Category : System Diagnostics for your computer
Archive   : NAVSCAN.ZIP
Filename : NAVSCAN.HLP

Copyright 1992 by Symantec CorporationNAVSCANc.F*Â
‹Á&
*gg-ÿ 3Norton AntiVirus Help Index““Î^bSUMMARY^b$  
q Virus Clinic Summary'‚ Virus Intercept Summary!



„^bREPAIR ACTIONS^b/¹  ¹< Hard Disk Partition Table Virus+·H&$ Hard Disk Boot Sector Virus-l
l
å* Floppy Disk Boot Sector Virus,vvQ, Removing a Virus from Memory8ä
ä
Ç. Repairing versus Deleting Infected FilesiÊ«0&^bKEYBOARD^b‡‡u6^bCOMMANDS^bˆˆ$7 ^bSCAN MENU^b
qq
Ä7
™
™

=:


Þ;
T5
î=+
+
+
+D$¦¦VE ^bDEFINITIONS MENU^b
±¬ F
 
ÈH#
%
%
ÙM
**
þN ¸¸0Q ^bTOOLS MENU^b
7
7
R 
"
"
7S 
Ÿ
Ÿ
YT
ççøU ^bOPTIONS MENU^b
ùùW
ÃÈZ&
RRÈ^
!!c
Š Š ;fJ'Åo ^bHELP MENU^b
11êq
ööv
³³w  Äw ^bPROCEDURES^b2
÷

Ô| Adding a Virus Definition Manually:Ê
Ê

Ó~ Assigning the Virus Intercept Log Filename1I
I

¥€
Auto-inoculating Executable Files-…
…

ö Changing an Existing Password5̏
ƒƒ Configuring the Virus Intercept Alert&ûù
† Creating a Rescue Disk+`
`

‡
Deleting a Virus Definition+ø
ø

ƒˆ Deleting All Infected Files)ä
ä

ƒŠ Deleting an Infected File9¦
˜

oΠEnabling Command Buttons in Scan Results ;e
a

Ž Enabling Command Buttons in Virus Intercept/üü
x Enabling Network Drive Scanning:


| Increasing Virus Clinic's Protection Level5
w

œ‘ Loading Virus Definitions from a File6O
O

“ Printing the List of Virus Definitions%r
r

r”
Printing Scan Results,aa
ì• Repairing All Infected Files*RR
U˜ Repairing an Infected File K
K

¯š Rescanning Files,
‰

œ Restoring from a Rescue Disk-G;
“ Saving Scan Results to a File$§
§

֟
Scanning a Directoryþ
ø

…¡ Scanning a File#



…£
Scanning All Drives&I
I

’¤
Scanning Floppy Drives$W
W

ã¥
Scanning Hard Drives'Œ
Œ

B§ Scanning Network Drives7


Ö¨ Setting the Password for the First Time%ºº
ô© Uninoculating a Drive5


¶ª
Viewing the List of Virus Definitions5@øÙ«jUpdating the List of Virus Definitions-9ñ½(^bAbout The Norton AntiVirus^b  
 )





"#'+(")*&+,-./)0,1 2+3 &4!'5"6#7$8%9&:';(<)=*>+?,@-A.(B/C0'E1&D3F^BKeyboard^B
^h Navigating in NAV^h
^BSummary^B
^h Virus Clinic Summary^h
^h Virus Intercept Summary^h
^BRepair Actions^B
^h Hard Disk Partition Table Virus^h
^h Hard Disk Boot Sector Virus^h
^h Floppy Disk Boot Sector Virus^h
^h Removing a Virus from Memory^h
^h Repairing Versus Deleting Infected Files^h
^BCommands^B
^h Scan Menu^h
^h Definitions Menu^h
^h Tools Menu^h
^h Options Menu^h
^h Help Menu^h
^BProcedures^B
^h Adding a Virus Definition Manually^h
^h Assigning the Virus Intercept Log Filename^h
^h Auto-inoculating Executable Files^h
^h Changing an Existing Password^h
^h Configuring the Virus Intercept Alert^h
^h Creating a Rescue Disk^h
^h Deleting a Virus Definition^h
^h Deleting All Infected Files^h
^h Deleting an Infected File^h
^h Enabling Command Buttons in Scan Results^h
^h Enabling Command Buttons in Virus Intercept^h
^h Enabling Network Drive Scanning^h
^h Increasing Virus Clinic's Protection Level^h
^h Loading Virus Definitions from a File^h
^h Printing the List of Virus Definitions^h
^h Printing Scan Results^h
^h Repairing All Infected Files^h
^h Repairing an Infected File^h
^h Rescanning Files^h
^h Restoring from a Rescue Disk^h
^h Saving Scan Results to a File^h
^h Scanning a Directory^h
^h Scanning a File^h
^h Scanning All Drives^h
^h Scanning Floppy Drives^h
^h Scanning Hard Drives^h
^h Scanning Network Drives^h
^h Setting the Password for the First Time^h
^h Uninoculating a Drive^h
^h Updating the List of Virus Definitions^h
^h Viewing the List of Virus Definitions^h
^BAbout^B
^h Norton AntiVirus^h
The summaries provide a brief description of the capabilities
of The Norton AntiVirus.

^hVirus Clinic Summary^h
^hVirus Intercept Summary^h
&EVirus Clinic is the part of The Norton AntiVirus that scans
files for viruses. If a virus is found, Virus Clinic then gives
you the option of repairing the file (if the file is repairable)
or deleting the file. You may scan complete disks, specific
directories, or individual files.

A virus is known to The Norton AntiVirus by having an entry in
the virus definition file that is maintained by Virus Clinic.
Virus definitions are provided by Symantec.

See ^hUpdating the List of Virus Definitions^h for information
on how to acquire the latest virus definitions.

