home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
CD Direkt 1995 #1
/
Image.iso
/
cdd
/
virus
/
mcafee
/
vshld117.doc
< prev
next >
Wrap
Text File
|
1994-07-15
|
47KB
|
1,157 lines
VSHIELD Version 5.62V117
VSHIELD1 Version 0.2
CHKSHLD Version 0.4
Copyright 1989-1994 by McAfee Associates.
All rights reserved.
Documentation by Aryeh Goretsky.
McAfee Associates (408) 988-3832 office
2710 Walsh Avenue, Suite 200 (408) 970-9727 fax
Santa Clara, CA 95051-0963 (408) 988-4004 BBS (25 lines)
U.S.A USR HST/v.32/v.42bis/MNP1-5
CompuServe GO MCAFEE
Internet support@mcafee.COM
America OnLine MCAFEE
TABLE OF CONTENTS
SYNOPSIS . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
- What is VSHIELD?
- System requirements
AUTHENTICITY . . . . . . . . . . . . . . . . . . . . . . . . . .3
- Verifying the integrity of VSHIELD
WHAT'S NEW . . . . . . . . . . . . . . . . . . . . . . . . . . .4
- New features and viruses added in this release
OVERVIEW . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
- A note on switches
- General description of VSHIELD
OPERATION and OPTIONS. . . . . . . . . . . . . . . . . . . . . .7
- How to use VSHIELD, VSHIELD1, and CHKSHLD
- Detailed explanation of switches
- ERRORLEVEL's for batch file programming
EXAMPLES . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
- Samples of frequently-used options
INSTALLATION . . . . . . . . . . . . . . . . . . . . . . . . . .16
- How to install VSHIELD on your system
- A note on VSHIELD and networks
VIRUS REMOVAL. . . . . . . . . . . . . . . . . . . . . . . . . .17
- What to do if a virus is found
REGISTRATION . . . . . . . . . . . . . . . . . . . . . . . . . .17
- How to register VSHIELD
TECHNICAL SUPPORT. . . . . . . . . . . . . . . . . . . . . . . .18
- Information you should have ready when calling
APPENDIX A . . . . . . . . . . . . . . . . . . . . . . . . . . .19
- Creating an exception list for the /CERTIFY option
APPENDIX B . . . . . . . . . . . . . . . . . . . . . . . . . . .20
- Sample CHKSHLD program script
Page 1
VSHIELD Version 5.62V117 Page 2
SYNOPSIS
VSHIELD is a virus prevention program for IBM PC and
compatibles. VSHIELD prevents viruses from infecting your
system. When VSHIELD first loads it will search memory, the
master boot record (partition table), boot sector, system
files, and itself for known computer viruses before going into
memory as a Terminate-and-Stay-Resident (TSR) program.
VSHIELD checks for viruses by scanning programs as they
are run for virus signatures and/or validation codes added by
VIRUSCAN. Infected programs are prevented from running and a
a warning message is displayed by VSHIELD. VSHIELD also stops
soft boots from disks infected by boot-sector viruses.
VSHIELD optionally checks validation codes added by SCAN
to check if a file has been altered or modified. This can be
used to detect unknown (new) viruses.
VSHIELD optionally check for viruses as files are copied
or accessed.
VSHIELD optionally provides access control functions to
reduce the risk of virus infection from unauthorized software.
Two discrete programs are available. The first,
VSHIELD.EXE, checks for viruses using virus signatures and
validation codes added by SCAN. The second, VSHIELD1.EXE,
only checks validation codes added by SCAN. Both programs
monitor all program loads from all disks unless otherwise
specified.
The VSHINST program installs an icon for VSHIELD under
Windows 3.x. This icon can be used to toggle VSHIELD on and
off.
The VSHWIN program allows VSHIELD to display messages
while Windows 3.x is running.
The CHKSHLD program checks for VSHIELD in memory for use
in network login scripts.
VSHIELD will run on any PC with 256Kb and DOS 2.10 or
above. VSHIELD1 uses 6Kb of memory. VSHIELD uses 46Kb of
conventional memory if loaded normally, 25Kb of conventional
memory if EMS is present, 5Kb of conventional memory if
swapped-to-disk, and 1.5Kb of conventional memory if loaded
into upper memory.
VSHIELD Version 5.62V117 Page 3
AUTHENTICITY
VSHIELD is packaged with VALIDATE, a program to ensure
the integrity of the executable program files. The
VALIDATE.DOC file describes how to use VALIDATE.
The validation results for VSHIELD 5.62V117 should be:
FILENAME: SIZE: DATE CHECK METHOD:
CHKSHLD.EXE S:8,171 D:08-17-93 M1: 7B3C M2: 1B48
VALIDATE.COM S:12,197 D:03-24-92 M1: D5BB M2: 166F
VSHIELD.EXE S:52,705 D:07-15-94 M1: B231 M2: 1C22
VSHIELD1.EXE S:18,833 D:06-24-93 M1: F414 M2: 13F5
VSHINST.EXE S:9,780 D:08-11-93 M1: 44A6 M2: 1D0F
VSHWIN.EXE S:15,927 D:08-17-93 M1: 874E M2: 0CB1
If your copy of VSHIELD differs, it may have options stored to
it with the /SAVE switch or been damaged by a virus. Run
VSHIELD with just the /SAVE switch to remove any stored options
and then re-run VALIDATE. Always obtain VSHIELD from a trusted
source such as the McAfee BBS, CompuServe, or your local McAfee
Agent. The latest version of VSHIELD and validation codes can
always be found on our BBS at +1 (408) 988-4004.
PKZIP AUTHENTICATION VERIFICATION
All of McAfee Associates' programs are archived with
Version 2.04g of PKWare's PKZIP Authentic File Verification.
When unzipped with Version 1.10 of PKWare's PKUNZIP program,
an "-AV" will be displayed after each file is unzipped and an
"Authentic files Verified! # FZW807 McAFEE ASSOCIATES" will
appear once all files are unzipped.
NOTE: If you do not receive the Authentic File Verification
messages, you may be using a different version of
PKUNZIP, such as V1.10 or V1.93A. Use PKUNZIP Version
2.04g to unzip files if you wish to have Authenticity
Verification displayed as files are unzipped.
VSHIELD Version 5.62V117 Page 4
WHAT'S NEW
Version 117 of VSHIELD adds detection of viruses added
in Version 117 of VIRUSCAN.
WHAT'S RECENT
Two new options have been added in Version 108 of
VSHIELD, the /BOOT and /NOFLOPPY options. The first
switch, /BOOT, tells VSHIELD to check the boot sector
of floppy disks whenever a diskette is accessed. The
second, /NOFLOPPY, disables the boot sector checking of
floppy disks, and should only be used when VSHIELD is
run with the /ACCESS switch in an OS/2 Virtual DOS Machine
(VDM) session to prevent a problem displaying directories.