Symantec Norton AntiVirus antivirus software User's guide

User’s Guide
Norton AntiVirus™ User’s Guide
Documentation version 9.0
PN: 10023593
Copyright Notice
Copyright © 2002 Symantec Corporation
All Rights Reserved.
Any technical documentation that is made available by Symantec Corporation is the
copyrighted work of Symantec Corporation and is owned by Symantec Corporation.
NO WARRANTY. The technical documentation is being delivered to you AS-IS and
Symantec Corporation makes no warranty as to its accuracy or use. Any use of the
technical documentation or the information contained therein is at the risk of the user.
Documentation may include technical or other inaccuracies or typographical errors.
Symantec reserves the right to make changes without prior notice.
No part of this publication may be copied without the express written permission of
Symantec Corporation, 20330 Stevens Creek Blvd., Cupertino, CA 95014.
Trademarks
Symantec, the Symantec logo, Norton SystemWorks, LiveUpdate, Norton AntiVirus, and
Norton Utilities are U.S. registered trademarks of Symantec Corporation. Rescue Disk is a
trademark of Symantec Corporation.
Microsoft, MSN, Windows, and the Windows logo are registered trademarks of Microsoft
Corporation. AOL and CompuServe are registered trademarks of America Online, Inc.
Prodigy Internet is a trademark of Prodigy. Pentium is a registered trademark of Intel
Corporation. Yahoo! is a registered trademark of Yahoo! Inc.
Other product names mentioned in this manual may be trademarks or registered
trademarks of their respective companies and are hereby acknowledged.
Printed in the United States of America.
10 9 8
7 6 5 4 3
2 1
SYMANTEC SOFTWARE LICENSE AGREEMENT
IMPORTANT: PLEASE READ THE TERMS AND
CONDITIONS OF THIS LICENSE AGREEMENT
CAREFULLY BEFORE USING THE SOFTWARE.
SYMANTEC CORPORATION AND/OR ITS SUBSIDIARIES
(“SYMANTEC”) IS WILLING TO LICENSE THE SOFTWARE
TO YOU AS THE INDIVIDUAL, THE COMPANY, OR THE
LEGAL ENTITY THAT WILL BE UTILIZING THE
SOFTWARE (REFERENCED BELOW AS “YOU” OR
“YOUR”) ONLY ON THE CONDITION THAT YOU ACCEPT
ALL OF THE TERMS OF THIS LICENSE AGREEMENT. THIS
IS A LEGAL AND ENFORCEABLE CONTRACT BETWEEN
YOU AND SYMANTEC. BY OPENING THIS PACKAGE,
BREAKING THE SEAL, CLICKING ON THE “AGREE” OR
“YES” BUTTON OR OTHERWISE INDICATING ASSENT
ELECTRONICALLY, OR LOADING THE SOFTWARE, YOU
AGREE TO THE TERMS AND CONDITIONS OF THIS
AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS
AND CONDITIONS, CLICK ON THE “I DO NOT AGREE” OR
“NO” BUTTON, OR OTHERWISE INDICATE REFUSAL,
MAKE NO FURTHER USE OF THE SOFTWARE, AND
RETURN THE FULL PRODUCT WITH PROOF OF
PURCHASE TO THE DEALER FROM WHOM IT WAS
ACQUIRED WITHIN SIXTY (60) DAYS OF PURCHASE,
AND YOUR MONEY WILL BE REFUNDED.
1. LICENSE:
The software which accompanies this license (collectively
the “Software”) is the property of Symantec or its licensors
and is protected by copyright law. While Symantec
continues to own the Software, You will have certain rights
to use the Software after Your acceptance of this license.
This license governs any releases, revisions, or
enhancements to the Software that Symantec may furnish
to You. Except as may be modified by a Symantec license
certificate, license coupon, or license key (each a “License
Module”) which accompanies, precedes, or follows this
license, Your rights and obligations with respect to the use
of this Software are as follows:
YOU MAY:
A. use one copy of the Software on a single computer. If a
License Module accompanies, precedes, or follows this
license, You may make that number of copies of the
Software licensed to You by Symantec as provided in Your
License Module. Your License Module shall constitute
proof of Your right to make such copies.
B. make one copy of the Software for archival purposes, or
copy the Software onto the hard disk of Your computer and
retain the original for archival purposes;
C. use the Software on a network, provided that You have a
licensed copy of the Software for each computer that can
access the Software over that network; and
D. after written notice to Symantec, transfer the Software
on a permanent basis to another person or entity, provided
that You retain no copies of the Software and the
transferee agrees to the terms of this license.
YOU MAY NOT:
A. copy the printed documentation which accompanies the
Software;
B. sublicense, rent or lease any portion of the Software;
reverse engineer, decompile, disassemble, modify,
translate, make any attempt to discover the source code of
the Software, or create derivative works from the Software;
C. use a previous version or copy of the Software after You
have received a disk replacement set or an upgraded
version. Upon upgrading the Software, all copies of the
prior version must be destroyed;
D. use a later version of the Software than is provided
herewith unless You have purchased upgrade insurance or
have otherwise separately acquired the right to use such
later version;
E. use, if You received the software distributed on media
containing multiple Symantec products, any Symantec
software on the media for which You have not received a
permission in a License Module; nor
F. use the Software in any manner not authorized by this
license.
2. CONTENT UPDATES:
Certain Symantec software products utilize content that is
updated from time to time (antivirus products utilize
updated virus definitions; content filtering products utilize
updated URL lists; firewall products utilize updated
firewall rules; vulnerability assessment products utilize
updated vulnerability data, etc.; collectively, these are
referred to as “Content Updates”). You may obtain Content
Updates for any period for which You have purchased a
subscription for Content Updates for the Software
(including any subscription included with Your original
purchase of the Software), purchased upgrade insurance
for the Software, entered into a maintenance agreement
that includes Content Updates, or otherwise separately
acquired the right to obtain Content Updates. This license
does not otherwise permit You to obtain and use Content
Updates.
3. SIXTY (60) DAY MONEY BACK GUARANTEE:
If You are the original licensee of this copy of the Software
and are not completely satisfied with it for any reason,
please contact Symantec Customer Service, for a refund of
the money You paid for the Software (less shipping,
handling, and any applicable taxes) at any time during the
sixty (60) day period following the date of purchase.
4. LIMITED WARRANTY:
Symantec warrants that the media on which the Software
is distributed will be free from defects for a period of sixty
(60) days from the date of delivery of the Software to You.
Your sole remedy in the event of a breach of this warranty
will be that Symantec will, at its option, replace any
defective media returned to Symantec within the warranty
period or refund the money You paid for the Software.
Symantec does not warrant that the Software will meet
Your requirements or that operation of the Software will be
uninterrupted or that the Software will be error-free.
THE ABOVE WARRANTY IS EXCLUSIVE AND IN LIEU OF
ALL OTHER WARRANTIES, WHETHER EXPRESS OR
IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NONINFRINGEMENT OF INTELLECTUAL
PROPERTY RIGHTS. THIS WARRANTY GIVES YOU
SPECIFIC LEGAL RIGHTS. YOU MAY HAVE OTHER
RIGHTS, WHICH VARY FROM STATE TO STATE AND
COUNTRY TO COUNTRY.
5. DISCLAIMER OF DAMAGES:
SOME STATES AND COUNTRIES, INCLUDING MEMBER
COUNTRIES OF THE EUROPEAN ECONOMIC AREA, DO
NOT ALLOW THE LIMITATION OR EXCLUSION OF
LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL
DAMAGES SO THE BELOW LIMITATION OR EXCLUSION
MAY NOT APPLY TO YOU.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE
LAW AND REGARDLESS OF WHETHER ANY REMEDY
SET FORTH HEREIN FAILS OF ITS ESSENTIAL PURPOSE,
IN NO EVENT WILL SYMANTEC OR ITS LICENSORS BE
LIABLE TO YOU FOR ANY SPECIAL, CONSEQUENTIAL,
INDIRECT OR SIMILAR DAMAGES, INCLUDING ANY
LOST PROFITS OR LOST DATA ARISING OUT OF THE USE
OR INABILITY TO USE THE SOFTWARE EVEN IF
SYMANTEC HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.
IN NO CASE SHALL SYMANTEC'S OR ITS LICENSORS'
LIABILITY EXCEED THE PURCHASE PRICE FOR THE
SOFTWARE. The disclaimers and limitations set forth
above will apply regardless of whether You accept the
Software.
6. U.S. GOVERNMENT RESTRICTED RIGHTS:
RESTRICTED RIGHTS LEGEND. All Symantec products
and documentation are commercial in nature. The software
and software documentation are “Commercial Items”, as
that term is defined in 48 C.F.R. section 2.101, consisting
of “Commercial Computer Software” and “Commercial
Computer Software Documentation”, as such terms are
defined in 48 C.F.R. section 252.227-7014(a)(5) and 48
C.F.R. section 252.227-7014(a)(1), and used in 48 C.F.R.
section 12.212 and 48 C.F.R. section 227.7202, as
applicable. Consistent with 48 C.F.R. section 12.212, 48
C.F.R. section 252.227-7015, 48 C.F.R. section 227.7202
through 227.7202-4, 48 C.F.R. section 52.227-14, and
other relevant sections of the Code of Federal Regulations,
as applicable, Symantec's computer software and
computer software documentation are licensed to United
States Government end users with only those rights as
granted to all other end users, according to the terms and
conditions contained in this license agreement.
Manufacturer is Symantec Corporation, 20330 Stevens
Creek Blvd., Cupertino, CA 95014.
7. EXPORT REGULATION:
Export, re-export of this Software is governed by the laws
and regulations of the United States and import laws and
regulations of certain other countries. Export or re-export
of Software to any entity on the Denied Parties List and
other lists promulgated by various agencies of the United
States Federal Government is strictly prohibited.