To check for unknown viruses, The Norton AntiVirus first must
inoculate a file. Then, whenever that file is accessed, the
file is checked against the stored inoculation data, and if the
file has changed, you are alerted to the fact that the file has
changed and that there is a possibility of an unknown virus.

Virus Clinic also provides commands to configure both Virus
Clinic and Virus Intercept and to manage the list of virus
definitions in Virus Clinic.
Virus Intercept is the component of The Norton AntiVirus that
constantly monitors your system for viruses. Virus Intercept
is loaded into memory when you boot your computer. Whenever
you copy a file, copy a disk, or start an application, Virus
Intercept first checks the file(s) for any virus defined in
the virus definition list.

If an infected file is found, an alert is sounded and the
action is stopped. At this point, you would start up Virus
Clinic and scan for the infected file. Once Virus Clinic has
identified the infected file, you can then repair (or delete)
the file. See Repairing versus Deleting Infected Files for
more information.

Another feature of Virus Intercept is the ability to
"inoculate" application files. With this feature enabled, the
first time you run an application program, Virus Intercept
calculates inoculation data for that application and stores it
in the inoculation file. Whenever you run that application
again, Virus Intercept checks the inoculation data to verify
that the application's code has not changed. If the code has
changed, there is a possibility of an unknown virus. In this
case, Virus Intercept alerts you to the change and gives you
the option to reinoculate the file Use this option only if
the code changes are valid.
 (
Repair Actions provide procedures for recovering from specific
virus types.

^hHard Disk Partition Table Virus^h
^hHard Disk Boot Sector Virus^h
^hFloppy Disk Boot Sector Virus^h
^hRemoving a Virus from Memory^h
^hRepairing Versus Deleting Infected Files^h
A virus of this type is repairable by The Norton AntiVirus only
if the original partition table information was copied by the
virus to a known location. For all other cases, the partition
table must be repaired manually. A partition table virus can be
removed manually in one of three ways:

1. With a Rescue Disk
^bNote:^b a Rescue Disk must have been created previously.
a. Turn off the computer.
b. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be
ÿ EXACTLY the same version as on the hard disk.

c. Insert a write protected copy of the program disk for the
ÿ The Norton AntiVirus.
d. Type RESCUE and press Enter.
e. Choose RESTORE RESCUE DISKETTE from the list that appears.
f. Insert your rescue disk in the appropriate floppy drive.
ÿ Follow the prompts and instructions to restore the
ÿ partition table from your rescue disk.

2. With Norton Utilities (4.5 Advanced or later),
^bCAUTION:^b This procedure requires a high degree of familiarity
with the Norton Utilities. Call the Technical Support Department
for help if there is any doubt about attempting this procedure.
Incorrect operation may result in loss of data!
a. Turn off the computer.
b. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be
ÿ EXACTLY the same version as on the hard disk.

c. Using the disk editor, check through track 0 to see if a
ÿ valid partition table was copied to another location. If
ÿ so, copy that sector back to Cylinder 0, Side 0, Sector 1.
ÿ If no copy of the original partition table is found, fill
ÿ the entire partition table sector with zeros, escape to
ÿ DOS, and run "NDD C: /REBUILD" to recreate the Master Boot
ÿ Program and partition table.

3. Without Norton Utilities,
a. Turn off the computer.
b. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be
ÿ EXACTLY the same version as on the hard disk.

c. Backup all data and then destructively low-level format
ÿ the disk.

ÿ ^bNote:^b in some cases this may be done only by the
ÿ manufacturer.

d. Partition the drive using the DOS FDISK command.
e. Format the drive using the DOS FORMAT command.
f. Restore the backed up data.
To repair a hard disk boot sector virus:

1. With a Rescue Disk

ÿ ^bNote:^b a Rescue Disk must have been created previously.

a. Turn off the computer.
b. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be
ÿ EXACTLY the same version as on the hard disk.

c. Insert a write protected copy of the program disk for the
ÿ The Norton AntiVirus.
d. Type RESCUE and press Enter.
e. Choose RESTORE RESCUE DISKETTE from the list that appears.
f. Insert your rescue disk in the appropriate floppy drive.
ÿ Follow the prompts and instructions to restore the
ÿ boot sector information from your rescue disk.

2. Without a Rescue Disk.
a. Turn off the computer.
b. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be
ÿ EXACTLY the same version as on the hard disk.

c. Use the DOS SYS command to rebuild the boot sector. At the
ÿ A> prompt, type:

ÿ C:[path]SYS C:

ÿ where [path] is the directory path to where the DOS files
ÿ are stored on the hard disk.
To repair a floppy disk boot sector virus:

1. Ensure that your computer is uninfected.
2. Copy the files on the infected floppy disk to another disk
ÿ or to the hard drive.

ÿ ^bImportant:^b Do not use the DOS DISKCOPY command.

3. Reformat the floppy disk. Use the /s option if the disk is
ÿ to be bootable.
4. Copy the files back onto the reformatted disk.
To remove a virus from memory:

1. Turn off the computer.
2. Insert an uninfected, write protected DOS floppy disk in
ÿ drive A and turn on the computer.

ÿ ^bImportant:^b the DOS version on the floppy must be exactly
ÿ the same version as on the hard disk.

3. Insert a write protected copy of the program disk for
ÿ The Norton AntiVirus
4. Scan the hard disk using The Norton AntiVirus on the floppy
ÿ drive to find any files that may have been infected by the
ÿ virus. If any infected files are found, either repair or
ÿ delete them. Once you're sure your system is clean,
ÿ reboot the system in the usual way.
An infected file may be repaired only if a virus has not
permanently overwritten any information in that file. If a file
is repairable, in most cases it can be repaired without damage
to the original contents of the file. If a repaired file does
not operate properly, reload the file from a known good master
file.

