Home Page
Search
Site Contents

Quick Start Guide: Command's F-PROT Professional for Windows NT

• System Requirements
• Installation
• Setup for Network Administrators
• Overview of Features
• Scanning Features
• Viewing Scan results
• Messaging Capabilities
• Testing F-PROT Professional
• Creating a Rescue Disk
• Removing F-PROT from your System

SYSTEM REQUIREMENTS

To operate Command's F-PROT Professional for Windows NT, you will need to have Microsoft Windows NT 3.51 or above installed on an IBM-compatible computer. NT 3.51 systems must be at Service Pack 5.

INSTALLATION

There are two sets of installation instructions: Standard Installation and Setup for Network Administrators. Choose the one that is best suited for your situation.

Standard Installation Instructions

To install F-PROT Professional you have to be logged on as a member of local administrators group.

1. Insert disk 1 and click on the "Start" button (NT 4.0) or pull down the "File" menu of Program Manager(NT 3.51).
2. Select "Run", and type A:\SETUP (assuming that you are using your A: floppy drive).
3. Choose either "Default" or "Custom" configuration. The "Default" installation allows workstation users to set up Command's F-PROT Professional for Windows NT on their local computers. "Custom" lets you select the components that you want installed.
4. If your computer is connected to a network, the next dialog box that appears is the "Service Account for Network Scans". There is a check box at the bottom that says "I'd like to be able to schedule scans of network drives". By default, the box is selected. If you clear this checkbox, scanning of network drives will be limited to manual scans. If you clear the check box, and click "Next", the installation begins. If you do not clear the check box, a "Command Software AV Scheduling Service" dialog box opens.
5. In the "AV Scheduling Service" dialog box, the current user information is displayed by default. If you are using your current account, enter your current password. If you wish to change the information please use an account that meets the following criteria:
   1. The Username must reflect an existing account.
   2. The account must have rights to access network drives.
   3. Scanning requires that the user has Read access. To disinfect, quarantine or delete the user must have Write access.

   NOTE: If possible use a password that does not expire. If you change the password for this account, you must change it in Command's F-PROT Professional. (Preferences|Advanced|Service Account) If your password expires, scheduled scans will not function on network drives.

   Manual scans of local and network drives are allowed and DVP is active by default.

6. You are asked if you wish to make a rescue disk. If so, insert a clean diskette into the floppy drive. Command's F-PROT Professional will format the diskette and add the necessary files. (NOTE: Select NO when asked to format another diskette.)
7. When SETUP is complete, the Setup Complete dialog box displays. Select finish and you are done!

   *The rescue disk that can be created during installation contains a copy of the computer's MBR (master boot record) and a copy of its boot sector. The rescue disk does not contain boot files. Should you need to use the rescue disk, you will need to boot the computer with a separate boot disk. Then you can use our Fixdisk program to restore your hard drive.

The NETADMIN parameter can be added to the command line when installing Command's F-PROT Professional for Windows NT. Using this command sets up an area on the network for users to install from such that individual diskettes are not needed for each workstation. Plus, by using the NETADMIN command, the System Administrator can control some key functions of Command's F-PROT Professional, such as preventing a user from turning off real-time protection, manual scanning of network drives and disabling a users ability to disinfect viruses.

To use this capability, follow these steps:

1. Insert setup disk #1 and select "Start" (NT 4.0) or pull down the "File" menu of Program Manager (NT 3.51).
2. Select "Run" and type A:\SETUP NETADMIN (assuming that you are using your A: floppy drive).
3. After the Welcome screen, the Network Setup Configuration dialog box will open. Enter the location on the network where the shared components of Command's F-PROT Professional are to be copied, as these files must be in a central location. Please use a UNC path that does not include spaces. This is necessary because InstallShield's SETUP.EXE is 16-bit application, and spaces included in a path will cause an error.

   For example: \\SERVER\SHARED\INSTALL\SHARE

   These files include F-PROT.EXE, the .FPT files (F-PROT Task), Help files, the Readme file, and assorted .DLL's.