8. GENERAL:
If You are located in North America or Latin America, this
Agreement will be governed by the laws of the State of
California, United States of America. Otherwise, this
Agreement will be governed by the laws of England. This
Agreement and any related License Module is the entire
agreement between You and Symantec relating to the
Software and: (i) supersedes all prior or contemporaneous
oral or written communications, proposals and
representations with respect to its subject matter; and (ii)
prevails over any conflicting or additional terms of any
quote, order, acknowledgment or similar communications
between the parties. This Agreement shall terminate upon
Your breach of any term contained herein and You shall
cease use of and destroy all copies of the Software. The
disclaimers of warranties and damages and limitations on
liability shall survive termination. This Agreement may
only be modified by a License Module which accompanies
this license or by a written document which has been
signed by both You and Symantec. Should You have any
questions concerning this Agreement, or if You desire to
contact Symantec for any reason, please write to: (i)
Symantec Customer Service, 555 International Way,
Springfield, OR 97477, U.S.A. or (ii) Symantec Customer
Service Center, PO BOX 5689, Dublin 15, Ireland.
If you’re installing Norton AntiVirus for the first time
Start here
If you’re installing Norton
AntiVirus for the first time
Start here
Determine which file system your computer uses.
On your desktop, double-click My Computer,
right-click drive C, and click Properties.
Which file system are you using?
1
1
w
FAT (Windows 98/Me/2000/XP)
See “If you use a FAT file system” on page 6.
NTFS (Windows 2000/XP only)
See “If you use an NTFS file system” on page 7.
For detailed instructions and an animated Web tutorial that
walks you through each step of the process, go to
www.service.symantec.com/installtutorial
5
6
If you’re installing Norton AntiVirus for the first time
If you use a FAT file system
If you use a FAT file system
Check for viruses that affect installation.
Insert the Norton AntiVirus CD into your CD-ROM
drive and restart your computer.
If you do not have a Norton AntiVirus CD or
cannot start your computer from a CD, create
Emergency Disks on another uninfected
computer.
See “Create Emergency Disks” on page 22.
Run a full system scan.
Was a virus found?
1
1
w
Yes
Run a virus scan again using the Delete switch.
No
See “Finish installation” on page 8.
For detailed instructions and an animated Web tutorial that
walks you through each step of the process, go to
www.service.symantec.com/installtutorial
If you’re installing Norton AntiVirus for the first time
If you use an NTFS file system
If you use an NTFS file system
Check for viruses that affect installation.
Can you establish a connection to the Internet?
1
1
Yes
Go to http://security.symantec.com and follow
the onscreen instructions to scan for threats.
No
For Windows XP: Go to service.symantec.com
For Windows 2000: Go to service.symantec.com
See “Finish installation” on page 8.
Was a virus found?
1
1
Yes
Write down the name of the virus and go to
http://securityresponse.symantec.com to locate
specific removal instructions.
No
If you have not already done so, install Norton
AntiVirus.
See “Finish installation” on page 8.
w
For detailed instructions and an animated Web tutorial that
walks you through each step of the process, go to
www.service.symantec.com/installtutorial
7
8
If you’re installing Norton AntiVirus for the first time
Finish installation
Finish installation
After you’ve checked for viruses, it’s safe to install
Norton AntiVirus.
Uninstall any other antivirus programs on your
computer.
On your desktop, use the Add/Remove Programs
Control Panel to select the program to uninstall.
Close all open programs on your computer
including the items running in the Windows
system tray.
Install Norton AntiVirus from the Norton AntiVirus
CD.
See “Install Norton AntiVirus” on page 23.
Did you see the message “Norton AntiVirus has
been installed successfully”?
1
1
Yes
See “After installation” on page 27.
No
Write down the error message on the screen
and go to http://service.symantec.com for
further assistance.
Contents
If you’re installing Norton AntiVirus for the first time
Start here .....................................................................................................5
If you use a FAT file system ....................................................................6
If you use an NTFS file system ...............................................................7
Finish installation ......................................................................................8
Chapter 1
About Norton AntiVirus
What’s new in Norton AntiVirus ......................................................... 11
How viruses work ................................................................................... 12
How Norton AntiVirus works .............................................................. 14
How to maintain protection .................................................................. 16
Chapter 2
Installing Norton AntiVirus
System requirements ............................................................................. 19
Before installation .................................................................................. 21
Install Norton AntiVirus ....................................................................... 23
After installation ..................................................................................... 27
If you need to uninstall Norton AntiVirus ......................................... 30
Chapter 3
Norton AntiVirus basics
Access Norton AntiVirus tools ............................................................ 33
Temporarily disable Auto-Protect ....................................................... 35
Maintain Norton AntiVirus protection ............................................... 36
Customize Norton AntiVirus ................................................................ 40
Change Norton AntiVirus options ....................................................... 43
Password protect Norton AntiVirus options ..................................... 45
Monitoring Norton AntiVirus activities ............................................. 45
For more information ............................................................................. 46
10
Contents
Chapter 4
Protecting disks, files, and data from viruses
Ensure that protection settings are enabled ..................................... 51
Manually scan disks, folders, and files .............................................. 52
Create and use custom scans ............................................................... 54
Schedule scans ........................................................................................ 56
Chapter 5
Keeping current with LiveUpdate
About program updates ......................................................................... 59
About protection updates ...................................................................... 60
About your subscription ........................................................................ 60
When you should update ...................................................................... 61
If you run LiveUpdate on an internal network ................................. 61
If you can’t use LiveUpdate .................................................................. 61
Obtain updates using LiveUpdate ....................................................... 62
Set LiveUpdate to Interactive or Express mode ............................... 62
Run LiveUpdate automatically ............................................................. 63
Chapter 6
What to do if a virus is found
If a virus is found during a scan .......................................................... 65
If a virus is found by Auto-Protect ...................................................... 67
If a virus is found by Script Blocking ................................................. 69
If a threat is found by Worm Blocking ............................................... 69
If you have files in Quarantine ............................................................ 70
If Norton AntiVirus cannot repair a file ............................................. 72
If your computer does not start properly ........................................... 72
Look up viruses on the Symantec Web site ...................................... 74
Look up viruses in Norton AntiVirus ................................................. 75
Chapter 7
Troubleshooting
Explore the Symantec service and support Web site ..................... 77
Troubleshoot Norton AntiVirus problems ......................................... 79
Service and support solutions
Glossary
Index
CD Replacement Form
About Norton
AntiVirus
Norton AntiVirus provides comprehensive virus prevention, detection, and
elimination software for your computer. It automatically finds and repairs
infected files to keep your data secure. Easy updating of the virus definition
service over the Internet keeps Norton AntiVirus prepared for the latest
threats. Worm Blocking and Script Blocking increase protection by
detecting new threats before virus definitions are created.
What’s new in Norton AntiVirus
Norton AntiVirus 2003 expands file repair and deletion options and
introduces virus protection for instant messenger attachments, Worm
Blocking, password protection for Norton AntiVirus options, and the Log
Viewer with more detailed visibility into protection activities. The new
features are:
1
1
Expanded file repair and deletion
Norton AntiVirus now automatically repairs all repairable files
without any interaction with you. Additionally, when Norton AntiVirus
finds a worm or Trojan horse, it automatically deletes the infected
file(s).
Instant messenger support and options
Norton AntiVirus now scans files received by America Online, Yahoo!,
and MSN instant messenger programs. You can choose to scan files
received by one or all three programs. Norton AntiVirus automatically
repairs or quarantines the infected file(s).
12
About Norton AntiVirus
How viruses work
1
1
1
Worm Blocking
Norton AntiVirus scans outgoing email attachments for worms and
alerts you before sending any infected files. Norton AntiVirus blocks
the worm and recommends the appropriate action, so you prevent
sending it in an email message.
Password protection
Norton AntiVirus allows you to set, change, and reset a password to
control your option settings, so that unauthorized users can’t tamper
with your virus protection.
Log Viewer
Norton AntiVirus organizes information about virus alerts, application
activities, and errors. You determine how many activities you want to
record.
How viruses work
A software virus is a parasitic program written intentionally to alter the
way your computer operates without your permission or knowledge. A
virus attaches copies of itself to other files and, when activated, may
damage files, cause erratic system behavior, or display messages.
Computer viruses infect system files and documents created by programs
with macro capabilities. Some system viruses are programmed specifically
to corrupt programs, delete files, or erase your disk.
Macro viruses spread quickly
Macros are simple programs that are used to do things such as automate
repetitive tasks in a document or make calculations in a spreadsheet.
Macros are written in files created by such programs as Microsoft Word
and Microsoft Excel.
Macro viruses are malicious macro programs that are designed to replicate
themselves from file to file and can often destroy or change data. Macro
viruses can be transferred across platforms and spread whenever you open
an infected file.
About Norton AntiVirus
How viruses work
Trojan horses hide their true purposes
Trojan horses are programs that appear to serve some useful purpose or
provide entertainment, which encourages you to run them. But the
programs also serve a covert purpose, which may be to damage files or
place a virus on your computer.
A Trojan horse is not a virus because it does not replicate and spread like a
virus. Because Trojan horses are not viruses, files that contain them cannot
be repaired. To ensure the safety of your computer, Norton AntiVirus
detects Trojan horses so you can delete them from your computer.
Worms take up space
Worms are programs that replicate without infecting other programs. Some
worms spread by copying themselves from disk to disk. They search for
specific types of files and try to damage or destroy those files. Worms
replicate only in memory, creating myriad copies of themselves, all
running simultaneously, which slows down the computer. Other worms
spread through your email address list and can email themselves without
you knowing. Like Trojan horses, worms are not viruses and therefore
cannot be repaired. They must be deleted from your computer.
How viruses spread
A virus is inactive until you launch an infected program, start your
computer from a disk that has infected system files, or open an infected
document. For example, if a word processing program contains a virus, the
virus activates when you run the program. Once a virus is in memory, it
usually infects any program you run, including network programs (if you
can make changes to network folders or disks).
