=============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions Symantec AntiVirus Research Center January 17, 1996 =============================================================================== Word Macro Virus Updates =============================================================================== Thank you for downloading the virus definition update for Norton AntiVirus version 3.0, Norton AntiVirus for Windows 95, Norton AntiVirus Scanner for Windows NT and Norton Antivirus for Netware versions 1.0 and 2.0. This document contains instructions for: Updating Norton AntiVirus for Windows 95 Updating Norton AntiVirus for NetWare 1.0 & 2.0 Updating Norton AntiVirus 3.0 (DOS / Windows 3.x) Updating Norton AntiVirus 3.0 Network Manager Updating Notron AntiVirus Scanner for Windows NT =============================================================================== This update contains the following files: UPDATE.TXT This file JAN96B.TXT Text file that describes what's new in this update. VIRSCAN.DAT This is the main data file used by Norton AntiVirus. This file replaces the existing VIRSCAN.DAT in your Norton AntiVirus directory. VIRSCAN.INF This data file is used by Norton AntiVirus to display virus information, such as virus characteristics and behavior. This file is not required to detect or repair viruses. VIRSPEC.TXT Special instructions concerning specific viruses. NAVEX.DAT External detect/repair database for DOS NAV NAVEX.NLM External detect/repair database for NAV for Netware NAVEX.VXD External detect/repair database for NAV for Windows 95 NAVEX16.DLL External detect/repair database for NAV for Windows 3.x NAVEX32.DLL External detect/repair database for NAV for Windows 95/NT VIRSCANM.DAT Macintosh virus database used by Norton Antivirus for Netware v1.0 & v2.0 VIRSPAA.DAT Detection Annoying.4060 VIRSPBY.DAT Repair for Byway VIRSPCB.DAT Detection and repair for Crazy Boot VIRSPDB.DAT Repair for Da'Boys VIRSPDH.DAT Repair for Die Hard VIRSPEM.DAT Repair for Emmie.2702, Emmie.2823, Emmie.3097 VIRSPFZ.DAT Repair for Fairz VIRSPJA.DAT Repair for Bad_Head VIRSPNA.DAT Detection for Sat_Bug.Natas VIRSPNQ.DAT Detection for Neuroquila VIRSPNR.DAT Repair for Neuroquila VIRSPNS.DAT Detection for Neuroquila VIRSPPC.DAT Repair for CPW VIRSPR0.DAT Repair for Frankenstein VIRSPSM.DAT Detection for SMEG VIRSPUR.DAT Repair for Urkel VIRSPWD.DAT Detection file for the Word Macro Family of viruses (Colors, Concept, DMV, FormatC, and Nuclear). =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== To update Norton AntiVirus 3.0 virus definitions: *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* * IMPORTANT NOTICE - Norton Antivirus v3.0 * * * * If your version of Norton AntiVirus 3.0 for Windows and DOS is dated * * before December 1, 1995, you will need to update it using the NAV Macro * * Engine Update in order to protect against Word Macro Viruses. If you * * have not updated your version, download the NAV Macro Engine Update from * * the Symantec BBS, Symantec's FTP and Web site, CompuServe, America * * Online, or Microsoft Network. The file is called UPDATEME.EXE and is * * located where the monthly update files are normally found. Alternately, * * you may call Customer Service at (800) 441-7234 to order a disk set. * *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* 1. Copy 01NAV96B.ZIP to the location where Norton AntiVirus has been installed. By default, this is the C:\NAV directory. 2. Change to the drive and directory where you copied the file to. 3. Verify PKUNZIP.EXE can be found somewhere along the PATH. For example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a DOS prompt should show your path to look something like the following: PATH=C:\NAV;C:\WINDOWS;C:\PKWARE 4. At the DOS prompt, type: PKUNZIP -O 01NAV96B.ZIP 5. Scan a drive, directory, or file with Norton AntiVirus 3.0, in either DOS or Windows. Doing this, automatically updates the Norton Antivirus TSR. 6. Reboot your computer to reload the updated Norton Antivirus TSR. =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== To update Norton AntiVirus for Windows 95 virus definitions: *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* * IMPORTANT NOTICE - Norton Antivirus for Windows 95 * * * * If your version of Norton AntiVirus for Windows 95 is dated before * * December 1, 1995, you will need to update it using the NAV Macro Engine * * Update in order to protect against Word Macro Viruses. If you have not * * updated your version, download the NAV Macro Engine Update from the * * Symantec BBS, Symantec's FTP and Web site, CompuServe, America Online, * * or Microsoft Network. The file is called NAV95PCH.EXE and is located * * where the monthly update files are normally found. Alternately, you may * * call Customer Service at (800) 441-7234 to order a disk set. * *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* 1. Double-click the "My Computer" icon on the desktop. The My Computer window opens displaying your available drives. 