About (Help menu) This command displays a screen with the program's copyright and version number information. Add virus definition (Definitions menu) Use this command to add a definition for a newly discovered virus to Norton AntiVirus. Choose Add virus definition to enter the definition's parameters. You can obtain those parameters by calling the 24-Hour Virus Newsline (see Apendix D in the User Manual). In the Name field enter the name of the virus definition (from 1 to 25 characters). In the Length field enter the length of the definition in bytes. In the Checksum field enter the hexadecimal string used to check the virus definition for errors. Record the actual definition in the 12 lines in Definition. To record the definition, we suggest you type four characters, then a space, then type the next four characters and a space, and so on. (The spaces are not necessary but make the definition easier to read.) You can end a line at any point. Use the down arrow key to go to the next line. Continue entering the definition until you are finished. The definition must be error free before the Ok button is enabled. After you enter the last character of the definition, press Enter to check the definition. If there is an error, Virus Clinic positions the cursor as close to the error as possible. Correct the error. Then save the definition. Advanced (Scan options) Choose Advanced scan to have Norton AntiVirus search for both known and unknown viruses. Advanced can be used with Auto-inoculate on or off. The Advanced scan option adds to the Basic level scan, the capability of creating a checksum file for each program file. This enables detection of potential infections whether the virus is known or not. When Advanced is used with Auto-inoculate set ON, checksum files are created during a scan for each program file (unless already infected with a known virus). If Auto-inoculate is set OFF, Norton AntiVirus will only validate correct checksum files as well as look for known viruses. The Advanced option also affects the operation of Virus Intercept. When Advanced is ON, Intercept will inoculate new program files, as well as warn of potential infections when it senses changes to the program since the last checksum. For this use you should turn Auto-inoculuate OFF to be advised of new inoculations. Alert message (Configure) This option lets you customize the virus infection alert. The message you enter in the text field appears in all alerts. Select Alert message. Type a message between 1 and 76 characters long in the text field. Audit trail (Configure) The audit trail keeps a permanent record of all of Virus Intercept's activity. The audit trail logs all the virus infection alerts that are displayed and your responses to those alerts. The default filename of the audit trail log is AUDIT.LOG, but you may change this. Basic (Scan options) The Basic option directs Scan to searches for known viruses in the drives, directories, or files you have selected. With a Basic scan, Virus Clinic scans all files, not just certain types. Change password (Options menu) Use this command to change your password. "Set password" becomes "Change password" on the Options menu after you set your password. Choose Change password and type your existing password in "Old Password." Then type your new password in "New Password." The program then verifies your new password. Color palette (Configure) Changes the colors on your screen. You should choose an option that corresponds with the display adapter card in your computer. If you don't like the colors shown on your screen, you can try a different option. Configure (Options menu) Controls the way Virus Clinic and Virus Intercept work on your computer. Choose Configure to open the Configuration options dialog box. The following Configuration options are Available: Special sound - When checked, turns on the special virus alert sound. (See the help topic: Special Sound) Disable alert box on monochrome monitor - When checked, turns off the virus infection alert on a monochrome monitor. Disable alert box on color monitor - When checked, turns off the virus infection alert on a color monitor. Remove alerts after [n] seconds - Sets the number of seconds (1-60) an alert is displayed before the default is activated. Alert message - Lets you enter a message up to 76 characters in length that will appear in the virus infection alert box. Audit trail - When checked, keeps a record of Virus Intercept's activity. (See the help topic: Audit Trail.) Disable scanning of network drives - When checked, prevents the scanning of network drives. (See the help topic: Disable scanning of network drives.) Disable scan Cancel button - When checked, deactivates the Cancel button in the Scan Results screen. Disable Repair file button - When checked, deactivates the Repair file button in the Scan Results screen. Disable Repair all button - When checked, deactivates the Repair all button in the Scan Results screen. Disable Delete button - When checked, deactivates the Delete button in the Scan Results screen. Disable Reinoculate button - When checked, deactivates the Reinoculate button in the Reinoculate alert. (See the Help topic: Disable Reinoculate button.) Disable Proceed button - When checked, deactivates the Proceed button in the Reinoculate alert. (See the help topic: Disable Reinoculate button.) Monitor - Lets you choose between a monochrome or color display adapter card if you have both types in your system. (See the help topic: Monitor.) Color palette - Lets you change the selection for the type of adapter card connected to your computer. See the Help topic for each Configuration option for more information. Directory (Scan Menu) This command scans all files in a selected directory and its subdirectories To scan a directory, do one of the following: - Type the full name of the directory in the "Subdirectories" field, and press Enter. - Use the Directories list box to build the pathname in the "Subdirectories" field, and press Enter, then press Alt-B to begin. Select Begin to begin scanning the directory. Definitions menu The items on this menu let you manage the virus definitions that Norton AntiVirus uses to search for during a scan. The functions are the following: Add virus definition - Enter the definition manually for a newly discovered virus. Load virus definition - Update Norton AntiVirus with new virus definition file. List virus names - Display the virus names that Norton AntiVirus searches for. (also includes the ability to delete selected virus definitions.) Disable alert box on monochrome monitor (Configure) Turns off virus infection alerts on a monochrome monitor. Disable alert box on color monitor (Configure) Turns off virus infection alerts on a color monitor. Disable Delete button (Configure) Deactivates the Delete button in the Scan Results screen so that an infected file cannot be deleted from within the program. Disable Proceed button (Configure) Deactivates the Proceed button in the virus infection and inoculate alerts. With the Proceed turned