Note: any "repaired" file should be rescanned prior to use.

If a file cannot be repaired, it should be deleted and a new
copy loaded from a known good master file.
Use the following keys in The Norton AntiVirus.

^bKey(s)ÿ Function^b

Hotkeyÿ Select program items.
Alt-Hotkeyÿ Open a pull down menu.
Tabÿ Move the cursor to the next item within a
ÿ dialog box.
Shift-Tabÿ Move the cursor to the previous item within
ÿ a dialog box.
Arrow keysÿ Move the cursor to the closest text box, check
ÿ box, or button in the direction of the arrow.
ÿ Within a text box, use the RightArrow and
ÿ LeftArrow keys to move the cursor one character
ÿ to the left or right. Use the UpArrow and
ÿ DownArrow keys to move up and down within a
ÿ list box. When a pull-down menu is open, use
ÿ RightArrow and LeftArrow to scroll horizontally
ÿ through the menus. Use UpArrow and DownArrow
ÿ to move among options within an open menu.
Enterÿ Select a highlighted option from a pull-down
ÿ menu or activate a highlighted button or the
ÿ default button.
Spacebarÿ Select and deselect check boxes and select
ÿ buttons. First highlight an item, then press
ÿ Spacebar to select or deselect the highlighted
ÿ item.
Homeÿ
Move the cursor to the beginning of a list or
ÿ text box.
Endÿ Move the cursor to the end of a list or
ÿ text box.
PgUpÿ
Move the cursor to the top of a list in
ÿ screen-size increments.
PgDnÿ
Move the cursor to the bottom of a list in
ÿ screen-size increments. Open the combination
ÿ box currently highlighted.
Escÿ Close the current dialog box or cancel an
ÿ operation and return to the previous dialog box.

"The following menu commands are available in the
Norton AntiVirus:

^hScan^h
^hDefinitions^h
^hTools^h
^hOptions^h
^hHelp^h



Use the Scan Menu to start a scan of your files. The following
commands are available in this menu:

^hDrive^h
^hDirectory^h
^hFile^h
 ^bDrive^b

Use this command to start a scan on the drive(s) you select.
All files in all directories on the selected drive
are scanned. The drives available for scanning are shown in the
list box. Select the drive(s) by highlighting
the drive letter(s) in the list box or use the Drive
check boxes to select

All Floppy and removable disk drives.
All Local drives (including RAM disks and SUBST drive names)
All Network drives

^bNote:^b the All Network Drives check box is enabled only if
network drives exist and Allow Scanning of Network Drives
is selected in the Options menu.ÿ
See Also: ^hScan Results^h

 ^bDirectory^b

Use this command to start a scan on the directory you select.
Use the Drive drop down list box to select the appropriate
drive, then select the desired directory from the directory
tree. You can scan the files in the selected directory only or
scan all the files in all subdirectories below the selected
directory by checking the Include Subdirectories check box.

See Also: ^hScan Results^h
 ^bFile^b

Use this command to start a scan on the file you select.
Use the Drive drop down list box to select the appropriate
drive, then select the desired directory from the Dirs list
box. The Files list box displays the files in the selected
directory. You can use wildcard specifiers in the Filename
text box to selectively display filenames in the Files list
box. Select a file by highlighting the filename in the Files
list box or by typing the file's name in the Filename text
box.ÿ
See Also: ^hScan Results^h
+^bScan Results^b

Shows a scan's progress while the scan is in operation.
The progress bar displays the percent completed
during a scan. Any messages generated during a scan are
displayed in the list box.

When a scan finishes (or you abort the scan by using
the Cancel button), information about any infected file
is displayed in the list box. This information includes
the infected file's name, its full pathname, and the virus
type. A scan summary is displayed for every scan.
The summary lists the total files scanned and the total
files infected.

Once a scan is completed, you have several options depending
upon whether or not there are any infected files.
If there are no infected files, you can select one of
the following command buttons:

Scanÿ Rescans the selected drives, directory or file that
ÿ were scanned originally.
Printÿ Prints the contents of the current Scan Results list
ÿ box or saves them to a file.

If there are infected files, you have two additional options:

Repair Repairs the selected file (if the file is repairable).
ÿ A Repair All option is available in the
ÿ Repair Files dialog box.
Delete Deletes the selected file. A Delete All option
ÿ is available in the Delete Files dialog box.

If you have Detect Unknown Viruses enabled, and a change is
detected in an inoculated file, you have another option:

Reinoc Reinoculates the selected file. A Reinoc All option
ÿ is available in the Reinoc dialog box.

^bNote:^b The Repair,Delete, and Reinoc options must be enabled
in the Options menu.

Go to: ^hPrint Scan Results^h
^bPrint Scan Results^b

Use this command to print the Scan Results. You may print
either to the selected printer or to a file. If you print
to a file, the Browse command button is enabled allowing you
to select an existing file. To create a new file, type the
desired filename in the text box.


Use this menu to manage the virus definitions used by
The Norton AntiVirus. The following commands are available
in this menu:

^hModify List^h
^hLoad from File^h
  ^bModify List^b

Use this command to

view the list of existing virus definitions
manually add a new definition
delete a definition
print a hard copy of the definition list

The list of installed virus definitions is displayed in the
Virus list box. The definitions are arranged in
alphabetical order.

To delete a definition from the list, highlight the name of the
desired definition in the list and select the Delete command
button. Although the definition name disappears from the list
when you execute the command, the deletion does not take effect
until after you reboot your computer.

Go to: ^hAdd a Virus Definition^h
ÿ ^hPrint the Virus Definition List^h
&E^bAdd^b

Use this command to manually add a new virus definition
to the list of installed definitions.

New virus definitions are available by calling the
Virus Newsline service of Symantec/Peter Norton Group.
See ^hUpdating the List of Virus Definitions^h for more
information.