Viruses behave in different ways. Some viruses stay active in memory until
you turn off your computer. Other viruses stay active only as long as the
infected program is running. Turning off your computer or exiting the
program removes the virus from memory, but does not remove the virus
from the infected file or disk. That is, if the virus resides in an operating
system file, the virus activates the next time you start your computer from
the infected disk. If the virus resides in a program, the virus activates the
next time you run the program.
To prevent virus-infected programs from getting onto your computer,
Norton AntiVirus automatically scans files before you copy or run them.
13
14
About Norton AntiVirus
How Norton AntiVirus works
This includes programs you download from news groups or Internet Web
sites and any email attachments that you receive.
Viruses spread through email and instant messenger attachments. Norton
AntiVirus monitors incoming and outgoing email messages and instant
messenger attachments for potential threats.
How Norton AntiVirus works
Norton AntiVirus monitors your computer for known and unknown viruses.
A known virus is one that can be detected and identified by name. An
unknown virus is one for which Norton AntiVirus does not yet have a
definition.
Norton AntiVirus continually monitors your computer to protect you from
both types of viruses, using virus definitions to detect known viruses, and
Bloodhound technology, Script Blocking, and Worm Blocking to detect
unknown viruses. Virus definitions, Bloodhound technology, Script
Blocking, and email and instant messenger scanning are all used during
scheduled scans and manual scans, and are used by Auto-Protect to
constantly monitor your computer.
The virus definition service stops known viruses
See “Look up
viruses in Norton
AntiVirus” on
page 75.
The virus definition service consists of files that Norton AntiVirus uses to
recognize viruses and intercept their activity. You can look up virus names
in Norton AntiVirus, and access an encyclopedia of virus descriptions on
the Symantec Web site.
Bloodhound technology stops unknown viruses
Bloodhound is the Norton AntiVirus scanning technology for detecting new
and unknown viruses. It detects viruses by analyzing a file’s structure,
behavior, and other attributes such as programming logic, computer
instructions, and any data contained in the file. It also sets up simulated
environments in which to load documents and test for macro viruses.
Script Blocking stops script-based viruses
A script is a program written with a scripting language, such as Visual
Basic Script or JavaScript and can be executed without user interaction.
Scripts can be opened with text editors or word processing programs, so
they are very easy to change.
About Norton AntiVirus
How Norton AntiVirus works
Scripts can be used when you log on to the Internet, or check your email.
Restarting your computer involves using scripts that tell your computer
what programs to load and run.
A script can also be written to perform malicious activities when it is
launched. You can unknowingly receive a malicious script by opening an
infected document or email attachment, viewing an infected HTML email
message, or visiting an infected Internet Web site.
Script Blocking detects Visual Basic and JavaScript viruses without the
need for specific virus definitions. It monitors the scripts for virus-like
activity and alerts you if it is found.
Worm Blocking stops worms before they spread
Worms hide in files and are not active or dangerous until the files are
opened. You can unknowingly copy or send an infected file by email. A file
infected with a worm cannot be repaired; it must be deleted.
Worm Blocking scans all outgoing email messages and alerts you if a
malicious worm is detected. Once a worm is detected, Norton AntiVirus
blocks the worm and recommends the appropriate action, so you prevent
sending it in an email message.
Auto-Protect keeps you safe
Norton AntiVirus Auto-Protect loads into memory when Windows starts,
providing constant protection while you work.
Using Auto-Protect, Norton AntiVirus automatically:
1
1
1
1
Eliminates viruses, worms, and Trojan horses, including macro
viruses, and repairs damaged files
Checks for viruses every time you use software programs on your
computer, insert floppy disks or other removable media, or use
document files that you receive or create
Monitors your computer for any unusual symptoms that may indicate
an active virus
Protects your computer from Internet-borne viruses
15
16
About Norton AntiVirus
How to maintain protection
How to maintain protection
When Norton AntiVirus is installed, you have complete virus protection.
However, new viruses are created constantly. Viruses can spread when you
start your computer from an infected disk or when you run an infected
program. There are several things you can do to avoid viruses and to
recover quickly should a virus strike.
Avoid viruses
It is important that you practice regular file maintenance and that you keep
Norton AntiVirus up-to-date.
To avoid viruses:
1
See “About Norton
AntiVirus on the
Web” on page 49.
1
See “Keeping
current with
LiveUpdate” on
page 59.
1
1
1
See “Manually scan
disks, folders, and
files” on page 52.
1
See “Schedule
scans” on page 56.
1
1
1
See “Ensure that
protection settings
are enabled” on
page 51.
Write-protect removable media.
Stay informed about viruses by logging on to the Symantec Security
Response Web site (http://securityresponse.symantec.com) where
there is extensive, frequently updated information on viruses and
virus protection.
Keep LiveUpdate turned on at all times to continually update your
virus definitions files.
Run LiveUpdate regularly to receive new program updates.
Keep Norton AntiVirus Auto-Protect turned on at all times to prevent
viruses from infecting your computer.
If Norton AntiVirus Auto-Protect is not turned on, scan removable
media before you use them.
Schedule periodic scans to occur automatically.
Watch for email from unknown senders. Do not open anonymous
attachments.
Keep Worm Blocking turned on to avoid sending infected email
attachments.
1
Keep Script Blocking turned on to detect any virus-like activity.
1
Keep all recommended maximum protection settings turned on.
About Norton AntiVirus
How to maintain protection
Prepare for emergencies
It is also important that you are prepared in case your computer is infected
by a virus.
To prepare for emergencies:
1
See “Create
Emergency Disks”
on page 22.
1
See “About Rescue
Disks” on page 36.
1
Back up files regularly and keep more than just the most recent
backup.
If you are using a computer that cannot start from a CD, create a set of
Emergency Disks, from which you can start your computer and scan
for viruses.
If you are using Windows 98 or Me, create and keep updated a set of
Rescue Disks, with which you can start your computer in DOS mode
and use Norton AntiVirus to fix virus-related problems and recover
from a system crash.
17
18
About Norton AntiVirus
How to maintain protection
Installing Norton
AntiVirus
Before installing Norton AntiVirus, take a moment to review the system
requirements listed in this chapter. Windows 98 and Windows Me users
should have several blank 1.44 MB disks available to make Rescue Disks.
System requirements
To use Norton AntiVirus, your computer must have one of the following
Windows operating systems:
1
Windows 98/98SE/Me
1
Windows 2000 Professional Edition
1
Windows XP Professional/Home Edition
Installation of Norton AntiVirus is not supported on Windows 95/NT,
Macintosh, Linux, or server versions of Windows 2000/XP computers.
w
If you are planning to upgrade your Windows operating system from
Windows 98/Me to Windows 2000/XP, you must uninstall Norton
AntiVirus first and then reinstall after the upgrade is complete.
20
Installing Norton AntiVirus
System requirements
Your computer must also meet the following minimum requirements.
Operating system Requirements
Windows 98/Me
Windows 2000
Professional
Edition
Windows XP
Professional/
Home Edition
w
1
Intel Pentium processor (or compatible) at 133 MHz for
Windows 98; 150 MHz for Windows Me
1
32 MB of RAM
1
70 MB of available hard disk space
1
Internet Explorer 5.0 or later (5.5 recommended)
1
CD-ROM or DVD-ROM drive
1
Intel Pentium processor (or compatible) at 133 MHz or
higher
1
64 MB of RAM
1
70 MB of hard disk space
1
Internet Explorer 5.0 or later (5.5 recommended)
1
CD-ROM or DVD-ROM drive
1
Intel Pentium processor (or compatible) at 300 MHz or
higher
1
128 MB of RAM
1
70 MB of hard disk space
1
Internet Explorer 5.0 or later (5.5 recommended)
1
CD-ROM or DVD-ROM drive
If you are installing on Windows 2000/XP, you must install with
administrator privileges.
Supported email clients
Email scanning is supported for any POP3 compatible email client
including:
1
Microsoft Outlook Express version 4, 5, or 6
1
Microsoft Outlook 97/98/2000/XP
1
Netscape Messenger version 4, Netscape Mail version 6
1
Eudora Light version 3, Eudora Pro version 4, Eudora version 5
1
Pegasus 4
Installing Norton AntiVirus
Before installation
Email scanning does not support the following email clients:
1
IMAP clients
1
AOL clients
1
POP3s with SSL (Secure Sockets Layer)
1
Web-based email such as Hotmail and Yahoo!
1
Lotus Notes mail
Supported instant messenger clients
1
AOL Instant Messenger, version 4.7 or later
1
Yahoo! Instant Messenger, version 5.0 or later
1
MSN Messenger and Windows Messenger, version 4.6 or later
Before installation
See “Create
Emergency Disks”
on page 22.
Before you install Norton AntiVirus, prepare your computer. If your
computer cannot start from a CD, create Emergency Disks.
If you suspect that you have a virus
See “Start here” on
page 5.
If you try to install and your computer has a virus, Norton AntiVirus
requests that you restart your computer. Restart from the Norton AntiVirus
CD and scan your computer’s hard disk for viruses. The Norton AntiVirus
emergency program uses the virus definitions from the Norton AntiVirus
CD, and is not as up-to-date as virus definitions downloaded using
LiveUpdate.
Once the virus has been repaired, delete the Norton AntiVirus install files
in the temporary folder that are left behind after the forced shutdown.
Prepare your computer
See “If you need to
uninstall Norton
AntiVirus” on
page 30.
If you have a version of Norton AntiVirus 2000-2002, the new version
automatically removes the older version. If your version is older than 2000,
you must uninstall it before installing the new version. If you have Norton
AntiVirus 2002, you can transfer your existing option settings to the new
version of the program.
21
22
Installing Norton AntiVirus
Before installation
Before you install Norton AntiVirus, use these suggestions to prepare your
computer:
1
1
If you have any other antivirus programs on your computer, you must
uninstall them and restart your computer before installing Norton
AntiVirus.
To uninstall other antivirus programs, see the user documentation that
came with the program.
Close all other Windows programs before installing Norton AntiVirus,
including those programs displayed in the Windows tray.
Create Emergency Disks
See “If you need to
use Emergency
Disks” on page 74.