off, you cannot open or launch a file that is infected. Disable Reinoculate button (Configure) Deactivates the Reinoculate button in the Reinoculate alert box. If the checksum file for a program doesn't match the program when Virus Intercept examines the checksum, Virus Intercept displays the Reinoculate alert telling you these don't match. Selecting Reinoculate overwrites the existing checksum file. When the Reinoculate button is turned off, the checksum file cannot be regenerated. Disable Repair all button (Configure) Deactivates the Repair all button in the Scan Results screen. When the Repair all button is turned off, you cannot repair all infected files at once. Instead, infected files must be repaired individually. Disable Repair file button (Configure) Deactivates the Repair button in the Scan Results screen so that individual infected files cannot be repaired. Disable scan Cancel button (Configure) Prevents a scan from being canceled in Virus Clinic until the scan is completed. Disable scanning of network drives (Configure) Prevents the scanning of network drives, by insuring network drives are not listed in the Scan drives, Scan directories, or Scan files list boxes. This option is designed for the network administrator who wants to prevent unauthorized persons from scanning network drives, which could degrade network performance. Drive (Scan menu) Searches all disk drives or one disk drive for infected files. Choose Drive from the Scan menu to open the Scan drive dialog box. Scan all - Searches all drives for infected files. You are given the option to scan floppies as well. Scan - Searches the selected drive for infected files. First, select a drive from the Drives list box, then select Scan or Scan All to begin. Enter password (Options menu) Use this command to enter your password, if you have created one, when you want to change the configuration options. (see "Configuration" for more information on the Configuration Options.) File (Scan menu) Use this command to scan a file or group of files. You may specify files in one of two ways: - Type the name of the file you want to scan in the Name field, or use the standard DOS wildcards (* and ?) to scan a group of files. - Use the Files list box to locate the name of the file to be scanned, and press Enter. Change the directory or drive if the file you want to scan is not listed. Help index (Help) Choose Index to display a list of the commands and features within Virus Clinic. Select an item from the Help index, then select the Help button to display the Help information. List virus names (Definitions menu) Displays the list of known viruses that Norton AntiVirus scans for. Print - Print the list of virus names to the printer. Save - Store the list of virus names to a file. (SUMMARY.TXT is the default filename, but you may change it.) Delete - Remove the selected virus name from the list. Load virus definition (Definitions menu) Updates the Norton AntiVirus virus definitions from a file. New virus definitions files will be available from the Symantec bulletin board service (see Appendix D in the User Manual). Choose Load virus definition, then type the name of the virus definitions file in the filename dialog box. Select Ok to update the definitions in Norton AntiVirus. Monitor (Configure) If you have both a monochrome and a color adapter card in your system, you may use these radio buttons to choose which one the Norton AntiVirus will use. Otherwise it displays the type of the monitor adapter card you have installed in your computer and the radio buttons are dimmed if you only have one adapter card. Options menu Lets you set the Norton AntiVirus' configuration options, determine what the program scans for, and set or change your password. Configure - Determines how the program options work on your computer. Scan options - Lets you decide if Virus Clinic searches only for known viruses or for both known and unknown viruses. Enter password - Lets you enter your password so that you can access the Configuration options. Set/Change password - Lets you specify or change a password that allows access to the Configuration Options. Remove Alert after [ ] Seconds (Configure) Enter the number of seconds you want a virus infection alert to appear on the screen before Intercept selects the default action and closes the alert. You can enter a number between 1 and 60. Scan options The Scan options determine the types of viruses, known and/or unknown, that Norton AntiVirus looks for during a scan, and also whether or not to inoculate new files automatically. Basic - Searches for known viruses. Advanced - Searches for known and unknown viruses. but requires more space than Basic. Auto-inoculate - Creates a checksum file the first time you scan a file or when the file is started. Scan Results Screen - Shows a scan's progress while the scan is in operation. When the scan finishes, any infected files are displayed in the Scan Results list box. The infected file's name, its complete pathname, and the virus type are displayed. At the end of the list is the Scan Summary, which list the Total files scanned and the Total files infected, if any. The buttons on the left let you work with the Scan Results to handle any infected files. For example, you can print the scan summary, repair an infected file, or delete an infected file. Here is a brief summary of those buttons: Scan - Rescans the selected drives, directories, or files that were originally scanned. Repair - Repair the selected infected file. Repair all - Repair all infected files in the Scan Results list box. Delete - Delete the selected infected file. Print summary - Print the entire contents of the Scan Results list box. Save summary - Save the results in the Scan Results list box to an ASCII text file. Cancel - Cancels a scan in progress. Quit - Closes the Scan Results screen and returns to the main program screen. Note: Some of these functions may be disabled using the Configure command in on the options menu. Set password (Options menu) Use this command to set your password in Virus Clinic. You cannot change certain Configuration Options without your password. "Set Password" becomes "Change Password" after you have created one. To access the Configuration Options screen after you have set your password, use the Enter password command. Special sound (Configure) Turns on the special virus alert sound. When Virus Intercept detects a virus, it plays a siren-like sound to warn you of the virus. If you have turned off the virus alert in the Configuration options, this sound is your only warning of a virus. Virus Alters how your computer operates without your knowledge or permission. Known viruses - Viruses and their strains that Norton AntiVirus has a definition for. Unknown viruses - Any changes that Norton AntiVirus detects and thinks may be characteristic of an unknown virus. If Norton AntiVirus alerts you of an unknown virus, it may be caused by a virus, or it could simply be caused by an update to a program file. See "Scan options" for more information.