^bImportant:^b The new virus definition must be typed exactly as
given on the Virus Newsline.

Enter the appropriate information into the four fields:

the definition's name (up to 25 characters)
the definition's length in bytes (up to three characters)
the definition's checksum (up to four characters)
the actual definition (in hexadecimal)

The definition is entered as a set of two characters separated
by a space. For example:

OK 0G 0L 0H 0G 8Q 0K 0J DK KE Z0 R2 ÿ.

When a line is filled, click on the next line to move the
insertion point, then continue typing the definition. Virus
Clinic checks for valid characters and format. As you complete
each line of the definition, Virus Clinic checks to see that
your entries are correct. If an error is detected, a beep sounds
and Virus Clinic moves the cursor to the error.

The OK command button is dimmed until all errors detected by
Virus Clinic are corrected.The new definition does not take
effect until you reboot your computer.
^bPrint^b

Use this command to print the Virus Definition list.
You may print either to the selected printer or to a file
If you print to a file, the Browse command button is
enabled allowing you to select an existing file To create a
new file, type the desired filename in the text box.
&E^bLoad from File^b

Use this command to add the most current virus definitions
file into The Norton AntiVirus. This file is prepared by
Symantec/Peter Norton Group and is updated whenever a virus
is discovered. See ^hUpdating the List of Virus Definitions^h
for information on how to acquire the file.

Use the Drive drop down list box to select the appropriate
drive, then select the desired directory from the Dirs list box.
The Files list box displays the files in the selected directory.
Nav.def is the default filename for the definitions file



This menu provides utility functions for The Norton AntiVirus.
The following commands are available in this menu:

^hCreate Rescue Disk^h
^hRestore From Rescue Disk^h
^hUninoculate^h
^bCreate Rescue Disk^b

Use this command to create a Rescue Disk.

A Rescue Disk keeps a copy of your hard disk's
partition table, boot sector, and CMOS system setup
information. If you get a virus that infects any of
these areas, you use the Rescue Disk to restore your
system to its original condition.
^bRestore From Rescue Disk^b

Use this command to restore a hard disk's partition table,
boot sector, or CMOS system setup information.

^bNote:^b You must have previously created a Rescue Disk.

Follow the prompts to select the appropriate drive and the
type of information to restore.
^bUninoculate^b

Use this command to remove the inoculation file on the selected
disk drive(s).

The inoculation file stores the inoculation data for all the
inoculated files on a drive. You can delete the inoculation file
from a specific drive by highlighting the drive letter in the
list box, or you can delete the inoculation files from all types
of drives by checking the appropriate drive type check box.





!Use this menu to configure optional settings for both
Virus Clinic and Virus Intercept. The following commands
are available in this menu:

^hClinic^h
^hIntercept^h
^hGlobal^h
^hSet/Change Password^h
^hVideo and Mouse Settings^h
^bClinic^b

Use this command to set configuration options for Virus Clinic.

Options in the commands group box select whether or not the
following functions are active in the Scan Results Dialog box:

Repair
Delete
Reinoc
Cancel
Repair All
Delete All
Reinoc All

Check the appropriate check box to activate the command.
If a command is not allowed (the check box is not checked),
the corresponding command button is dimmed in the
Scan Results dialog box.

^bAllow Scanning of Network Drives^b selects whether or not
to allow scanning of networked drives. If network drive scanning
is not allowed, the All Network Drives check box is dimmed
in the Scan Drives dialog box and no network drive letters
are displayed in the Drives list box.
^bIntercept^b

Use this command to set configuration options for Virus
Intercept.

Options in the Alert Options group box select the activities
that take place when a Virus Intercept occurs.

Beepÿ
Sounds the system bell when an intercept
ÿ occurs.

Popup Alert Box Displays an alert box on the screen when an
ÿ intercept occurs.

Seconds to display If Alert Box is enabled, specifies how
ÿ long (in seconds) the alert box is
ÿ displayed on the screen.

Log Fileÿ Keeps a record of all Virus Intercept
ÿ activity. This record is stored as an ASCII
ÿ text file. Enter the desired filename in the
ÿ text box. If the file does not exist, The
ÿ Norton AntiVirus creates it the first time
ÿ there is activity to log. The default file
ÿ specification is C:\temp\nav.log

Options in the commands group box select whether or not the
following command buttons are active in the Virus Intercept
Alert box:

Proceedÿ Allows you to proceed after a virus intercept
ÿ has occurred. Otherwise, you must stop the
ÿ current file access.

Reinoculateÿ If a file's inoculation data has changed,
ÿ this option allows The Norton AntiVirus to
ÿ recalculate new inoculation data for
ÿ that file.
^bGlobal^b

Use this command to set configuration options for The Norton
AntiVirus.

^bDetect Unknown Viruses^b adds the ability to check for
potential viruses based upon a change to an inoculated file.

^bAuto-inoculate^b automatically creates inoculation data
the first time an uninoculated executable file is accessed.

^bNote:^b Files must be inoculated before they can be scanned
for unknown viruses. Scanning a drive with auto-inoculate
enabled automatically inoculates all executable files on that
drive.

^bScan Executables Only^b limits Virus Intercept to checking
and Virus Clinic to scanning only files with a extension that
identifies the file as executable. The current list of valid
extensions is .COM, .EXE, .VOR, .OVL, .DRV, .BIN, .SYS.

The ^bNetwork Inoculation Directory^b is the directory where to
store the inoculation file on a network drive. The inoculation
file for local drives is stored in the root directory of each
drive.

^bVirus Alert Custom Message^b is the message displayed in the
alert box (or on the command line) when Virus Intercept detects
an infected file.
^bSet/Change Password^b

Use this command to set a password initially and then
to change an existing password.