4. Enter the location for the SETUP components. This is the area on the network that users will access so that they can install Command's F-PROT Professional. Please use a UNC path that does not include spaces. This is necessary because InstallShield's SETUP.EXE is 16-bit application, and spaces included in a path will cause an error.

   For example: \\SERVER\SHARED\INSTALL\SETUP

5. There is a check box that controls whether you want users to be able to scan network drives. Decide which is best for you. If you clear the checkbox, go to step 8.
6. Select "Next".
7. The following screen lets you enter information about the account that users will use for scheduled scans of network drives. Please use an account that meets the following criteria:
   1. The Username must reflect an existing account.
   2. The account must have rights to access network drives.
   3. Scanning requires that the user has Read access. To disinfect, quarantine or delete the user must have Write access.
   4. The account should be accessible for all users.

   NOTE: If possible, use a password that does not expire. If you change the password for this account, you must also update it in Command's F-PROT Professional. (Preferences|Advanced|Service Account). If the password expires, scheduled scans will not function on network drives.

8. Choose "Next". Setup will begin and you will be requested to insert the additional diskettes.
9. The F-PROT Config dialog box will open. Fill in your name and company information.
10. Select "Options" to view or modify Command's F-PROT capabilities. Select or clear the choices and then either "Save" your settings or choose "Cancel".
11. Setup will continue and a final dialog box opens to confirm that the installation was successful.

By running CLIENT.BAT from the workstation, all the components necessary to run Command's F-PROT Professional are automatically installed with a minimum of user intervention. SILENT.BAT does the same installation, however, NO user intervention is needed. The result of this installation is to have DVP (real-time protection) installed on the local workstation as well as having CSS AV Scheduler installed so that scheduled scans can occur. These components (CSS AVS and other files) are located in %SYSTEMROOT%\SYSTEM32\ and similarly, CSS DVP is located in %SYSTEMROOT%\SYSTEM32\DRIVERS. (%SYSTEMROOT% indicates where Windows NT is installed.)

LCLIENT.BAT or LSILENT.BAT function as described above except that all of Command's F-PROT Professional's components are installed on the local workstation.

After installation, you can access Command's F-PROT Professional by double-clicking on the blue "F" in the tray on the right side of the taskbar. Or, if you wish, you may create a permanent shortcut as describe next.

Creating A Shortcut:

If you are using Windows NT 4.0 you may want to create a shortcut for easy access to Command's F-PROT. There are many ways to create shortcuts. The following is one example.

1. Right click on the desktop.
2. Click on "New".
3. Click on "Shortcut".
4. Select "Browse".
5. Double-click on "Program Files".
6. Double-click on "Command Software".
7. Double-click on "F-PROTNT".
8. Select "F-PROT32.EXE" then choose "Open".
9. Choose "Next" and select "Finish".

OVERVIEW OF COMMAND'S F-PROT PROFESSIONAL FEATURES

The latest version of Command's F-PROT Professional for Windows NT provides full on access protection against viruses, even for Microsoft's Office 97 file formats.

The product offers the following benefits:

• Windows NT compliance includes a 32-bit scanner and a kernel-mode driver with support for long file names and Universal Naming Convention (UNC) path names.
• A service that allows scheduled scans to run in the background on both local and network drives.
• Right mouse support allows you to easily start a scan on any file or folder.
• Installation is an easy one-step process.
• Real-time scanning of files and disks as they are accessed by the kernel-mode driver.
• Separate administrative and user-defined tasks.
• Automatic isolation of virus infections to a quarantine folder.
• Administrator can create tasks that cannot be modified by users.
• Complete scheduling assigns scans to a specific day, week, month or after periods of inactivity.
• Fully configurable inclusion/exclusion of files and folders from the scan list.
• Scans PKZIP compressed files and compressed executables including PKLITE, DIET and ICE-PACK.
• Safely removes viruses from files, boot sectors and partition tables.
• Enterprise-wide messaging capabilities include electronic mail.
• Companion product notification (F-PROT Professional for NetWare).
• A comprehensive virus database allows you to identify the type and origin of virus infection.
• NCSA-certified for effective virus protection.