Emergency Disks are used to start your computer and scan for viruses in
case of a problem. If your computer can start from a CD, you can use the
Norton AntiVirus CD in place of Emergency Disks and do not need to create
them.
If you cannot start your computer from a CD, you can use these instructions
to create Emergency Disks on another computer or go to
http://www.symantec.com/techsupp/ebd.html and download the
Emergency Disk program. Follow the instructions included in the download
to create the Emergency Disks.
w
You will need several formatted 1.44 MB disks.
To create Emergency Disks from the CD
1
Insert the Norton AntiVirus CD into the CD-ROM drive.
2
Click Browse CD.
3
Double-click the Support folder.
4
Double-click the Edisk folder.
5
Double-click NED.exe.
6
In the welcome window, click OK.
7
Label the first disk as instructed and insert it into drive A.
8
Click Yes.
9
Repeat steps 7 and 8 for the subsequent disks.
10 When the procedure is complete, click OK.
11
Remove the final disk from drive A and store the Emergency Disk set
in a safe place.
Installing Norton AntiVirus
Install Norton AntiVirus
Install Norton AntiVirus
Install Norton AntiVirus from the Norton AntiVirus CD.
To install Norton AntiVirus
See “If the opening
screen does not
appear” on
page 26.
1
Insert the Norton AntiVirus CD into the CD-ROM drive.
2
In the Norton AntiVirus window, click Install Norton AntiVirus.
If your computer is not set to automatically open a CD, you will have to
open it yourself.
w
See “If you need to
use Emergency
Disks” on page 74.
If you downloaded your copy of Norton AntiVirus and are not using a
CD, open the Norton AntiVirus folder and click setup.exe.
3
If you are installing in Windows 98, 98SE, or Me, Norton AntiVirus
scans your computer’s memory for viruses before installing. If a virus
is found, you are prompted to use your Emergency Disks to remove the
virus before continuing.
4
The opening installation window reminds you to close all other
Windows programs.
5
Click Next.
6
Read the License Agreement and click I accept the license
agreement.
If you decline, you cannot continue with the installation.
23
24
Installing Norton AntiVirus
Install Norton AntiVirus
7
Click Next.
8
If you are upgrading from Norton AntiVirus 2002, you can keep your
option settings. Click Yes to keep the settings.
9
Select a folder into which you want to install Norton AntiVirus.
Installing Norton AntiVirus
Install Norton AntiVirus
10 Click Next.
11
Confirm the installation location, then click Next.
25
26
Installing Norton AntiVirus
Install Norton AntiVirus
See “Read the
Readme file” on
page 29.
12
After Norton AntiVirus is installed, scroll through the Readme text,
then click Next.
13
Click Finish to exit the installation.
If the opening screen does not appear
Sometimes, a computer’s CD-ROM drive does not automatically start a CD.
To start the installation from the Norton AntiVirus CD
1
On your desktop, double-click My Computer.
2
In the My Computer dialog box, double-click the icon for your CDROM drive.
3
From the list of files, double-click CDSTART.EXE.
Installing Norton AntiVirus
After installation
After installation
For Windows 98/Me, you must restart your computer after installing
Norton AntiVirus.
If your computer needs to be restarted after Norton AntiVirus is installed, a
prompt appears giving you the option to do so immediately. After restart or,
if your computer does not need to be restarted, after installation is
complete, the Information Wizard appears.
w
If you bought your computer with Norton AntiVirus already installed, the
Information Wizard appears the first time you start Norton AntiVirus. You
must accept the license agreement that appears in the Information Wizard
for Norton AntiVirus to be activated.
Restart your computer
After installation, you may receive a prompt telling you that your computer
needs to be restarted for the updates to take effect.
To restart your computer
4
In the dialog box, click Yes.
If you click No, configuration of Norton AntiVirus is not complete until
you restart your computer.
Use the Information Wizard
The Information Wizard lets you register your copy of Norton AntiVirus,
get information about the virus definition service, select post-install tasks
to be done automatically, and review your Norton AntiVirus settings.
w
If you choose not to register the software using the Information Wizard or if
registration fails for some reason, you can register by using the Product
Registration option on the Help menu or by using the Symantec Web site at
www.symantec.com. On the Web site, go to the Products page for the
registration link.
To use the Information Wizard
1
In the welcome window, click Next.
2
If you purchased your computer with Norton AntiVirus already
installed, you must accept the license agreement in order to use
Norton AntiVirus. Click I accept the license agreement, then click
Next.
27
28
Installing Norton AntiVirus
After installation
3
In the first Registration window, select the country/region from which
you are registering and the country/region in which you live (if
different), then click Next.
4
If you would like information from Symantec about Norton AntiVirus,
select the method by which you want to receive that information, then
click Next.
5
Enter your name and whether you want Norton AntiVirus registered to
you or your company, then click Next.
6
Enter your address, then click Next.
7
Answer the survey questions to help Symantec improve its products
and services, then click Next when you are done or to skip the survey.
8
Select whether you want to register Norton AntiVirus through the
Internet or by mail, then click Next.
If you submitted your registration through the Internet, a dialog box
displays the serial number for your product.
9
Write down the number or click Print to get a copy of your
registration information for future reference.
10 Click Next.
11
Select whether you want to use your existing profile the next time you
register a Symantec product, or type the information as part of
registration.
12
Click Finish.
13
Review the subscription service information, then click Next.
14
Select the post-install tasks that you want Norton AntiVirus to perform
automatically. Your options are:
Run LiveUpdate to ensure that you have the
latest virus definitions.
See “Keeping current with
LiveUpdate” on page 59.
If you are installing in Windows 98/Me, you
also have the option to create a Rescue Disk
set.
See “About Rescue Disks” on
page 36.
Perform a full system scan.
See “Manually scan disks,
folders, and files” on page 52.
Schedule a weekly scan of your local hard
drives. You must have Microsoft Scheduler
installed to use this option. If you select this
option, you can change the schedule for this
scan as desired.
See “Schedule scans” on
page 56.
Installing Norton AntiVirus
After installation
15
See “Customize
Norton AntiVirus”
on page 40.
Click Next.
16 Review the configuration settings for Norton AntiVirus.
If you want to change any of the settings, do so using Options.
17
Click Finish.
If you selected any post-install tasks, they start automatically.
Read the Readme file
The Readme file contains technical tips and information about product
changes that occurred after this guide went to press. It is installed on your
hard disk in the same location as the Norton AntiVirus product files.
To read the Readme file
1
Using Windows Explorer, navigate to the location where your Norton
AntiVirus files are installed.
If you installed Norton AntiVirus in the default location, the files are in
C:\Program Files\Norton AntiVirus.
2
Double-click Readme.txt to open the file in Notepad or WordPad.
The Readme file includes instructions for printing it if you want to do
so.
3
Close the word processing program when you are done reading the
file.
29
30
Installing Norton AntiVirus
If you need to uninstall Norton AntiVirus
If you need to uninstall Norton AntiVirus
If you need to remove Norton AntiVirus from your computer, you can use
the Add/Remove Programs option from the Windows Control Panel or the
Uninstall Norton AntiVirus option from the Programs menu.
w
During uninstall, Windows may indicate that it is installing software. This
is a standard Microsoft installation message and can be disregarded.
To uninstall Norton AntiVirus from the Windows Control Panel
1
See “If you have
files in
Quarantine” on
page 70.
Do one of the following:
2
On the Windows taskbar, click Start > Settings > Control Panel.
2
On the Windows XP taskbar, click Start > Control Panel.
2
In the Control Panel, double-click Add/Remove Programs.
3
In the list of currently installed programs, click Norton AntiVirus.
4
Do one of the following:
2
In Windows 2000/Me, click Change/Remove.
2
In Windows 98, click Add/Remove.
2
In Windows XP, click Change.
5
Click Yes to confirm that you want to uninstall the product.
6
If you have files in Quarantine, you are asked if you want to delete
them. Your options are:
Yes
Deletes the quarantined files from your computer.
No
Leaves the quarantined files on your computer, but makes
them inaccessible.
7
Click Finish.
8
Click Yes to restart your computer.
Installing Norton AntiVirus
If you need to uninstall Norton AntiVirus
To uninstall Norton AntiVirus from the Programs menu
1
Do one of the following:
2
2
On the Windows taskbar, click Start > Programs > Norton
AntiVirus.
On the Windows XP taskbar, click Start > All Programs >
Norton AntiVirus.
2
Click Uninstall Norton AntiVirus.
3
In the Application Maintenance window, click Remove.
If you have no other Symantec products on your computer, you should also
uninstall LiveReg and LiveUpdate.
To uninstall LiveReg and LiveUpdate
1
Do one of the following:
2
On the Windows taskbar, click Start > Settings > Control Panel.
2
On the Windows XP taskbar, click Start > Control Panel.
2
In the Control Panel, double-click Add/Remove Programs.
3
In the list of currently installed programs, click LiveReg.
4
Do one of the following:
2
In Windows 2000/Me, click Change/Remove.
2
In Windows 98, click Add/Remove.
2
In Windows XP, click Remove.
5
Click Yes to confirm that you want to uninstall the product.
6
Repeat steps 1 through 5, selecting LiveUpdate in step 3, to uninstall
LiveUpdate.
31
32
Installing Norton AntiVirus
If you need to uninstall Norton AntiVirus
Norton AntiVirus
basics
Norton AntiVirus basics include general information about how to access
Norton AntiVirus tools, keep your computer protected, customize Norton
AntiVirus, monitor Norton AntiVirus activities, and access more
information about Norton AntiVirus.
Access Norton AntiVirus tools
Norton AntiVirus tools include status reporting, scanning options,
scheduling options, activity reporting, and configuration options. They can
be accessed from the Norton AntiVirus main window, the Windows
Explorer toolbar, and the Norton AntiVirus Windows tray icon.
Use the Norton AntiVirus main window
Most Norton AntiVirus tools are accessible from the Norton AntiVirus main
window.