If no password has been entered, the command reads
^bSet Password^b. Type the desired password in the New Password
text box and click OK. Type the new password a second time in
the Confirm New Password text box and click OK.
The new password is set. If you mistype the confirming password,
an alert box pops up saying incorrect password.
You must type the correct confirming password to set a new
password.

If a password exists, the command reads ^bChange Password^b.
Type the existing password in the Old Password text box and
click OK. If this is the currently valid password,
the New Password text box is active and you can
proceed to type your new password as described above.
^bVideo and Mouse Settings^b

Use this command to configure your video and mouse settings.

^bScreen Options^b

Screen Colors
Select from a predefined list of color sets or choose Custom
Colors and define your own. Select Customize Colors command
button to display the Customize Color dialog box.

Display Lines
Select the appropriate number of display lines for your monitor.

Display Mode
Selects the display of graphical elements on EGA or VGA monitors.
Selecting graphical display replaces standard characters with a
graphical representation. Controls refers to radio buttons and
check boxes. Mouse refers to the cursor pointer. Dialogs refer to
dialog boxes.

Zooming Boxes
When checked, dialog boxes open from the center of the screen.
When unchecked, dialog boxes appear fully formed.

Solid Background
When checked, the screen background is solid.
When unchecked, the screen background is speckled.

Button Arrows
When checked, the active command button has arrows to help
indicate the active button.
When unchecked, no arrows are displayed.

Block Cursor
When checked, the cursor changes from underline to a block.

^bMouse Options^b

Double Click
Selects the rate at which a double click is recognized.
Slow means that a longer interval can occur between button
pushes and still be recognized as a double click. Fast means
that a shorter interval can occur between pushes.

Sensitivity
Selects how a physical movement of the mouse is translated to
movement of the mouse pointer on the screen. High sensitivity
means that small physical movement of the mouse translates to
long movement of the pointer. Low sensitivity means that longer
movement of the mouse is required to move the pointer across the
screen.

Acceleration
Selects the rate at which the mouse pointer accelerates as it
moves longer distances across the screen.

Graphical Mouse
When checked, enables the mouse to operate more smoothly by
making use of extended characters.

Left-handed Mouse
When checked, reverses the select button on the mouse so that
the right button is the select button instead of the left
button.

Fast Mouse Reset
When checked, cuts down the delay experienced on a full mouse
reset, thus starting the application faster. Leave this option
checked unless you have trouble with the mouse.

Enter Moves Focus
When checked, the Enter key acts like the Tab key in a dialog
box. When unchecked, the Enter key acts in its usual manner.


 

&

#Use this menu to access The Norton AntiVirus help system.
The following commands are available in this menu:

Indexÿ The Norton AntiVirus help index.
^hKeyboard^hÿ Quick reference to keystrokes for this program.
^hCommands^hÿ Menu commands. You can also get help on a particular
ÿ
menu item by selecting it and then pressing F1
^hProcedures^hÿ Common procedures used in The Norton AntiVirus.
^hUsing Help^hÿ How to use the help system.
Aboutÿ Product name, copyright, credits, and version of
ÿ
this program.
The Norton AntiVirus on-line help is a context-sensitive,
hyperlinked help system. To access the help system, choose
one of the commands in the help menu, or press F1. Pressing
F1 displays help about the currently active dialog box or
highlighted menu command.

The help system consists of the main index of topics, the
topics, and the hyperlinks between topics. From the index,
select any of the topics listed and select ^bHelp^b. The help
system displays the topic. Use the ^bIndex^b button to return
to the index.

Hyperlinks are highlighted phrases in a topic that when
selected, transfer you directly to another topic without
having to step back through the index. Use the ^bGoto^b button
to follow a link. Use the ^bGo Back^b button to return to the
original topic. For example, each of the procedures has a
hyperlink to the appropriate command topic.

Selecting ^bGoto^b in the Scanning a File procedure transfers
you to the Scan menu File command topic. Selecting ^bGo Back^b
returns you to the procedure.

To exit the help system, select ^bCancel^b or press Esc.
^bFile Browser^b

Use the file browser to locate a file. Use the Drive drop down
list box to select the appropriate drive, then select the
desired directory from the Dirs list box.The Files list box
displays the files in the selected directory.

Use the directory browser to locate a directory.
Use the Drive drop down list box to select the appropriate
drive, then select the desired directory from the directory
tree.



"'
*(
!)
*
%+
,
-

.
/
(0

+1
2
*3
%4
&5
6
7
8
9
:
;
<
=
>
?
@
A
'B
C
%DThe Norton AntiVirus procedures:

^hAdding a Virus Definition Manually^h
^hAssigning the Virus Intercept Log Filename^h
^hAuto-inoculating Executable Files^h
^hChanging an Existing Password^h
^hConfiguring the Virus Intercept Alert^h
^hCreating a Rescue Disk^h
^hDeleting a Virus Definition^h
^hDeleting All Infected Files^h
^hDeleting an Infected File^h
^hEnabling Command Buttons in Scan Results^h
^hEnabling Command Buttons in Virus Intercept^h
^hEnabling Network Drive Scanning^h
^hIncreasing Virus Clinic's Protection Level^h
^hLoading Virus Definitions from a File^h
^hPrinting the List of Virus Definitions^h
^hPrinting Scan Results^h
^hRepairing All Infected Files^h
^hRepairing an Infected File^h
^hRescanning Files^h
^hRestoring from a Rescue Disk^h
^hSaving Scan Results to a File^h
^hScanning a Directory^h
^hScanning a File^h
^hScanning All Drives^h
^hScanning Floppy Drives^h
^hScanning Hard Drives^h
^hScanning Network Drives^h
^hSetting the Password for the First Time^h
^hUninoculating a Drive^h
^hViewing the List of Virus Definitions^h
 Allows you to add a virus definition to the list by typing each
part of the definition.