SCANNING FEATURES

Scheduled Scans:

Command's F-PROT Professional for Windows NT includes a service (CSS AV Scheduler) that runs scheduled and inactivity scans in the background. With this feature, the users' work flow is not interrupted while Command's F-PROT Professional's anti-virus protection operates invisibly behind the scenes. A scan may be scheduled for a specific day, week or month. You may specify the time you want the scan to occur, or you may schedule a scan to run after a specified time of inactivity. To create a daily scheduled scan of your hard drive, highlight "Scan Hard Drives" then click on the Properties button. From the properties screen click on the Schedule button and be sure the Enable Scheduling option has a check mark in it. Specify the time of day in 24-hour format with 00:00 indicating midnight. Scheduled scans will be skipped if the computer is not on during the specified time.

Quick Scans:

Within Command's F-PROT Professional for Windows NT, you can activate a shortcut menu that allows you to perform fast and efficient virus scans of selected folders or files. The files or folder to be scanned can be located in Windows NT's Explorer, on the desktop or within program groups. To perform a scan from the shortcut menu, highlight one or more filenames or folders that you wish to scan and click the right mouse button. A Windows NT shortcut menu containing Command's F-PROT Virus Scan option will appear. Select that option by using either a right or left mouse click. The scan will begin immediately.

Another way to scan files quickly is via Command's F-PROT Professional drag and drop abilities. To use this feature, you must have Command's F-PROT Professional interface open on your desktop. From Explorer or from the desktop, click on the object you want scanned and drag the files or folders anywhere over Command's F-PROT window: then release the mouse button. When the button is released, the scan starts immediately and a report window appears when the scan completes.

Important: The drag and drop properties are based on Command's F-PROT Professional's default scan. Thus, if a virus is found, you receive notification only. You must then scan the file with a task that allows disinfection or whatever other action you use for viruses. Administrators, however, can create a custom drag and drop tasks as follows:

1. Select the New Task button and name the task DragDrop. It is necessary to use this precise task name. The name is not case sensitive, but you cannot include spaces.
2. Select the desired Action to take from the available options.
3. Anything entered in the Drive/paths to scan box will be ignored and the selected file(s)are scanned instead. Options in the Files box can be modified as usual.
4. When complete, click on the folder/file (either on the desktop or in Explorer) that you want scanned and drag it into the open F-PROT Professional window. The file created is named DragDrop.FPT.

Command's F-PROT Professional for Windows NT safely removes viruses from documents, boot sectors and partition tables. After installation, a manual scan may be started simply by clicking the desired task name and then clicking the Execute Task button. This will start a scan that, by default, gives a report if a virus is found. Should a virus be detected, disinfection will not occur until the action to take is modified. This can be done by selecting a task name, then clicking on the Properties button and selecting the Action To Take pull-down menu.

Custom Scans:

Command's F-PROT Professional for Windows NT comes configured with standard scanning tasks. If you would like to create your own custom scan, this can be accomplished quickly and easily. To do this, click on New Task button and name the task. The Properties dialog box will open where you can select the action to take, the drive/path to scan, and files to scan. You may also set up a schedule from here.

Memory Scanning:

Memory scanning is available by choosing Active Protection from the Preferences menu. Click on the Memory Scanning tab and choose the option you prefer.

User-Defined Virus Strings:

Command's F-PROT Professional for Windows NT provides the ability to create User-Defined Virus Strings. This option is useful when a new virus warning is posted and you have not yet had time to obtain a virus signature update. Should you ever need to use a User-Defined search string, be sure you have a check in the User-Defined virus strings check box, located in the Command's F-PROT Professional's Properties window.