To start Norton AntiVirus
4
Do one of the following:
2
2
On the Windows taskbar, click Start > Programs > Norton
AntiVirus > Norton AntiVirus 2003.
On the Windows XP taskbar, click Start > More Programs >
Norton AntiVirus > Norton AntiVirus 2003.
34
Norton AntiVirus basics
Access Norton AntiVirus tools
Use the Windows Explorer toolbar
Norton AntiVirus adds a button and menu to Windows Explorer. The button
drops down an abbreviated Norton AntiVirus menu.
Click the arrow to the right of the button and the following options appear.
View Status
Launches Norton AntiVirus, displaying the Status
window with system status.
View Quarantine
Displays the Quarantine area and the files currently
stored there. For more information, see “If you have
files in Quarantine” on page 70.
View Activity Log
Displays the Log Viewer, showing you various
Norton AntiVirus activities, such as scans
performed and problems found. For more
information, see “Monitoring Norton AntiVirus
activities” on page 45.
View Virus Encyclopedia
Connects you to the Symantec Security Response
Web page, from which you can search for
information on all types of viruses.
Launch Scan Menu
Opens Norton AntiVirus in the Scan for Viruses
pane, on which you can specify a scan to run.
When you first open Windows Explorer after installing Norton AntiVirus,
you may not see the Norton AntiVirus button and menu.
To display the Norton AntiVirus button and menu
4
w
On the View menu, click Toolbars > Norton AntiVirus.
You may not be able to access the Norton AntiVirus Windows Explorer
menu, depending on your computer’s configuration.
Use the Norton AntiVirus Windows tray icon
See “Customize
Norton AntiVirus”
on page 40.
You can use the Norton AntiVirus icon in the Windows tray to open Norton
AntiVirus, and enable or disable Auto-Protect.
To use the Norton AntiVirus Windows tray icon
1
In the Windows tray, right-click the Norton AntiVirus icon.
2
On the tray icon menu, select the option that you want.
Norton AntiVirus basics
Temporarily disable Auto-Protect
Temporarily disable Auto-Protect
See “Customize
Norton AntiVirus”
on page 40.
If you have not changed the default option settings, Auto-Protect loads
when you start your computer to guard against viruses. It checks programs
for viruses as they are run and monitors your computer for any activity that
might indicate the presence of a virus. When a virus or virus-like activity is
detected, Auto-Protect alerts you.
In some cases, Auto-Protect may warn you about a virus-like activity that
you know is not the work of a virus. If you will be performing such an
activity and want to avoid the warning, you can temporarily disable AutoProtect.
w
If you have set a password for Options, Norton AntiVirus asks you for the
password before you can view or adjust the settings.
To temporarily disable Auto-Protect
See “Access Norton
AntiVirus tools” on
page 33.
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under System, click Auto-Protect.
4
In the Auto-Protect pane, uncheck Enable Auto-Protect.
Be sure to enable Auto-Protect when you have completed your task to
ensure that your computer remains protected.
To enable Auto-Protect
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under System, click Auto-Protect.
4
In the Auto-Protect pane, check Enable Auto-Protect.
If the Norton AntiVirus icon appears in the Windows tray, you can use it to
enable and disable Auto-Protect.
To enable or disable Auto-Protect using the tray icon
1
In the Windows tray, right-click the Norton AntiVirus icon.
2
Do one of the following:
2
If Auto-Protect is disabled, click Enable Auto-Protect.
2
If Auto-Protect is enabled, click Disable Auto-Protect.
35
36
Norton AntiVirus basics
Maintain Norton AntiVirus protection
Maintain Norton AntiVirus protection
See “If you need to
use Rescue Disks
(Windows 98/98SE/
Me)” on page 72.
Depending upon which operating system you are using, you may want to
keep a set of Rescue Disks available and keep them up-to-date. You should
also occasionally verify that Norton AntiVirus is set to provide you with
optimal protection, and make sure that your virus protection is current.
About Rescue Disks
Rescue Disks record a duplicate set of system startup files and disk
partition information, and store rescue items and a virus scanner across
multiple floppy disks or on a network drive. Rescue Disks can be made for
the Windows 98/Me operating systems.
See “If you need to
use Rescue Disks
(Windows 98/98SE/
Me)” on page 72.
w
A Rescue Disk set consists of one bootable floppy disk, one Norton
AntiVirus Program floppy disk, and several Virus Definition floppy disks. If
you have Norton Utilities installed, you will also have two Norton Utilities
floppy disks in your Rescue Disk set. With a Rescue Disk set, you can start
your computer in DOS mode and use Norton AntiVirus to fix virus-related
problems.
Rescue Disks contain information specific to the computer on which they
were made. If you are using Rescue Disks for recovery, you must use the
disks made for your computer. If you are using Rescue Disks to scan for
viruses, you can use disks made for a different computer.
Disks can and should be updated whenever you update your virus
protection, install new software, or make changes to your hardware.
Create a Rescue Disk set
Rescue Disks can be created at any time. If you have chosen to create
Rescue Disks as a post-install task in the Information Wizard, the Rescue
Disk Wizard appears automatically. Otherwise, you can start the Rescue
Disk Wizard from the Norton AntiVirus main window.
See “Temporarily
disable AutoProtect” on
page 35.
w
If you start the Rescue Disk Wizard from the Norton AntiVirus main
window, temporarily disable Auto-Protect while you are creating the
Rescue Disk set. If you do not restart your computer after creating Rescue
Disks, remember to enable Auto-Protect again.
You will need several formatted 1.44 MB disks.
Norton AntiVirus basics
Maintain Norton AntiVirus protection
To create Rescue Disks
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Rescue.
If you chose to make Rescue Disks as a post-install task, the Rescue
Disk Wizard opens automatically.
3
Select drive A to create the Rescue Disk set.
4
Click Create.
5
Label the disks as specified in the Basic Rescue Disk List window, then
click OK.
6
Insert the disks as requested.
Test your Rescue Disks
At the end of the Create Rescue Disks process, you are prompted to test
your disks. This requires that you restart your computer using the Rescue
Disks.
To test your Rescue Disks
1
Close all open Windows programs.
2
Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A,
then click Restart.
If the Rescue Disk screen appears on your monitor, the Rescue Disk
works properly. If the Rescue Disk screen does not appear, you have
several options for correcting the problem.
See “My Rescue
Disk does not
work” on page 79.
3
Press Escape to exit to DOS.
4
Remove the disk from drive A, then slide open the plastic tab on the
back of the disk to write-protect it.
5
Restart your computer.
Update your Rescue Disks
You can update your Rescue Disks as often as you like. The Rescue Disk
Wizard helps you to update your basic Rescue Disks without having to
recreate them.
If you are updating a floppy disk set, make sure your disks are not writeprotected before you begin.
37
38
Norton AntiVirus basics
Maintain Norton AntiVirus protection
To update your Rescue Disks
See “Test your
Rescue Disks” on
page 37.
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Rescue.
3
Under Select Destination Drive, select drive A.
4
Click Update.
5
Insert the disk labeled Basic Rescue Boot Floppy Disk into drive A.
If the disk is write-protected, slide the plastic tab closed to make it
writeable.
6
Click OK.
7
Insert the remaining disks in your set as requested.
Make sure to test your newly updated Rescue Disk set when prompted.
Check system status
If Norton AntiVirus is behaving in an unexpected way, or if you’re not sure
that everything is being scanned for viruses, check the status of its
configuration.
In the Status pane of the Norton AntiVirus main window, a check mark
indicates that the system status is OK and a triangle indicates that your
system needs attention. If you see a triangle, review the features and
services to see which area needs attention.
See “Customize
Norton AntiVirus”
on page 40.
If you need to adjust any settings, use Options.
Norton AntiVirus basics
Maintain Norton AntiVirus protection
To check system status
See “Access Norton
AntiVirus tools” on
page 33.
1
Start Norton AntiVirus.
2
In the Status pane, review the status to the left of each feature.
3
For more information about a particular feature, click the feature.
The right pane displays a description and a link to more information
about the feature.
Check Office Plug-in status
Office Plug-in protects Microsoft Office documents from viruses, worms,
and virus-like activities. It scans those documents whenever you open
them in a Microsoft Office program. Office Plug-in is enabled in Options.
w
If you have set a password for Options, Norton AntiVirus asks you for the
password before you can view or adjust the settings.
To check Office Plug-in status
See “Access Norton
AntiVirus tools” on
page 33.
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
39
40
Norton AntiVirus basics
Customize Norton AntiVirus
3
In the left pane of the Options window, under Other, click
Miscellaneous.
4
Verify that Office Plug-in is enabled.
Customize Norton AntiVirus
If you are using Windows 2000/XP and you do not have Local
Administrator access, you cannot change Norton AntiVirus options. If you
are an administrator and share your computer with others, keep in mind
that the changes you make apply to everyone using the computer.
The default settings for Norton AntiVirus provide complete virus protection
for your computer. However, you may want to adjust them to optimize
system performance or disable options that do not apply.
Norton AntiVirus provides password protection for your option settings.
You can enable, change, and reset a password so unauthorized users
cannot tamper with your settings.
All the settings for Options are organized into three main categories. The
options contained under each category are as follows.
Category
Options
System
Auto-Protect
1
Bloodhound
1
Advanced
1
Exclusions
Script Blocking
Manual Scan
Internet
1
Bloodhound
1
Exclusions
Email
1
Advanced
Instant Messenger
LiveUpdate
Other
Inoculation (Windows 98/98SE/Me)
Miscellaneous
Norton AntiVirus basics
Customize Norton AntiVirus
See “Change
Norton AntiVirus
options” on
page 43.
This section does not describe how to change the individual options, but
gives a general description of what they do and how you can find them. For
specific information about a particular option, check the online Help.
About System options
The System options control scanning and monitoring of your computer. You
use System options to determine what gets scanned, what the scan is
looking for, and what happens when a virus or virus-like activity is
encountered.
With higher levels of protection, there can be a slight trade-off in computer
performance. If you notice a difference in your computer’s performance
after you install Norton AntiVirus, you may want to set protection to a
lower level or disable those options that you do not need.