1. Choose Modify listÿ. from the Definitions menu.
2. Select the Add command button.
ÿ The Add Virus Definition dialog box is displayed.
3. Type in the definition's parameters in the appropriate text
ÿ box:
ÿ
ÿ Name
ÿ Length
ÿ Checksum
ÿ Definition.
ÿ
^bNote:^b Ensure that the definition is typed exactly as given
by the Symantec Virus Newsline.

4. Select OK.ÿ
See also: ^hAdd a Virus Definition^h
 Assigns the name of the file used to log Virus Intercept
alert messages.

1. Choose Interceptÿ. from the Options menu.
2. Check the Enable log to file check box.
3. Select the filename by:
ÿ selecting the Browse command button and highlighting an
ÿ existing filename,
ÿ or
ÿ typing the filename in the Filename text box. Use this option
ÿ to type a new filename.The default filename
ÿ is C:\temp\nav.log.
4. Select OK. ÿ
See also: ^hIntercept^h

Enables the computing of inoculation data whenever an
executable program is accessed for the first time.

1. Choose Globalÿ. from the Options menu.
2. Check the Auto-inoculate check box.

^bNote:^b Detect Unknown Viruses must be selected
for the Auto-inoculate check box to be enabled.

3. Select OK.ÿ
See also: ^hGlobal^h
  Changes an existing password to a new password.

1. Choose Change Passwordÿ. from the Options menu.
2. Type in the current password in the Old Password text box.
3. Select OK.
4. Type in the desired new password in the New Password
ÿ text box.
5. Select OK.
6. Type in the new password again in the Confirm New Password
ÿ text box.
7. Select OK.ÿ
See also: ^hSet/Change Password^h
 Configures the action of The Norton AntiVirus when an intercept
alert occurs.

1. Choose Interceptÿ. from the Options menu.
2. In the Alert Options group box, select the action to be taken
ÿ when an alert occurs by checking the appropriate check box.
ÿ There are two options:
ÿ
ÿ Beepÿ
sounds the system's bell when an
ÿ intercept occurs.
ÿ Popup Alert Box displays an alert box when an intercept
ÿ occurs.
ÿ
ÿ If Popup Alert Box is selected, there is an additional option:
ÿ
ÿ Seconds to Display Alert Box. Type the number of seconds
ÿ the alert box stays on the screen in the text box.

3. Select OK.ÿ
See also: ^hIntercept^h
Creates a Rescue Disk.

1. Choose Create Rescue Diskÿ. from the Tools Menu.
2. Insert a formatted floppy disk in the appropriate drive.ÿ
3. Select the appropriate drive letter in the dialog box.
4. Select OK.ÿ
See also: ^hCreate Rescue Disk^h

Deletes a virus definition from the stored list of
virus definitions.

1. Choose Modify listÿ. from the Definitions menu.
2. Highlight the virus definition to delete in the Virus list
ÿ box.
3. Select the Delete command button.
ÿ An alert box is displayed prompting you to confirm the
ÿ delete request.
4. Select OK.ÿ
See also: ^hModify List^h
 Deletes all infected files detected during a scan.

^bNote:^b This procedure assumes that the scan is finished and
infected files were detected.

1. Highlight an infected file from the list of infected files.
2. Select the Delete command button.
ÿ The Delete Files dialog box is displayed.
3. Select the Delete All command button.
ÿ An alert box is displayed prompting you to confirm the delete
ÿ request for each file to be deleted.
4. Select OK to delete each file.ÿ
See also: ^hScan Results^h
 Deletes a file from the list of infected files detected
during a scan.

^bNote:^b This procedure assumes that the scan is finished and
infected files were detected.

1. Highlight the file to be deleted from the list of infected
ÿ files.
2. Select the Delete command button.
ÿ The Delete Files dialog box is displayed.
3. Select the Delete command button.
ÿ An alert box is displayed prompting you to confirm the delete
ÿ request.
4. Select OK.ÿ
See also: ^hScan Results^h
 Configures which command buttons are active in the Scan Results
dialog box.

1. Choose Clinicÿ. from the Options menu.
2. In the Commands group box, check the appropriate check
ÿ boxes to enable the command in the Scan Results dialog box:

ÿ Allow Repair
ÿ Allow Delete
ÿ Allow Reinoc
ÿ Allow Cancel
ÿ Allow Repair All
ÿ Allow Delete All
ÿ Allow Reinoc All

3. Select OK.ÿ
See also: ^hClinic^h
 Configures which command buttons are active in the Virus
Intercept Alert boxes.

1. Choose Interceptÿ. from the Options menu.
2. In the Commands group box, check the appropriate check
ÿ boxes of the command buttons to activate in the Virus
ÿ Intercept Alert boxes:

ÿ Allow Reinoculate
ÿ Allow Proceed

3. Select OK.ÿ
See also: ^hIntercept^h
Enables the display of network drive letters and the All Network
Drives check box in the Scan Drives dialog box.

1. Chose Clinicÿ. from the Options menu
2. Check the Allow Scanning of Network Drives check box.
3. Select OK.ÿ
See also: ^hClinic^h
Increase the protection level to check also for unknown viruses.

1. Choose Globalÿ. from the Options Menu.
2. Check the Detect Unknown Viruses checkbox

^bNote:^b Files must be inoculated before they can be checked
for unknown viruses.

3. Select OK.ÿ
See also: ^hGlobal^h
 Adds the virus definitions in the selected file to the
existing virus definitions list.

1. Choose Load from fileÿ. from the Definitions menu.
2. Enter the filename to load either by:
ÿ
ÿ selecting the appropriate drive, directory, and file
ÿ from the list boxes,
ÿ or
ÿ typing the filename in the Filename text box.

