User manual DR SOLOMONS WINGUARD

[. . . ] Dr Solomon's WinGuard for Windows 95 & NT Dr Solomon's Software Ltd. Alton House, Gatehouse Way, Aylesbury, Buckinghamshire, HP19 3XU, UK Tel: +44 (0)1296 318700 Fax: +44 (0)1296 318777 E-mail: support@drsolomon. com Dr Solomon's Software, Inc. 1 New England Executive Park, Burlington, MA 01803, USA Tel: +1 781 273 7400 Fax: +1 781 273 7474 E-mail: support@us. drsolomon. com Dr Solomon's Software GmbH Luisenweg 40, 20537 Hamburg, Deutschland Tel: Support +49 (0)1805 237678 E-mail: support@de. drsolomon. com Dr Solomon's Software Australasia Pty Ltd. 96-98 Market Street, South Melbourne, Victoria 3205, Australia Tel: +61 3 9690 0455 Fax: +61 3 9690 7349 E-mail: support@au. drsolomon. com CompuServe: GO DRSOLOMON World Wide Web: www. drsolomon. com PART NUMBER Copyright Dr Solomon's Anti-Virus Toolkit is copyright © 1997 Dr Solomon's Software Ltd. Dr Solomon's Anti-Virus Toolkit is protected by the copyright laws which pertain to computer software. It is illegal to make copies of the program other than as may be licensed or for purposes of backup without written permission from Dr Solomon's Software Ltd. No part of the manual or other documentation accompanying Dr Solomon's Anti-Virus Toolkit may be reproduced, transmitted, transcribed, stored in a retrieval system or translated into any language, in any form or by any means, without the prior written permission of Dr Solomon's Software Ltd. Disclaimer Neither Dr Solomon's Software Ltd. [. . . ] You can specify an alternative path by typing it directly, or by using the Browse button and selecting it from the interface. Viewing The log file is in a standard text format, so you can use a text editor to view it. In this case you will need to first enable WinGuard; see `Changing the scanning configuration' on page 3. The log is displayed in the Windows `Notepad' application. 12 Scanning with WinGuard If WinGuard finds a virus What happens if WinGuard finds a virus depends on whether Autodisinfect is disabled or enabled. Tip Auto-disinfect is disabled by default, so you have to manually enable it (see page 7). Windows 95 If WinGuard finds a virus and Auto-disinfect is not enabled: q If the scan is not on a write (see Scan on Writes on page 7), the action is stopped. An alert pops up on the screen in front of any program you are running. q q Depending on the options set (see `Changing the alert messages' on page 9), a report of the virus may be saved to a log file, or forwarded as network messages. If the scan was not on a write, your application will probably also warn you that it cannot access the file or disk specified. q You should click OK and immediately disinfect the infection. You can disinfect infections: q by enabling WinGuard's Auto-disinfect option (you will need to reboot after selecting Auto-disinfect for the option to take effect) and then repeating the action; or by using FindVirus, either from the User Interface (see `Disinfecting drives' on page 139), or from Magic Bullet (see `Using the Magic Bullet' on page 1). q 13 Scanning with WinGuard If WinGuard finds a Virus, and Auto-disinfect is enabled, and the disinfect is successful, you see a pop-up alert, for example: Windows 95 Click OK to continue. If the disinfect is not successful, what happens is the same as if Autodisinfect was not enabled. Warning If WinGuard fails to disinfect a file, you should delete that file. After deleting the file, you must empty the Recycle Bin on your desktop to ensure that the infected file does not remain on your computer. 14 Scanning with WinGuard Windows NT 1. 3 WinGuard for Windows NT Tip For information on WinGuard for Windows 95, see section 1. 2 on page 2. Disinfect is one of the actions you can select to be performed on infected files during a read access, and (independently) as the action performed on infected files found on a write access. The default action is Do Nothing; if you want WinGuard to disinfect automatically, you must select the Disinfect option. You make this selection using the Action Tab; see page 21. If WinGuard finds a virus - Disinfect not selected Disinfect does not apply to hard disk boot and partition sectors, so if WinGuard finds a virus in one of these, the result is always as described in this section. If WinGuard detects a virus and Disinfect is not selected for the type of access: q The action you are performing is stopped. The Alert Dialog (in one of its two forms) pops up on the screen in front of any program you are running. Depending on the options set, reports of the virus may be passed as messages and recorded in the event log. Depending on the action selected for the type of access (see `Action Tab' on page 21), WinGuard may do nothing, the file may be deleted, or the file may be moved to a quarantine directory. Your application will probably also warn you that it cannot access the file/disk specified. 15 q q q q q Scanning with WinGuard Follow these steps: 1. If you are using the history list type of Alert Dialog you can use the Run FindVirus button to quickly disinfect the infections. Note the details of the infected files from the Alert Dialog, then close it. Try to stop further spread of the virus; shut down any non-essential activity on the machine. [. . . ] Include: <user> to display the logged on user name; <virus> to display the name of the infecting virus; <file> to display the name of the infected file. Windows NT Type the message text you wish to display in the Alert Dialog message box when a virus is successfully disinfected. Include: <virus> to display the name of the infecting virus; <file> to display the name of the infected file; <disk> to display the letter of an infected drive. Click to accept any changes. Click to cancel any changes. Click to open and view the on-line help file for this dialog. 25 Scanning with WinGuard FindVirus Tab If FindVirus is installed, the history list type of Alert Dialog gives you the option of starting FindVirus. Use the FindVirus Tab to set the options that FindVirus will use. Windows NT Select for FindVirus to disinfect when run. When active, select for FindVirus to use an Extra Driver (specified in the Scanner tab) when run. [. . . ]