Dynamic Virus Protection:

Dynamic Virus Protection (DVP) provides real-time protection against viruses by scanning the boot sector every time a floppy disk is read and scanning every program file prior to execution. From the Preferences/Active Protection menu, you may enable or disable DVP and select whether to scan floppy drives, local hard drives, or network drives. You may also select the action to take on infection.

DVP, the kernel mode driver that provides the real-time protection, actually consists of three drivers:

1. CSS-REC.SYS takes care of file systems and media changes.
2. CSS-FLTR.SYS handles events such as opens, closes and renames.
3. CSS-DVP.SYS which is the scan engine.

VIEWING SCAN RESULTS

Scan results logged in Event Viewer:

If Command's F-PROT Professional finds a virus during a scheduled scan or in real-time (using DVP), it logs the occurrence to the Windows NT Event Viewer. Viruses found by DVP are logged to Event Viewer's System log and viruses found during scheduled scans are logged to the Application log.

Displaying scan results in real-time:

The Real-time and Scheduled Scan Statistics dialog box lets you see the results and number of files scanned during scheduled scans and real-time (DVP) scans. If you would like to view scanning statistics, position your cursor over the F-Agent icon (the blue "F") in the Windows NT task tray and perform a right mouse click. A pop-up menu appears. Choose Get Statistics from that pop-up menu and a statistics box displays on your screen.

Viewing results of manual scans:

Statistics for manual scans (scan tasks initiated directly from the Command's F-PROT Professional window) appear in the Scan Results window that appears when the scan completes.

MESSAGING CAPABILITIES

Command's F-PROT Professional provides enterprise-wide messaging capabilities, including electronic mail, that utilize MAPI (Messaging Application Programming Interfaces).

TESTING COMMAND'S F-PROT PROFESSIONAL

For testing purposes, there is a self-extracting file provided on the distribution diskettes called SE_EICAR.EXE. If you run this file you will find a test file called EICAR.COM (from the European Institute for Computer Anti-Virus Research) which allows you to verify that your anti-virus protection is properly installed and real-time protection is active. EICAR.COM lets you safely test custom messages you create and also provides a way to demonstrate what happens when a virus is found.

To test the F-PROT scanner you can either copy EICAR.COM to your hard drive and scan or you can leave it on a diskette and then scan that diskette. To test the real-time protection of DVP, simply run or copy the file.

If DVP is not active, when you run EICAR.COM, the following message will display:

	"EICAR-STANDARD-ANTIVIRUS-TEST-FILE!"

	DVP for Windows NT: Virus detected
	A:\ EICAR.COM Infection: EICAR_Test_File

CREATING A RESCUE DISK

If you chose not to make a rescue disk during installation, you can either run the setup program again and one will be created automatically for you or you can create one manually. Be sure that your system has been checked for viruses prior to beginning this task.

Creating an F-PROT rescue disk manually:

The goal of Command's F-PROT rescue disk is to provide you with a diskette that allows you to boot your system to DOS and then run Command's F-PROT Professional for DOS from the diskette. Before beginning this process, run Command's F-PROT Professional to be sure your system is free of viruses. The following instructions assume you have DOS on your Windows NT computer.

The first thing you will need to do is copy the necessary DOS system files to the diskette. This is done by formatting a high-density diskette by using the following command:

		FORMAT A:  /S

To add Command's F-PROT for DOS files to your rescue disk, copy the files listed below. They can be obtained from the installation diskettes or from Command's F-PROT directory that was created during installation. It is also acceptable simply to use the installation diskette containing F-PROT.EXE to run Command's F-PROT for DOS.

		F-PROT.EXE
		SIGN.DEF
		ENGLISH.TX0

REMOVING F-PROT FROM YOUR SYSTEM

Command's F-PROT Professional for Windows NT can be easily removed should you wish to do so. To remove Command's F-PROT Professional, perform the following steps:

1. Double-click on "My Computer".
2. Double-click on "Control Panel".
3. Double-click on "Add/Remove Programs".
4. Click on "F-PROT for Windows NT".
5. Click on "Remove".