3. Select OK.ÿ
See also: ^hLoad from File^h
 Prints the names of the virus definitions in the list.

1. Chose Modify listÿ. from the Definitions menu.
2. Select the Print command button.
ÿ The Printing Virus List dialog box is displayed.
3. Select the Send to Printer radio button.
4. Select OK.
ÿ A print file is created and sent to the printer.ÿ
See also: ^hModify List^h

Prints the results of the current scan.

^bNote:^b This procedure assumes that the scan is finished and
the Scan Results dialog box is displayed.

1. Select the Print command button.
ÿ The Scan Summary dialog box is displayed.
2. Select the Send to Printer radio button.
3. Select OK.
ÿ A print file is created and sent to the printer.ÿ
See also: ^hScan Results^h
 Repairs all infected files detected during a scan.

^bNote:^b This procedure assumes that the scan is finished and
infected files were detected.

1. Highlight an infected file from the list of infected files.
2. Select the Repair command button.
ÿ The Repair Files dialog box is displayed.
3. Select the Repair All command button.
ÿ Each repaired file is noted in the Scan Results listing by
ÿ "File repaired to remove virus ÿ." replacing the virus
ÿ type label.

^bImportant:^b Not all infected files can be repaired.
If a file cannot be repaired, it must be deleted.ÿ
See also: ^hScan Results^h
 Repairs the selected infected file detected during a scan.

^bNote:^b This procedure assumes that the scan is finished and
infected files were detected.

1. Highlight the file to be repaired from the list of infected
ÿ files.
2. Select the Repair command button.
ÿ The Repair Files dialog box is displayed.
3. Select the Repair command button.
ÿ When the file is repaired, the virus type label is
ÿ replaced with "File repaired to remove virus ÿ."

^bImportant:^b Not all infected files can be repaired.
If a file cannot be repaired, it must be deleted.ÿ
See also: ^hScan Results^h
Executes another scan using the same specifications as the just
completed scan.

^bNote:^b This procedure assumes that the scan is finished and
the Scan Results dialog box is displayed.

1. Select the Scan command button.
ÿ A scan is executed and the new scan results are displayed.
2. Select OK.ÿ
See also: ^hScan Results^h
 Restores partition table, boot sector, or CMOS system setup
information from a Rescue Disk.

1. Choose Restore from Rescue Diskÿ. from the Tools Menu.
2. Check the appropriate check boxes for the type of
ÿ information to restore:

ÿ Partition table
ÿ Boot Sector records
ÿ CMOS setup values

3. Select the drive to restore from.
4. Select OK.ÿ
See also: ^hRestore from Rescue Disk^h
 Prints the results of the current scan to a user-specified file.

^bNote:^b This procedure assumes that the scan is finished and
the Scan Results dialog box is displayed.

1. Select the Print command button.
ÿ The Scan Summary dialog box is displayed.
2. Select the Send to File radio button.
3. Select the filename to print to by:
ÿ
ÿ selecting the Browse command button and highlighting
ÿ an existing filename,
ÿ or
ÿ typing the filename in the Filename text box. Use this
ÿ option to type a new filename.

4. Select OK.ÿ
See also: ^hPrint Scan Results^h

Scans all files in a directory (and its subdirectories,
if selected) for viruses.

1. Choose Directoryÿ. from the Scan menu.
2. Select the desired drive from the Drives drop down list box.
3. Select the desired directory from the Sub Directories list
ÿ box.
4. Check the Include Subdirectories check box to scan all files
ÿ in all subdirectories under the selected directory.
5. Select OK.ÿ
See also: ^hDirectory^h
 Scans an individual file for viruses.

1. Choose Fileÿ. from the Scan menu.
2. Select the desired drive from the Drive drop down list box.
3. Select the desired directory from the Dirs list box.
4. Select the file to scan by:

ÿ highlighting the filename in the Files list box,
ÿ or
ÿ typing the filename in the Filename text box.

^bNote:^b You can use wildcard patterns in the Filename text box
to selectively display certain file types in the Files list box.

5. Select OK.ÿ
See also: ^hFile^h

Scans all files in all directories of all drives on the system.

1. Choose Driveÿ. from the Scan menu.
2. Check all three Drive check boxes:
ÿ
ÿ All Floppy Drives
ÿ All Local Drives
ÿ All Network Drives (if enabled)

3. Select OK.ÿ
See also: ^hDrive^h

Scans all files in all directories on the selected floppy
drive(s).

1. Choose Driveÿ. from the Scan menu.
2. Select the letter of the floppy drive(s) to scan
ÿ from the Drives list box.
ÿ or
ÿ Check the All Floppy Drives check box. All floppy and
ÿ removable drives are highlighted.
3. Select OK.ÿ
See also: ^hDrive^h

Scans all files in all directories on the selected hard
drive(s).

1. Choose Driveÿ. from the Scan menu.
2. Select the letter of the hard drive(s) to scan from the
ÿ Drives list box.
ÿ or
ÿ Check the All Local Drives check box. All hard drives,
ÿ RAM drives, and SUBST drive names are highlighted.
3. Select OK.ÿ
See also: ^hDrive^h
 Scans all files in all directories on the selected network
drive(s).

1. Choose Driveÿ. from the Scan menu.
2. Select the letter of the network drive(s) to scan from the
ÿ Drives list box.
ÿ or
ÿ Check the All Network Drives check box.
ÿ All network drives are highlighted.

^bNote:^b Scanning of network drives must be enabled
in the Options menu.

3. Select OK.ÿ
See also: ^hDrive^h
  Creates the initial password.

1. Choose Set passwordÿ. from the Options menu.
2. Type the desired password in the New Password text box.
3. Select OK.
4. Type the new password again in the Confirm New Password
ÿ text box.
5. Select OK.ÿ
See also: ^hSet/Change Password^h
 Removes the inoculation file on the specified drive(s).