2. Double-click the drive or directory that contains the Norton AntiVirus definitions update .ZIP file. 3. Copy 01NAV96B.ZIP file to your Norton Antivirus for Windows 95 folder. By default, this is the C:\Program Files\Norton Antivirus folder. 4. Open a DOS box and change to the drive and directory where you copied the file to. 5. Verify PKUNZIP.EXE can be found somewhere along the PATH. For example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a DOS prompt should show your path to look something like the following: PATH=C:\NAV;C:\WINDOWS;C:\PKWARE 6. At the DOS prompt, type: PKUNZIP -O 01NAV96B.ZIP 7. Exit the DOS box 8. Start NAV 9. Scan a drive, directory, or file with Norton AntiVirus. Doing this, automatically updates the Auto Protect portion of Norton Antivirus. 8. Restart your computer so that the Auto Protect uses the newest virus definitions. NOTE: WinZIP users may start the program from within Windows 95, if preferred. =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== To update Norton AntiVirus for NetWare 1.0 & 2.0 virus definitions: *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* * IMPORTANT NOTICE - Norton Antivirus for Netware v1.0 * * * * If your Norton AntiVirus for NetWare 1.0 is dated before July 13, 1994 * * you will need to update your version. Using an older version of the * * NLM with these virus definitions may cause false alarms with garbled * * virus names. For information on how to receive the update, please * * call Customer Service at (800) 441-7234. * * * *=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=* 1. Map a drive letter to the volume and directory where Norton AntiVirus for NetWare is installed. 2. Disable Norton AntiVirus for NetWare, using either Norton AntiVirus for NetWare Windows configuration component, or at the server console using the function keys. 3. Copy 01NAV96B.ZIP to the location mapped in step 2. 4. Change to the mapped drive. 5. Verify PKUNZIP.EXE can be found somewhere along the PATH. For example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a DOS prompt should show your path to look something like the following: PATH=C:\NAV;C:\WINDOWS;C:\PKWARE 6. At the DOS prompt, type: PKUNZIP -O 01NAV96B.ZIP Enable Norton AntiVirus for NetWare, using either the Norton AntiVirus for NetWare Windows configuration component (NAVNLM.EXE), or at the server console using the function keys. =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== To update Norton AntiVirus Network Manager virus definitions: NOTE: The Norton AntiVirus Network Manager maintains a network copy of Norton AntiVirus to support distribution. Make sure you have access rights that allow read and write operations to the NAV directory. 1. Map a drive letter to the volume and directory where Norton AntiVirus is installed. 2. Copy 01NAV96B.ZIP to the location mapped in step 2. 3. Change to the mapped drive. 4. Verify PKUNZIP.EXE can be found somewhere along the PATH. For example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a DOS prompt should show your path to look something like the following: PATH=C:\NAV;C:\WINDOWS;C:\PKWARE 5. At the DOS prompt, type: PKUNZIP -O 01NAV96B.ZIP 6. If your version of Norton Antivirus Network Manager is dated on or before July 1, 1995, you must modify your .NNS configuration file to install/distribute all update files (by default, this file is _DEFAULT.NNS) a) First locate the [InstallFiles] section in your .NNS file. Add the entry: VIRSP*.DAT NAVEX*.* to the list. b) Second locate the [DefinitionUpdateFiles] section. Add the entry: VIRSP*.DAT NAVEX*.* to the list. The new definition files are now in place for network distribution. =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== To update Norton AntiVirus Scanner for NT virus definitions: 1. Copy 01NAV96B.ZIP to your Norton AntiVirus folder. The default location is C:\WIN32APP\NAVNT 2. Verify PKUNZIP.EXE can be found somewhere along the PATH. For example, if PKUNZIP.EXE is located in \PKWARE, typing "SET" at a DOS prompt should show your path to look something like the following: PATH=C:\NAV;C:\WINDOWS;C:\PKWARE 3. At the command prompt, type: PKUNZIP -O 01NAV96B.ZIP 4. After the files are extracted successfully, you may delete the compressed file. 5. Initiate a scan with Norton AntiVirus to activate the new virus definitions. =============================================================================== UPDATE.TXT - Updating the Norton Antivirus Virus Definitions (cont) Symantec AntiVirus Research Center =============================================================================== Final Notes: Please read JAN96B.TXT for a detailed list of the new virus definitions in this update and important information about current worldwide virus alerts. We welcome your comments and suggestions. Please post them wherever you download this file. Thank you for using SYMANTEC/Peter Norton products.