken.

Each "list file" can keep checks on up to 200+ files
(depending on memory available). There is no limit to
the number of list files the user may wish to build.
You may also set up list files which check other list
files! There is no limit to this type of nesting.

By protecting system files (e.g., COMMAND.COM,
AUTOEXEC.BAT, CONFIG.SYS, etc), the user can be secure
that any changes to them will be spotted on the very
next ALERT! check. Therefore, checking should be a
standard part of the power-on sequence. For example,
place a line such as the following in your AUTOEXEC.BAT
file;

ALERT_ME RWR4089

This calls the command-line version of ALERT! to check
the list file RWR4089. Of course, in order to tax a
virus' capability to detect the presence of ALERT!, you
may rename either or both of the executable programs to
whatever you please. Finally, you may include any number
of "dummy" command line parameter switches; e.g., the
above example could become:

EDIT /r /l RWR4089 /b /check

This assumes ALERT_ME.EXE had been renamed to EDIT.EXE.
Note that the parameter switches ( /r, /l, /b, /check )
are ignored by ALERT!. The only valid switch is /M
which forces ALERT! to come up in monochrome mode, even
if it did not automatically detect mono. Use of the
dummy switches simply provides additional masking of
ALERT! from an intelligent virus.


WHY ANOTHER VIRUS CHECKER?

I created ALERT! primarily for 2 reasons. First, I
wanted to be sure that the virus checker was not itself
infected. Second, I wanted something that others could
use with little difficulty but still provide varying
levels of protection.

While there are a number of good checkers out there,
they all seem to suffer from either being too complex for
novice users, being memory resident (requiring some of
the precious 640k), or simply of questionable
source/nature.

By controlling the distribution of ALERT! directly, I
can ensure users will receive only a NONINFECTED
version. By presenting ALERT! as shareware, I can offer
protection to virtually everyone. There is no need to
spend $150 to $300 for the commercial programs when all
you need is reliable protection. While some of these
may offer an ability to remove the virus when detected,
I wouldn't take such a chance. I'll bet you wouldn't
either.


FILES INCLUDED

The following files should be included in the archive:

ALERT.EXE Integrated version
ALERT_ME.EXE Command line version
ALERT.TXT This text file


USAGE

1. Decide upon a name for your list file. I recommend
the following: Use your initials followed by the last
four digits of your social security number; e.g.,
C:\RWR4089. This prevents the list file from being
easily spotted by an intelligent virus while making it
easy to remember.

2. Copy the ALERT! programs to your hard drive,
somewhere on the path. Rename them if you desire.

3. Edit your AUTOEXEC.BAT file to include the call for
the command line version of ALERT!, ALERT_ME (or
whatever you have renamed it to) and the name of the
file list you decided upon in step 1. (The file list
has not yet been created.) Remember to include the drive
and path if it will not be stored in the root directory
as well as any "dummy" switches you wish to use.

4. Call the interactive version of ALERT!, ALERT (or
whatever new name you gave it in step 2).

5. Begin "ADDING" files to be protected. Please note
the screen instructions and messages for use of help,
the directory, and viewing the list. After a file is
added you will be asked whether the file should be
automatically checked. You definitely should mark all
system files for auto-check. These are the files which
will be checked by the command line version of ALERT! in
your AUTOEXEC.BAT file.

6. Continue adding all desired files. Suggest, as a
minimum the following be included for auto-check:

IBMBIO.COM
IBMDOS.COM
COMMAND.COM
AUTOEXEC.BAT
CONFIG.SYS

7. Save the file list as the name you decided upon in
step 1.

8. Exit ALERT!.

9. Reboot and watch as each file is checked.

10. That's it!


WHAT TO DO WHEN YOU GET AN ERROR

1. Ask yourself the following question: Did YOU change
the file in any way since it was added to the list?
This is why you placed the ALERT! command line in your
AUTOEXEC.BAT before creating the list file. If you are
the reason for the change, not to fear. Simply call the
interactive version of ALERT!, read in the list file,
remove the file from the list, add it back, then resave
the list. That will cause ALERT! to recompute the
internal checks. However, be sure you know the cause
for the change before doing this. Otherwise, you might
be insolating a virus from further detection.

2. If an error occurs which you are not responsible for
then there is a good probability your file has become
infected. DO NOT TURN OFF YOUR COMPUTER YET! You still
need to check the remaining files. Call up the
interactive version of ALERT!, read in the list file,
and check ALL files on the list. Make a note of any
which generate an error. Save the list file and exit
ALERT!.

I'm sorry to say this, but the only SAFE way to rid
yourself of the infection is to remove (delete) the
infected files and restore them from your archive.
I am assuming you have your original program disks
in a safe place, only using them to create working
copies. Hopefully, you also made a copy of your
ALERT! file list when it was still clean. This will
add a measure of reassurance when you recheck your
files after restoring them.

If you are truly paranoid, as I would be if I found
such an infection, you may want to completely
reformat your hard disk before restoring from your
archives. Before you take such a drastic measure
though, you should copy any DATA files you have not
previously saved to a clean, non-system floppy
disk. Since data files do not execute, they are
safe from disastrous infection. By copying to a
non-system disk, you will not transfer any
infection with them. Once you have restored your
hard drive to a clean state, again protect your
files with ALERT! following the USAGE steps above.
Finally, copy the data files back. Now reboot and
watch ALERT! check your files. If no errors are
detected, you are again safe.


REGISTRATION INFORMATION

Why register?

1. When you register you receive a guaranteed
uninfected copy of ALERT!. Although the odds are that
the version you got from your friend or the bulletin
board is not infected, the only way to be sure is to
know the source. Registered users receive the latest
version directly from the author.

2. You receive additional documentation. While this
text file provides enough information to fully utilize
ALERT!, it does not go into any detail on the various
virus' known, the multitude of protection strategies
which can be employed using ALERT!, any discussion of
levels of risks, how to ensure you start with a clean
system, or suggestions on backup procedures. The
complete ALERT! documentation covers these as well as
other topics.

3. This is NOT a free program. It is provided free for
evaluation only. Once you have decided it meets your
needs, you are required to pay for it. It IS CHEAP
protection from otherwise disastrous consequences.
License Fees are as follows:

Individual user ......... $ 20.00
Use on all computers on which you are the
principle user.
Corporate user .......... $150.00
Use on all corporate computers (site license).
Government user ......... FREE
Use in all government agencies, departments,
offices. Contact your MIS department for
distribution details. The author does not
provide individual distribution within the
government. You may elect either of the other
licenses above, however, if you cannot get a
copy through government channels.

Send check or money order for the proper license fee to:

ROBERT W. REED
425 Fairgreen Ave
Casselberry, Florida 32707
(407) 695-6837
Turbo Source Search BBS ... (617) 545-9131

(c) 1988, Robert W. Reed, all rights reserved.