1. Choose Uninoculateÿ. from the Tools Menu.
2. Select the drive(s) to uninoculate.
3. Select OK.ÿ
See also: ^hUninoculate^h

View the list of currently defined virus definitions.

1. Choose Modify list ÿ. from the Definitions menu.
ÿ The list of current virus definitions is displayed in the
ÿ Virus list box.
2. Use the scroll bar to scroll through the list.
3. Select OK.ÿ
See also: ^hModify List^h
5%4=%4S"'c%4Norton AntiVirus provides protection from currently known
computer viruses or virus strains; however, new viruses are
constantly being reported. To protect your computer from new
viruses, you should update Norton AntiVirus's virus definitions
on your computer as new definitions become available.

You can obtain current virus definitions from:

* Symantec BBS (Bulletin Board Service)
* CompuServe (NORTUTL Forum)
* Other BBSs and user groups in your area
* the Faxline
* Symantec's virus definitions Update Disk service

These services are described below.

^BNote:^B Registered users of Norton AntiVirus outside the United
States and Canada should contact their local Symantec
distributors or the nearest Symantec office for customer
support.

Symantec also maintains the ^BVirus Newsline^B, a telephone service
that provides round-the-clock news about viruses and how to
obtain new virus definitions. See the READ.ME file for the
current phone number. Before you call, have paper and a pencil
ready to write down any important information. A recorded
message gives the latest virus news, but not the actual virus
definitions. It provides information about available virus
definitions and how you can obtain them.
ÿAÄ
^BSymantec BBS^B
You can download a complete set of virus definitions or a
file with just the virus definitions published since the last
release of the virus definitions file. To download the current
virus definitions file from the Symantec BBS, you must access
the BBS using communications software, a modem, and your
computer.

Set your communications application to no parity, 8 data bits,
and 1 stop bit. For information about these settings, see the
user's guide that was supplied with your communications
software. Once you've set up your communications software and
modem correctly, you can call the Symantec BBS at

ÿ (408) 973-9598 for 300- to 2400-baud modems or
ÿ (408) 973-9834 for 9600-baud modems.

Once you've successfully connected with the BBS, log in and go
to the File section, then to the NAV20 Library. Then select the
appropriate file-transfer protocol and download the file. Save
the file to your hard disk, then disconnect from the BBS.

See ^hLoading virus definitions from a file^h for information
on how to load the virus definition file.

^BCompuServe NORUTL Forum^B
CompuServe is a bulletin board service available only to paid
subscribers. You can find the current Norton AntiVirus's virus
definitions file in the NORTUTL Forum, NAV-IBM Library Section.

See ^hLoading virus definitions from a file^h for information
on how to load the virus definition file.

^BFaxline^B
If you don't have a modem and communications software, the
Faxline provides a fast way to get a new virus definitions
using your facsimile machine (fax).

The Faxline is available 24 hours a day, 7 days a week. The
service is free, but you will have to pay the cost of the
telephone call.

^BNote:^B For assistance using this service, call (310) 477-2707.

You can call the Faxline at (310) 575-5018 from a touch-tone
phone or from a fax machine. If you call from a touch-tone
phone, you must give your fax telephone number so that the
definitions can be transmitted there. If you call from a fax,
it must be properly set to receive the virus definitions you
request. Refer to your facsimile machine's user guide for
settings to use for receiving documents.

See ^hAdding a Virus Definition Manually^h for information on how
to add the virus definitions.

^BSymantec Update Disk Service^B
In addition to the free update services described above,
Symantec's virus definitions update disk service supplies
floppy disks containing the most current virus definitions
file available at the time your order is processed; updates
are normally available quarterly. There is a nominal fee for
this service (currently $12.00 U.S., not including shipping,
handling, and taxes). You can order by calling (800) 343-4714,
extension 756.

^BNote:^B Please state which size and capacity (51/4-inch/360K or
31/2-inch/720K) disks you need when you place your order.

See ^hLoading virus definitions from a file^h for information
on how to load the virus definition file.

^BOther Bulletin Board Services^B
Updates to the virus definitions file are posted on several
bulletin board services, including Patricia Hoffman's
EXCALIBUR BBS and National Computer Security Association's BBS.
Updates may also be available on user-group BBSs in your area.
^bCredits^b

Product Management Joe Fusco.

Project Management Karen Black and Catherine Ruggles.

Development Teamÿ David Chambers,Peter Dickinson,
ÿ Craig Dickson, Kevin Flick, Larry Goldsmith,
ÿ Mohan Gopalakrishnan, Brad Kingsbury,
ÿ Mark Lawler, Mani M. Manivannan,
ÿ Bruce McCorkendale, Keith Mund
ÿ and Enrique Salem.

ÿ With assistance from Tony McNamara
ÿ and John Wilber.

Virus Definitionsÿ Blair Brandenburg, Craig Dickson,
ÿ Richard Pouncy and John Wilber.

Quality Assuranceÿ Tom Burgess, George Chlentzos, Ian Colquhoun,
Teamÿ Michel Roter and Mitchell Sanders.

Documentation Team Tom Bergantino, Dan Borror, Craig Dickson,
ÿ Denise Link, Joel Mallette, Donna Mosich,
ÿ Allen Reed and Denise Weatherwax.

ÿ Layout by Modern Design, Los Angeles.

Technical Supportÿ Cory Haibloom, Bob Kirkland and Ray Waldin.
Team

Engineering Support Kim Johnston, Brian Foster and Bob Kirwin.
Team

Additionalÿ
Special thanks to our external testers and
Acknowledgementsÿ to our Norton AntiVirus customers who
ÿ suggested product enhancements.ÿ