Option
Description
Auto-Protect
Determine if Auto-Protect starts when you start your
computer, what it looks for while monitoring your computer,
and what to do when a virus is found.
Bloodhound is the scanning technology that protects against
unknown viruses. Use these options to set its level of
sensitivity in Auto-Protect.
Advanced options determine the activities to be monitored
when scanning for virus-like activities and when scanning
floppy disks.
Exclusions specify the files that should not be scanned by file
name extension or by specific file name. Be careful not to
exclude the types of files that are more likely to be infected
by viruses such as files with macros or executable files.
Script Blocking
Enable Script Blocking and set what Norton AntiVirus should
do if it finds a malicious script. If you are developing or
debugging scripts, disable Script Blocking. Otherwise this
feature might block the script you are developing.
Manual Scan
Determine what gets scanned and what happens if a virus is
found during a scan that you request.
Manual Scan options also include Bloodhound and
Exclusions subcategories.
41
42
Norton AntiVirus basics
Customize Norton AntiVirus
About Internet options
Internet options define what happens when your computer is connected to
the Internet. You use Internet options to define how Norton AntiVirus
should scan email and instant messenger attachments, enable Worm
Blocking, and determine how LiveUpdates should be applied.
Option
Description
Email
Enable email scanning and Worm Blocking, and define how
Norton AntiVirus should behave while scanning email
messages. Scanning incoming email protects your computer
against viruses sent by others. Scanning outgoing email
prevents you from inadvertently transmitting viruses or
worms to others. You can choose to scan incoming or
outgoing email, or both, and to display an icon or progress
indicator while scanning. You can set options to
automatically repair, quarantine, or delete infected email
with or without interaction with you.
Advanced options determine what to do when scanning
email.
Instant Messenger
Determine what instant messengers to support, how to
configure a new IM, and what happens if a virus is found
during an instant messenger session.
LiveUpdate
Enable Automatic LiveUpdate and define how updates should
be applied. Automatic LiveUpdate checks for updated virus
definitions and program updates automatically when you are
connected to the Internet.
Norton AntiVirus basics
Change Norton AntiVirus options
About Other options
Other options include Inoculation settings for Windows 98/98SE/Me and
Miscellaneous settings. You can enable Inoculation, cause an alert if a
system file changes, and set a variety of miscellaneous options.
Option
Description
Inoculation
Enable inoculation and, if a system file changes, choose to
update the inoculation snapshot or repair the file by restoring
it to its original values.
Inoculation options are available only on Windows 98/98SE/
Me.
Miscellaneous
Back up file in Quarantine before attempting a repair. (This
option is automatically set to On.)
Enable Office Plug-in. If you upgrade to Microsoft Office 2000
or later after Norton AntiVirus is installed, you must enable
this option to automatically scan Microsoft Office files.
Alert me if my virus protection is out of date.
Scan files at system startup (Windows 98/98SE only).
Enable password protection for options.
Change Norton AntiVirus options
You change the settings for Norton AntiVirus options in the Options
window.
To change settings
See “Access Norton
AntiVirus tools” on
page 33.
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
43
44
Norton AntiVirus basics
Change Norton AntiVirus options
w
See “Customize
Norton AntiVirus”
on page 40.
If you set a password for Options, Norton AntiVirus asks you for the
password before you can continue.
3
In the Options window, in the left pane, click an option in the list.
Options with an arrow to the left have sub-options. As you click an
option, the corresponding settings for the selected option appear in the
right pane.
4
Select any settings you want to change.
5
Click OK.
These settings now take precedence over the preset options. The
changes take effect immediately.
If you need to restore default settings in Options
You can change any or all of the options listed. If you have made a number
of changes that have unwanted results, you can restore all options to the
default settings.
w
If you set a password for Options, Norton AntiVirus asks you for the
password before you can view or adjust the settings.
Norton AntiVirus basics
Password protect Norton AntiVirus options
To restore default settings on an Options page
4
On the page for which you want to restore default settings, click Page
Defaults.
To restore default settings for all options
4
On any page in the Options window, click Default All.
Password protect Norton AntiVirus options
You can choose to protect or remove protection from your option settings
with a password. If you specify a password, you are asked to enter a
password every time you view the Options window, or temporarily enable
or disable Auto-Protect.
If you forget your password, you can reset it from the Help button in the
Norton AntiVirus main window. Check online Help for more information
about resetting your password.
To specify or remove a password
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under Other, click Miscellaneous.
4
Check or uncheck Enable password protection for options.
5
In the password dialog box, enter a password.
6
Click OK.
Monitoring Norton AntiVirus activities
Occasionally, you may need to look at previous Norton AntiVirus activities,
such as when the last system scan was done or how many viruses were
detected last week. Norton AntiVirus displays a record of its virus
detection, application, and error activities in the Log Viewer.
Check the Activity Log to see what tasks Norton AntiVirus has performed
and the results of those tasks to make sure your Options settings are set
correctly for your particular needs.
To check activities
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Reports.
45
46
Norton AntiVirus basics
For more information
3
In the Reports pane, on the Activity Log line, click View Report.
4
In the left pane, click the log you want to review.
As you click each log, the right pane changes and displays information
specific to the particular log. The most recent activities appear at the
top of the log.
For more information
Norton AntiVirus provides glossary terms, online Help, this User’s Guide in
PDF format, tutorials on the Web, and links to the Knowledge Base on the
Symantec Web site.
Look up glossary terms
Technical terms that are italicized in the User’s Guide are defined in the
glossary, which is available in both the User’s Guide PDF and Help. In both
locations, clicking a glossary term takes you to its definition.
Norton AntiVirus basics
For more information
Use online Help
Help is always available throughout Norton AntiVirus. Help buttons or
links to more information provide information specific to the task you are
completing. The Help menu provides a comprehensive guide to all product
features and tasks you can complete.
To access the Help menu
1
Start Norton AntiVirus.
2
At the top of the Norton AntiVirus main window, click Help.
Online Help table of
contents and index
Link to Symantec
Web sites for more
information
Version, system, and
password reset
information
3
On the main Help menu, click Norton AntiVirus Help.
4
In the Help window, in the left pane, select a tab. Your options are:
Contents
Displays the Help by topic
Index
Lists Help topics in alphabetical order by key word
Search
Opens a search field where you can enter a word or phrase
Help for Norton AntiVirus dialog boxes
When you request Help while working in a Norton AntiVirus dialog box,
the Help displayed is specific to that dialog box.
To get Help for a Norton AntiVirus dialog box
4
In the dialog box, click Help.
Help for a specific task
Online Help also explains procedures that you are likely to perform using
Norton AntiVirus. You can access these topics from the main Help window.
47
48
Norton AntiVirus basics
For more information
To get Help for a task
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Help.
3
On the main Help menu, click Norton AntiVirus Help.
4
In the Help window, in left pane, select a tab. Your options are:
Contents
Search for Help by topic.
Index
Lists Help topics in alphabetical order by key word.
Search
Enter and search for Help by key word.
The Contents, Index, and Search tabs are also available in many other Help
windows and can always be used to search for Help.
Use the User’s Guide PDF
This User’s Guide is provided on the Norton AntiVirus CD in PDF format.
You must have Adobe Acrobat Reader installed on your computer to read
the PDF.
To install Adobe Acrobat Reader
1
Insert the Norton AntiVirus CD into the CD-ROM drive.
2
Click Browse CD.
3
Double-click the Manual folder.
4
Double-click the Acrobat folder.
5
Double-click AR500ENU.
6
Follow the on-screen instructions to select a folder for Adobe Acrobat
Reader and complete the installation.
Once you have installed Adobe Acrobat Reader, you can read the PDF from
the CD.
To read the User’s Guide PDF from the CD
1
Insert the Norton AntiVirus CD into the CD-ROM drive.
2
Click Browse CD.
3
Double-click the Manual folder.
4
Double-click the NAV2003 folder.
5
Double-click NAV2003.pdf.
Norton AntiVirus basics
For more information
You can also copy the User’s Guide to your hard disk and read it from there.
It needs approximately 1 MB of disk space.
To read the User’s Guide from your hard disk
1
Open the location into which you copied the PDF.
2
Double-click NAV2003.pdf.
About Norton AntiVirus on the Web
The Symantec Web site provides extensive information about Norton
AntiVirus, virus protection, antivirus technology, and other Symantec
products. There are several ways to access the Symantec Web site.
To access the Symantec Web site from the Norton AntiVirus main
window
1
Click Help.
2
Select the solution that you want. Your options are:
Help and
Support
Takes you to the technical support page of the Symantec
Web site, from which you can search for solutions to
specific problems, update your virus protection, and read
the latest information about antivirus technology.
Symantec
Takes you to the Symantec security response page of the
Response Center Symantec Web site, from which you can get the latest virus
threats and security updates.
More Symantec
Solutions
Takes you to the Symantec store page of the Symantec Web
site, from which you can get the latest product information
and shop for Symantec products.
The Reports pane of Norton AntiVirus contains a link to the Symantec
online virus encyclopedia.
To access the Symantec Web site from the Reports page
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Reports.
3
In the Reports pane, next to the Online Virus Encyclopedia heading,
click View Report.
There is a link to the Symantec Web site on the Windows Explorer toolbar.
49
50
Norton AntiVirus basics
For more information
To access the Symantec Web site from Windows Explorer
1
Open Windows Explorer.
2
On the toolbar, on the Norton AntiVirus menu, click View Virus
Encyclopedia.
This option connects you to the Symantec security response Web page,
from which you can search for information on all types of viruses.
You can always access the Symantec Web site through your Internet
browser.
To access the Symantec Web site in your browser
4
Point your browser to www.symantec.com
Explore online tutorials
Symantec provides online tutorials that you can use to review many
common tasks that Norton AntiVirus performs.
To explore the online tutorials
1
Point your browser to www.symantec.com/techsupp/tutorials.html
2
On the tutorials Web page, select the product and version for which
you want a tutorial.
