home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Business & Presentations
/
Business and Presentations - Volume 1 (1995)(Sideface)(NL).iso
/
virus
/
tbav603
/
tbscanx.doc
< prev
next >
Wrap
Text File
|
1993-06-14
|
27KB
|
901 lines
Thunderbyte resident virus scanner. (C) 1989-1993 Thunderbyte B.V.
Table of Contents
1. INTRODUCTION...................................... 2
1.1. Purpose of TbScanX.......................... 2
1.2. A Quick start............................... 2
1.3. Benefits.................................... 2
2. USAGE OF THE PROGRAM.............................. 4
2.1. System requirements......................... 4
2.2. Program invocation.......................... 4
2.2.1. Invocation in Config.Sys.............. 5
2.2.2. Invocation in network environment..... 5
2.2.3. Invocation when using MS-Windows...... 5
2.3. While scanning.............................. 5
2.4. Detecting viruses........................... 5
2.5. Command line options........................ 6
2.5.1. help ................................. 6
2.5.2. off .................................. 6
2.5.3. on ................................... 7
2.5.4. remove ............................... 7
2.5.5. compat ............................... 7
2.5.6. noexec ............................... 7
2.5.7. allexec .............................. 7
2.5.8. noboot ............................... 7
2.5.9. secure ............................... 8
2.5.10. lock ................................ 8
2.5.11. ems ................................. 8
2.5.12. xms ................................. 8
2.6. Examples:................................... 8
2.7. Error messages.............................. 8
3. CONSIDERATIONS AND RECOMMENDATIONS............... 10
3.1. Solving incompatibility problems........... 10
3.2. Reducing the memory requirements........... 11
3.3. How many viruses does it detect?........... 12
4. APPLICATION INTERFACE............................ 13
Page i
Page 1
Thunderbyte resident virus scanner. (C) 1989-1993 Thunderbyte B.V.
1. INTRODUCTION
1.1. Purpose of TbScanX
By now already many virus scanners have been developed. The problem
with all these scanners is that you have to execute them. Suppose
you have the virus scanner automatically invoked in your
autoexec.bat file. If no viruses are found, your system is supposed
to be uninfected. But, to be sure that no virus can infect your
system, you have to run the scanner every time before you copy a
file to your harddisk, after downloading a file from a bulletin
board system, or after unarchiving an archive such as a ZIP file.
Be honest, do YOU actually invoke your scanner every time you
introduce a new file into the system? If you don't, you take the
risk that within a couple of hours all files are infected by a
virus...
TbScanX has a unique feature to overcome this tedious scanning.
Once invoked it will remain resident in memory, and AUTOMATICALLY
scan all files you execute and all executable files you copy,
create, download, modify, or unarchive!
The same approach is used to protect against bootsector viruses:
Every time you put a diskette into a drive the bootsector will be
scanned. If the disk is contaminated with a boot sector virus
TbScanX will warn you in time!
The amount of memory TbScanX requires depends on the number of
signatures. With all features enabled TbScanX uses 20Kb of memory
when scanning for 750 family signatures. If you enable swapping
TbScanX normally uses only 1Kb of memory. You can swap to EMS and
XMS memory. Of course the remaining kilobyte of TbScanX can be
loaded in upper memory.
1.2. A Quick start
Although we highly recommend a complete reading of this manual, here
are some directions for a quick run of TbScanX:
Load TbDriver first if it is not yet loaded. Type "TbDriver" and
press return.
To load TbScanX type "TbScanX" and press return.
The invocation syntax is:
TBSCANX [<options>]...
For fast online help type "TbScanX ?" or "TbScanX help".
1.3. Benefits
Page 2
Thunderbyte resident virus scanner. (C) 1989-1993 Thunderbyte B.V.
By now many different virus scanners have been developed. However,
TbScanX has a number of important and unique advantages over other
scanners. These are:
TbScanX is fully network compatible. It does not require you to
reload the scanner after logging on to the network. Other
resident anti-virus utilities force you to choose between
protection before the network is started, or protection after
the network is started, but not both.
TbScanX can display its messages in your local language.
As new viruses spread quickly there is often no time available
to continually adapt your own virus checker in order to make it
capable of recognizing each new virus as it appears. That is
why TbScanX uses a separate data file listing the signatures of
all known viruses. This file can be adapted quickly, possibly
by yourself.
TbScanX offers other software a universal hook to scan data
for viruses. If you are a programmer, you can instruct your
programs to scan information read from disk for viruses before
using the data.
TbScanX does not use much memory compared to other resident
virus scanners. On almost every machine it should be possible
to configure TbScanX that it uses only 1Kb of memory. Of course
you can also load this kilobyte into upper memory.
Page 3
Thunderbyte resident virus scanner. (C) 1989-1993 Thunderbyte B.V.
2. USAGE OF THE PROGRAM
2.1. System requirements
TbScanX runs perfectly on standard machines, in line with our
philosophy that there should be a limit to limitations.
+ TbScanX can be executed under DOS version 3.00 (and all later
versions). However, Dos 5.0 or higher is recommended, since
TbScanX has been optimized and designed primarily for use with
these DOS versions.
+ TbScanX requires about 10 Kb of free memory to be invoked. If
you enable swapping it does NOT require additional standard DOS
memory to initialise itself. If you don't enable swapping the
amount of memory depends on the amount of signatures in the
data file. TbScanX can handle up to approximately 2500
signatures, depending on which swapping mode is used. Without
swapping mode TbScanX can utilize up to 50Kb, when swapping to
expanded memory 64Kb and when swapping to extended memory 50Kb.
2.2. Program invocation
It is recommended to invoke TbScanX automatically from within your
Config.Sys or Autoexec.Bat file. It is important to invoke TbScanX
as early as possible after the machine has booted. For that reason
it is possible to invoke TbScanX from within the Config.Sys file.
TbScanX requires TbDriver to be loaded first!
TbScanX is easy to use. The syntax is as follows:
TBSCANX [<options>]...
There are three possible ways to invoke TbScanX:
To invoke TbScanX from the DOS prompt or within the Autoexec.Bat
file:
<path>TbScanX
To invoke TbScanX from the Config.Sys as a TSR (Dos 4+):
Install=<path>TbScanX.Exe
To invoke TbScanX from the Config.Sys as a device driver:
Device=<path>TbScanX.Exe
TbScanX