![]() |
Home Page
|
Quick Start Guide: Command's F-PROT Professional for Windows NT
SYSTEM REQUIREMENTS To operate Command's F-PROT Professional for Windows NT, you will need to have Microsoft Windows NT 3.51 or above installed on an IBM-compatible computer. NT 3.51 systems must be at Service Pack 5. INSTALLATION It is strongly recommended that you exit all Windows programs before running the setup program. The installation disk set consists of 4 diskettes. There are two sets of installation instructions: Standard Installation and Setup for Network Administrators. Choose the one that is best suited for your situation. Standard Installation Instructions To install F-PROT Professional you have to be logged on as a member of local administrators group.
The NETADMIN parameter can be added to the command line when installing Command's F-PROT Professional for Windows NT. Using this command sets up an area on the network for users to install from such that individual diskettes are not needed for each workstation. Plus, by using the NETADMIN command, the System Administrator can control some key functions of Command's F-PROT Professional, such as preventing a user from turning off real-time protection, manual scanning of network drives and disabling a users ability to disinfect viruses. To use this capability, follow these steps:
By running CLIENT.BAT from the workstation, all the components necessary to run Command's F-PROT Professional are automatically installed with a minimum of user intervention. SILENT.BAT does the same installation, however, NO user intervention is needed. The result of this installation is to have DVP (real-time protection) installed on the local workstation as well as having CSS AV Scheduler installed so that scheduled scans can occur. These components (CSS AVS and other files) are located in %SYSTEMROOT%\SYSTEM32\ and similarly, CSS DVP is located in %SYSTEMROOT%\SYSTEM32\DRIVERS. (%SYSTEMROOT% indicates where Windows NT is installed.) LCLIENT.BAT or LSILENT.BAT function as described above except that all of Command's F-PROT Professional's components are installed on the local workstation. After installation, you can access Command's F-PROT Professional by double-clicking on the blue "F" in the tray on the right side of the taskbar. Or, if you wish, you may create a permanent shortcut as describe next. Creating A Shortcut: If you are using Windows NT 4.0 you may want to create a shortcut for easy access to Command's F-PROT. There are many ways to create shortcuts. The following is one example.
OVERVIEW OF COMMAND'S F-PROT PROFESSIONAL FEATURES The latest version of Command's F-PROT Professional for Windows NT provides full on access protection against viruses, even for Microsoft's Office 97 file formats. The product offers the following benefits:
SCANNING FEATURES Scheduled Scans: Command's F-PROT Professional for Windows NT includes a service (CSS AV Scheduler) that runs scheduled and inactivity scans in the background. With this feature, the users' work flow is not interrupted while Command's F-PROT Professional's anti-virus protection operates invisibly behind the scenes. A scan may be scheduled for a specific day, week or month. You may specify the time you want the scan to occur, or you may schedule a scan to run after a specified time of inactivity. To create a daily scheduled scan of your hard drive, highlight "Scan Hard Drives" then click on the Properties button. From the properties screen click on the Schedule button and be sure the Enable Scheduling option has a check mark in it. Specify the time of day in 24-hour format with 00:00 indicating midnight. Scheduled scans will be skipped if the computer is not on during the specified time. Quick Scans: Within Command's F-PROT Professional for Windows NT, you can activate a shortcut menu that allows you to perform fast and efficient virus scans of selected folders or files. The files or folder to be scanned can be located in Windows NT's Explorer, on the desktop or within program groups. To perform a scan from the shortcut menu, highlight one or more filenames or folders that you wish to scan and click the right mouse button. A Windows NT shortcut menu containing Command's F-PROT Virus Scan option will appear. Select that option by using either a right or left mouse click. The scan will begin immediately. Another way to scan files quickly is via Command's F-PROT Professional drag and drop abilities. To use this feature, you must have Command's F-PROT Professional interface open on your desktop. From Explorer or from the desktop, click on the object you want scanned and drag the files or folders anywhere over Command's F-PROT window: then release the mouse button. When the button is released, the scan starts immediately and a report window appears when the scan completes. Important: The drag and drop properties are based on Command's F-PROT Professional's default scan. Thus, if a virus is found, you receive notification only. You must then scan the file with a task that allows disinfection or whatever other action you use for viruses. Administrators, however, can create a custom drag and drop tasks as follows:
Command's F-PROT Professional for Windows NT safely removes viruses from documents, boot sectors and partition tables. After installation, a manual scan may be started simply by clicking the desired task name and then clicking the Execute Task button. This will start a scan that, by default, gives a report if a virus is found. Should a virus be detected, disinfection will not occur until the action to take is modified. This can be done by selecting a task name, then clicking on the Properties button and selecting the Action To Take pull-down menu. Custom Scans: Command's F-PROT Professional for Windows NT comes configured with standard scanning tasks. If you would like to create your own custom scan, this can be accomplished quickly and easily. To do this, click on New Task button and name the task. The Properties dialog box will open where you can select the action to take, the drive/path to scan, and files to scan. You may also set up a schedule from here. Memory Scanning: Memory scanning is available by choosing Active Protection from the Preferences menu. Click on the Memory Scanning tab and choose the option you prefer. User-Defined Virus Strings: Command's F-PROT Professional for Windows NT provides the ability to create User-Defined Virus Strings. This option is useful when a new virus warning is posted and you have not yet had time to obtain a virus signature update. Should you ever need to use a User-Defined search string, be sure you have a check in the User-Defined virus strings check box, located in the Command's F-PROT Professional's Properties window. Dynamic Virus Protection: Dynamic Virus Protection (DVP) provides real-time protection against viruses by scanning the boot sector every time a floppy disk is read and scanning every program file prior to execution. From the Preferences/Active Protection menu, you may enable or disable DVP and select whether to scan floppy drives, local hard drives, or network drives. You may also select the action to take on infection. DVP, the kernel mode driver that provides the real-time protection, actually consists of three drivers:
VIEWING SCAN RESULTS Scan results logged in Event Viewer: If Command's F-PROT Professional finds a virus during a scheduled scan or in real-time (using DVP), it logs the occurrence to the Windows NT Event Viewer. Viruses found by DVP are logged to Event Viewer's System log and viruses found during scheduled scans are logged to the Application log. Displaying scan results in real-time: The Real-time and Scheduled Scan Statistics dialog box lets you see the results and number of files scanned during scheduled scans and real-time (DVP) scans. If you would like to view scanning statistics, position your cursor over the F-Agent icon (the blue "F") in the Windows NT task tray and perform a right mouse click. A pop-up menu appears. Choose Get Statistics from that pop-up menu and a statistics box displays on your screen. Viewing results of manual scans: Statistics for manual scans (scan tasks initiated directly from the Command's F-PROT Professional window) appear in the Scan Results window that appears when the scan completes. MESSAGING CAPABILITIES Command's F-PROT Professional provides enterprise-wide messaging capabilities, including electronic mail, that utilize MAPI (Messaging Application Programming Interfaces). TESTING COMMAND'S F-PROT PROFESSIONAL For testing purposes, there is a self-extracting file provided on the distribution diskettes called SE_EICAR.EXE. If you run this file you will find a test file called EICAR.COM (from the European Institute for Computer Anti-Virus Research) which allows you to verify that your anti-virus protection is properly installed and real-time protection is active. EICAR.COM lets you safely test custom messages you create and also provides a way to demonstrate what happens when a virus is found. To test the F-PROT scanner you can either copy EICAR.COM to your hard drive and scan or you can leave it on a diskette and then scan that diskette. To test the real-time protection of DVP, simply run or copy the file. If DVP is not active, when you run EICAR.COM, the following message will display: "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!"If DVP is active, running EICAR.COM should result in the following message: DVP for Windows NT: Virus detected A:\ EICAR.COM Infection: EICAR_Test_File CREATING A RESCUE DISK If you chose not to make a rescue disk during installation, you can either run the setup program again and one will be created automatically for you or you can create one manually. Be sure that your system has been checked for viruses prior to beginning this task. Creating an F-PROT rescue disk manually: The goal of Command's F-PROT rescue disk is to provide you with a diskette that allows you to boot your system to DOS and then run Command's F-PROT Professional for DOS from the diskette. Before beginning this process, run Command's F-PROT Professional to be sure your system is free of viruses. The following instructions assume you have DOS on your Windows NT computer. The first thing you will need to do is copy the necessary DOS system files to the diskette. This is done by formatting a high-density diskette by using the following command: FORMAT A: /SOnce the DOS system files are on the diskette, you can then add Command's F-PROT for DOS files, the FIXDISK utility and your system's Master Boot Record (MBR) information to your rescue disk. The FIXDISK utility is used to add your computer's MBR information to your rescue disk. That information could prove valuable should a virus later infect your system. For further instructions on how to use the FIXDISK utility, simply run FIXDISK without any command line options: a screen containing instructions on how to use FIXDISK will appear. To add Command's F-PROT for DOS files to your rescue disk, copy the files listed below. They can be obtained from the installation diskettes or from Command's F-PROT directory that was created during installation. It is also acceptable simply to use the installation diskette containing F-PROT.EXE to run Command's F-PROT for DOS. F-PROT.EXE SIGN.DEF ENGLISH.TX0Important: You can run Command's F-PROT Professional from DOS only if your primary partition for Windows is FAT, not NTFS. REMOVING F-PROT FROM YOUR SYSTEM Command's F-PROT Professional for Windows NT can be easily removed should you wish to do so. To remove Command's F-PROT Professional, perform the following steps:
|