3
Click continue.
4
In the list of available tutorials for your product, select the one that you
want to review.
Protecting disks,
files, and data from
viruses
Keeping your computer protected requires regular monitoring by AutoProtect, Script Blocking, and Worm Blocking; scanning of your email
attachments and files transferred by instant messenger; and frequent
system scans. All of these tasks can be set to occur automatically.
For added protection in Norton AntiVirus on Windows 98/98SE/Me, enable
inoculation to alert you if a system file changes.
Ensure that protection settings are enabled
Norton AntiVirus is configured to provide you with complete protection
against viruses. It is unlikely that you need to change any settings.
However, for maximum protection, you should ensure that your protection
features are enabled.
Feature
Where to set
Maximum protection setting
Auto-Protect
Norton AntiVirus main
window > Enable
Auto-Protect is set to On.
Email scanning
Options > Email
Scan incoming Email and
Scan outgoing Email are
checked.
See “About Internet
options” on page 42.
If your email program uses one
of the supported
communications protocols, both
options are selected by default.
52
Protecting disks, files, and data from viruses
Manually scan disks, folders, and files
Feature
Where to set
Maximum protection setting
Timeout protection
Options > Email
Protect against timeouts
when scanning Email is
checked.
See “About Internet
options” on page 42.
To prevent connection timeouts
while receiving large
attachments, enable timeout
protection.
Instant messenger
scanning
Options > Instant
Messenger
Instant messengers that you
want to protect are checked.
See “About Internet
options” on page 42.
Worm Blocking
Script Blocking
Options > Email
See “About Internet
options” on page 42.
Enable Worm Blocking and
Alert me when scanning
email attachments are
checked.
Options > Script
Blocking
Enable Script Blocking is
checked.
See “About System
options” on page 41.
Inoculation
Options > Inoculation
Inoculate Boot Records is
See “About Other options” checked.
on page 43.
This table summarizes the maximum protection settings and where you
can find them. For specific information about an option, check the online
Help.
Manually scan disks, folders, and files
If Auto-Protect is enabled and the Norton AntiVirus options are set at their
default levels, you normally would not need to scan manually. However, if
you temporarily disabled Auto-Protect (for example, to load or use another
program that conflicts with Norton AntiVirus), and you forgot to enable it
again, it is possible that a virus could be on your hard disk undetected. You
can scan your entire computer, or individual floppy disks, drives, folders, or
files.
Although the default settings for manual scanning are usually adequate,
you can raise the level of Bloodhound heuristics or adjust the options for
Protecting disks, files, and data from viruses
Manually scan disks, folders, and files
manual scanning in the Options window. Check online Help for more
information about manual scanning options.
Perform a full system scan
A full system scan scans all boot records and files on your computer.
To perform a full system scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, click Scan my computer.
4
Under Actions, click Scan.
When the scan is complete, a scan summary appears.
5
When you are done reviewing the summary, click Finished.
Scan individual elements
Occasionally, you may want to scan a particular file, removable drives, a
floppy disk, any of your computer’s drives, or any folders or files on your
computer. You may have been working with floppy disks or have received a
compressed file in an email message and suspect a virus. You can scan just
a particular disk or individual element that you want to check.
53
54
Protecting disks, files, and data from viruses
Create and use custom scans
To scan individual elements
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the scan that you want to run.
4
Under Actions, click Scan.
If you choose to scan all removable drives or a floppy disk, the scan
starts automatically. If you choose to scan drives, folders, or files, a
dialog box appears in which you choose which drives, folders, or files
to scan.
5
In the dialog box, click Scan after making your selection.
When the scan is complete, a scan summary appears.
6
When you are done reviewing the summary, click Finished.
If problems are found during a scan
See “If a virus is
found during a
scan” on page 65.
At the end of a scan, a summary report appears to tell you what Norton
AntiVirus found during the scan. If a virus was found and you have
requested that Norton AntiVirus repair the file automatically, it is listed as
repaired. If the file cannot be repaired, it can be quarantined or deleted.
Create and use custom scans
See “Schedule a
custom scan” on
page 56.
You can create a custom scan if you regularly scan a particular segment of
your computer and don’t want to have to specify the segment to be scanned
every time. You can also schedule the custom scan to run automatically.
You can delete the scan when it is no longer necessary. For example, if you
are working on a project for which you need to frequently swap files with
others, you might want to create a folder into which you copy and scan
those files before using them. When the project is done, you can delete the
custom scan for that folder.
To create a custom scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, under Actions, click New.
4
In the opening window of the Norton AntiVirus Scan Wizard, click
Next.
Protecting disks, files, and data from viruses
Create and use custom scans
5
Do one or both of the following:
2
To select individual files to be scanned, click Add files.
To select folders and drives to be scanned, click Add folders.
You can use both options to select the combination of items that you
want.
2
6
In the resulting dialog box, select the items that you want to scan.
If you select a folder, all files in that folder are included. If you select a
drive, all folders and files on that drive are included.
7
Add the selected items to the list of items to scan by doing one of the
following:
2
In the Scan Files dialog box, click Open.
2
In the Scan Folders dialog box, click Add.
8
To remove an item from the list, select it, then click Remove.
9
When you are done creating the list of items to be scanned, click Next.
10 Type a name for the scan by which you can identify it in the list of
scans.
11
Click Finish.
Run a custom scan
When you run a custom scan, you do not have to redefine what you want to
scan.
To run a custom scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the custom scan.
4
Under Actions, click Scan.
When the scan is complete, a scan summary appears.
5
When you are done reviewing the summary, click Finished.
Delete a custom scan
You can delete custom scans if they are no longer needed.
To delete a custom scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
55
56
Protecting disks, files, and data from viruses
Schedule scans
3
w
In the Scan for Viruses pane, select the scan that you want to delete.
If you click the button next to the scan name, the scan runs.
4
Under Actions, click Delete.
5
Click Yes to verify that you want to delete the scan.
Schedule scans
When you install Norton AntiVirus and complete the Information Wizard,
you can choose to schedule a weekly full system scan as part of post-install
tasks. If you make that choice, the scan is scheduled automatically.
You can schedule customized virus scans that run unattended on specific
dates and times or at periodic intervals. If you are using the computer when
the scheduled scan begins, it runs in the background so that you do not
have to stop working.
w
You cannot schedule the predefined scans in the scan list, but you can
schedule any custom scans that you have created.
Schedule a custom scan
You have complete flexibility in scheduling custom scans. When you select
how frequently you want a scan to run (such as daily, weekly, or monthly),
you are presented with additional fields with which you can refine your
request. For example, you can request a daily scan, then schedule it to
occur every two days or every three days instead.
To schedule a custom scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the scan that you want to
schedule.
w
If you click the button next to the scan name, the scan runs.
4
Under Schedule Task, click Schedule.
5
In the Schedule dialog box, if Show multiple schedules is checked,
click New to enable the scheduling fields.
If it is not checked, the fields are already enabled.
Protecting disks, files, and data from viruses
Schedule scans
6
Set the frequency and time at which you want the scan to run.
Most of the frequency options include additional options that let you
further refine the schedule. Set the additional options as necessary.
7
When you are done, click OK.
You can also create multiple schedules for a scan. For example, you could
run the same scan at the beginning of your work day and at the end.
To create multiple schedules for a single scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the scan that you want to
schedule.
w
If you click the button next to the scan name, the scan runs.
4
Under Schedule Task, click Schedule.
5
In the Schedule dialog box, check Show multiple schedules.
6
To set an additional schedule, click New.
7
Set the frequency and time at which you want the scan to run.
Most of the frequency options include additional options that let you
further refine the schedule. Set the additional options as necessary.
8
When you are done, click OK.
Edit scheduled scans
You can change the schedule of any scheduled scan, including the weekly
full system scan.
To edit a scheduled scan
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the scan that you want to
schedule.
w
If you click the button next to the scan name, the scan runs.
4
Under Schedule Task, click Schedule.
5
Change the schedule as desired.
6
Click OK.
57
58
Protecting disks, files, and data from viruses
Schedule scans
Delete a scan schedule
You can delete any scan schedule. Deleting the schedule does not delete
the scan.
To delete a scan schedule
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Scan for Viruses.
3
In the Scan for Viruses pane, select the scan you want to schedule.
w
If you click the button next to the scan name, the scan runs.
4
Under Schedule Task, click Schedule.
5
In the Schedule dialog box, check Show multiple schedules.
6
Select the schedule that you want to delete (if more than one).
7
Click Delete.
8
Click OK.
Keeping current with
LiveUpdate
Symantec products depend on current information to protect your
computer from newly discovered threats. Symantec makes this information
available to you through LiveUpdate. Using your Internet connection,
LiveUpdate obtains program updates and protection updates for your
computer.
Your normal Internet access fees apply when you use LiveUpdate.
w
If you are using Norton AntiVirus on Windows 2000/XP, you must have
Administrator access rights to run LiveUpdate.
About program updates
Program updates are minor improvements to your installed product. These
differ from product upgrades, which are newer versions of entire products.
Program updates that have self-installers to replace existing software code
are called patches. Patches are usually created to extend operating system
or hardware compatibility, adjust a performance issue, or fix bugs.
LiveUpdate automates the process of obtaining and installing program
updates. It locates and obtains files from an Internet site, installs them, and
then deletes the leftover files from your computer.
60
Keeping current with LiveUpdate
About protection updates
About protection updates
Protection updates are files available from Symantec, by subscription, that
keep your Symantec products up-to-date with the latest anti-threat
technology. The protection updates you receive depend on which product
you are using.
Norton AntiVirus,
Norton SystemWorks
Users of Norton AntiVirus and Norton SystemWorks
receive virus definition service updates, which provide
access to the latest virus signatures and other technology
from Symantec.
Norton Internet
Security
In addition to the virus definition service, users of Norton
Internet Security also receive protection updates to the
Web filtering service, the intrusion detection service, and
Spam Alert.
