30A02.TXT - Description file for NAV 3.0's definitions update
AntiVirus Lab, SYMANTEC/Peter Norton Product Group
December 1, 1993
******************************************************************

		   Loading New Definitions

To update NAV 3.0 or NAV for NetWare 1.0 with new virus definitions,
do the following:

Note:  The files contained on this disk, referred to as a virus
       definition update set, completely replaces the corresponding
       files contained within the product.  Only the latest virus
       definition set is required to update the product.

******************************************************************

For NAV 3.0, from DOS:

1) Insert the definition update disk into the floppy disk drive.
   (The example below uses A: drive.)

2) To update the definition files, type the following at the DOS prompt:

   COPY A:\NAV30\VIR*.* C:\NAV

   where "C:\NAV" is the directory where your antivirus software is
   installed.

3) Run NAV and invoke the scanning of a file, directory, or drive.
   (Running NAV to scan something will make NAV recognize that a new
    VIRSCAN.DAT is in place and rebuild the TSR components of NAV with
    the new definition set.)

4) Reboot so that the new TSRs will be in effect.

******************************************************************

For NAV 3.0, from WIN:

1) Insert the definition update disk into the floppy disk drive.
     (The example below uses A: drive.)

2) Execute the Windows File Manager or other Windows shell program that
   supports FILE/COPY operations.  The Windows File Manager can be invoked
   from within the Windows Main Program Group or by entering WINFILE.EXE on
   the FILE/RUN menu.

3) Select the A: drive and \NAV30 directory by clicking on the A: drive icon
   and then clicking on the \NAV30 directory.

4) Use the FILE menu and COPY selection to invoke the copy file dialog.
   Fill in the copy file dialog with the following information:
     (where "C:\NAV" is the directory where your antivirus software is
     installed.)

     Source:	   A:\NAV30\VIR*.*

     Destination:  C:\NAV

   Click on OK to execute the copy.

5) Invoke NAV to scan a file, directory, or drive.
   (Running NAV to scan something will make NAV recognize that a new
    VIRSCAN.DAT is in place and rebuild the TSR components of NAV with
    the new definition set.)

   Note:  An alternative to the above procedure is to activate a DOS box
	  from within Windows and follow the DOS installation procedure.

6) Exit Windows.  Reboot so that the new TSRs will be in effect.

******************************************************************

For NAVUPDATE (Network Copy of NAV for distribution by NAVUPDATE), from DOS:

1) Insert the definition update disk into the floppy disk drive.
   (The example below uses A: drive.)

2) To update the definition files, type the following at the DOS prompt:

   COPY A:\NAV30\VIR*.* F:\ADMIN\NAVUPDAT

   where "F:\ADMIN\NAVUPDAT" is the directory where NAVUPDATE resides.

   next

   COPY A:\NAV30\NAVNET\INSC*.* F:\ADMIN\NAVUPDAT

3) The new definition files are now in place.

******************************************************************

For NAV for NetWare 1.0, from DOS:

1) Map a drive letter (the example below uses H:) to the volume and
   directory where NAV for NetWare is installed.

2) Insert the definition update disk into the floppy drive 
   (the example below uses A:).

3) To update the definition files, type the following at the DOS prompt:

   COPY A:\NAV30\VIR*.* H:

   where H: is mapped to the volume/directory where NAV for NetWare is
   installed.

4) Disable, then Enable, NAV for NetWare, using either the NAV for NetWare
   Windows configuration component, or at the server console using the
   function keys.  This loads the new definitions for use.

******************************************************************

Virus Alerts:

Be on alert for the following viruses in the following areas:

	Athens			South America (Chile, Brasil)
	CPW2			South America, Northeast US
	Exebug.D		Australia
	Form			Everywhere
	Monkey			North America
	Parity Boot		Europe (Germany)
	Satan Bug		US Govt contacts
	Stealth.B		Eastern US
	Tremor			Europe (Germany)
	V-Sign			Eastern US
	WXYC			North Carolina universities

The following changes have been incorporated into this update:

New:

	Chang			file infector
	Exebug.B		boot infectors
	Exebug.C
	Exebug.D
	Exebug.Hooker
	Golgi.465		file infectors
	Golgi.605
	Golgi.820
	November 17th.800	file infector
	Npox.1482		file infector
	PCBB.1837		file infector
	QRRY Boot		boot infector
	Stoned.Empire.In Love	boot infector
	Stoned.Whit (Stoned.Lzr)	boot infector

Updates of present definitions:

	Stealth.B		name changed from Stealth
	Stoned.Flame		name changed from Stoned (3C)
	V-Sign			more strains