The Web filtering service updates provide the latest lists of
Web site addresses and Web site categories that are used
to identify inappropriate Web content.
The intrusion detection service updates provide the latest
predefined firewall rules and updated lists of applications
that access the Internet. These lists are used to identify
unauthorized access attempts to your computer.
Spam Alert updates provide the latest spam definitions
and updated lists of spam email characteristics. These lists
are used to identify unsolicited email.
Norton Personal
Firewall
Users of Norton Personal Firewall receive intrusion
detection service updates for the latest predefined firewall
rules and updated lists of applications that access the
Internet.
About your subscription
See “Subscription
policy” on
page 86.
Your Symantec product includes a complimentary, limited-time
subscription to protection updates for the subscription services that are
used by your product. When the subscription is due to expire, you are
prompted to renew your subscription.
If you do not renew your subscription, you can still use LiveUpdate to
obtain program updates. However, you cannot obtain protection updates
and will not be protected against newly discovered threats.
Keeping current with LiveUpdate
When you should update
When you should update
Run LiveUpdate as soon as you have installed your product. Once you know
that your files are up-to-date, run LiveUpdate regularly to obtain updates.
For example, to keep your virus protection current, you should use
LiveUpdate once a week or whenever new viruses are discovered. Program
updates are released on an as-needed basis.
Request an update alert
To ensure your protection updates are current, you can request to receive
an email alert whenever there is a high-level virus outbreak or other
Internet security threat. The email alert describes the threat, provides
detection and removal instructions, and includes advice on keeping your
computer safe. You should always run LiveUpdate after you receive one of
these alerts.
To request an update alert
1
From your Web browser, navigate to securityresponse.symantec.com/
avcenter
2
On the Security Response Web page, scroll to the bottom of the page,
then click Symantec security response Free subscription.
3
On the security alert subscription Web page, fill in the subscription
form.
4
Click Send me FREE Security Alerts.
If you run LiveUpdate on an internal network
If you run LiveUpdate on a computer that is connected to a network that is
behind a company firewall, your network administrator might set up an
internal LiveUpdate server on the network. LiveUpdate should find this
location automatically.
If you have trouble connecting to an internal LiveUpdate server, contact
your network administrator.
If you can’t use LiveUpdate
When new updates become available, Symantec posts them on the
Symantec Web site. If you can’t run LiveUpdate, you can obtain new
updates from the Symantec Web site.
61
62
Keeping current with LiveUpdate
Obtain updates using LiveUpdate
w
Your subscription must be current to obtain new protection updates from
the Symantec Web site.
To obtain updates from the Symantec Web site
1
Point your Web browser to securityresponse.symantec.com
2
Follow the links to obtain the type of update that you need.
Obtain updates using LiveUpdate
LiveUpdate checks for updates to all of the Symantec products that are
installed on your computer.
w
If you connect to the Internet through America Online (AOL), CompuServe,
or Prodigy, connect to the Internet first, and then run LiveUpdate.
To obtain updates using LiveUpdate
w
1
Open your Symantec product.
2
At the top of the window, click LiveUpdate.
You might receive a warning that says that your subscription has
expired. Follow the on-screen instructions to complete the
subscription renewal.
3
In the LiveUpdate window, click Next to locate updates.
4
If updates are available, click Next to download and install them.
5
When the installation is complete, click Finish.
Some program updates may require that you restart your computer after
you install them.
Set LiveUpdate to Interactive or Express mode
LiveUpdate runs in either Interactive or Express mode. In Interactive mode
(the default), LiveUpdate downloads a list of updates available for your
Symantec products that are supported by LiveUpdate technology. You can
then choose which product updates you want to install. In Express mode,
LiveUpdate automatically installs all available updates for your Symantec
products.
Keeping current with LiveUpdate
Run LiveUpdate automatically
To set LiveUpdate to Interactive or Express mode
1
Open your Symantec product.
2
At the top of the window, click LiveUpdate.
3
On the LiveUpdate welcome screen, click Configure.
4
On the General tab of the LiveUpdate Configuration dialog box, select
Interactive Mode or Express Mode.
5
If you selected Express Mode, select how you want to start checking
for updates:
2
2
6
To have the option of cancelling the update, select I want to
press the start button to run LiveUpdate.
To have any updates installed automatically whenever you start
LiveUpdate, select I want LiveUpdate to start automatically.
Click OK.
Turn off Express mode
Once you have set LiveUpdate to run in Express mode, you can no longer
access the LiveUpdate Configuration dialog box directly from LiveUpdate.
You must use the Symantec LiveUpdate control panel.
To turn off Express mode
1
On the Windows taskbar, click Start > Settings > Control Panel.
2
In the Control Panel window, double-click Symantec LiveUpdate.
3
On the General tab of the LiveUpdate Configuration dialog box, select
Interactive Mode.
4
Click OK.
Run LiveUpdate automatically
You can have LiveUpdate check for protection updates automatically, on a
set schedule, by enabling Automatic LiveUpdate. You must continue to run
LiveUpdate manually to receive product updates.
w
Automatic LiveUpdate checks for an Internet connection every five
minutes until a connection is found, and then every four hours. If you have
an ISDN router that is set to automatically connect to your Internet service
provider (ISP), many connections will be made, with connection and phone
charges possibly being incurred for each connection. If this is a problem,
63
64
Keeping current with LiveUpdate
Run LiveUpdate automatically
you can set your ISDN router to not automatically connect to the ISP or
disable Automatic LiveUpdate in the Norton AntiVirus options.
To enable Automatic LiveUpdate
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
w
If you set a password for Options, Norton AntiVirus asks you for the
password before you can continue.
3
In the Options window, under Internet, click LiveUpdate.
4
In the LiveUpdate pane, check Enable Automatic LiveUpdate.
5
Set how you want updates to be applied. Your options are:
6
Apply updates without
interrupting me
LiveUpdate checks for and installs protection
updates without prompting you. LiveUpdate
displays an alert when a protection update has
been downloaded. You should still run LiveUpdate
occasionally to check for program updates.
Notify me when updates
are available
LiveUpdate checks for protection updates and asks
if you want to install them.
Click OK.
To delete the schedule for Automatic LiveUpdate, disable Automatic
LiveUpdate.
To disable Automatic LiveUpdate
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
w
If you set a password for Options, Norton AntiVirus asks you for the
password before you can continue.
3
In the Options window, under Internet, click LiveUpdate.
4
In the LiveUpdate pane, uncheck Enable Automatic LiveUpdate.
5
Click OK.
What to do if a virus
is found
If Norton AntiVirus finds a virus on your computer, there are three possible
resolutions to the problem:
1
See “If you have
files in
Quarantine” on
page 70.
1
1
Fix the file
Removes the virus from the file or if the threat is a worm or Trojan
horse, deletes the file.
Quarantine the file
Makes the file inaccessible by any programs other than Norton
AntiVirus. You cannot accidentally open the file and spread the virus,
but you can still evaluate it for possible submission to Symantec.
Delete the file
Removes the virus from your computer by deleting the file that
contains the virus, worm or Trojan horse. It should be used only if the
file cannot be repaired or quarantined.
Malicious threats can be found during a manual or scheduled scan or by
Auto-Protect when you perform an action with an infected file. Threats can
also appear during an instant messenger session or when sending an
email. The way that you handle a threat differs depending on whether a
scan or Auto-Protect found the threat.
If a virus is found during a scan
If Norton AntiVirus finds a virus, Trojan horse, or worm during a scan or
from an instant messenger session, you either receive a summary of the
automatic repair or deletion results, or you have to use the Repair Wizard
to resolve the problem.
66
What to do if a virus is found
If a virus is found during a scan
Review the repair details
If you have set your manual scan options so that Norton AntiVirus repairs
or deletes files automatically, and all infected files could be repaired or
deleted, the scan summary lists the number of files infected and repaired
or deleted. This information is presented for status purposes only; you don’t
need to take further action to protect your computer. If you want to know
more, you can check the repair details to see which files were infected and
with what threats.
To review the repair details
1
In the scanner window, in the Summary pane, click More Details.
2
When you are done reviewing the results, click Finished.
Use the Repair Wizard
If there are files that could not be fixed, or if you have set options so that
Norton AntiVirus asks you what to do when a virus is found, the Repair
Wizard opens. If Norton AntiVirus did not attempt a repair, the Repair
Wizard opens in the Repair pane. Otherwise, it opens in the Quarantine
window.
To use the Repair Wizard
1
If the Repair Wizard opens in the Repair pane, uncheck any files that
you don’t want Norton AntiVirus to fix.
All files are checked by default. This is the recommended action.
2
Click Fix.
If any files cannot be fixed or deleted, the Quarantine window opens.
All files are checked to be added to the Quarantine by default. This is
the recommended action.
3
In the Quarantine window, uncheck any files that you do not want to
quarantine.
4
Click Quarantine.
If any files could not be quarantined, the Delete pane opens.
If you do not delete the infected files, the virus remains on your
computer and can cause damage or be transmitted to others.
5
Uncheck any files that you do not want to delete.
What to do if a virus is found
If a virus is found by Auto-Protect
w
6
Click Delete.
Once all of the files have been repaired, quarantined, or deleted, the
Summary pane of the scanner window opens.
7
When you are done reviewing the summary, click Finished.
After repairing a boot virus on your hard drive, restart your computer.
If a virus is found by Auto-Protect
Auto-Protect scans files for viruses and other malicious threats when you
perform an action with them, such as moving them, copying them, or
opening them. If it detects a virus or virus-like activity, in most cases you
receive an alert telling you that a virus was found and repaired. How you
proceed depends on the operating system that you are using.
If you are using Windows 98/98SE/Me
If a virus or threat is found and repaired by Auto-Protect in Windows 98/
98SE/Me, you receive an alert telling you which file was repaired or
deleted.
To close the alert
4
Click Finish.
If you have set your options so that Auto-Protect asks you what to do when
it finds a virus, the alert asks you to choose an action. The recommended
action is always preselected.
Action
Result
Repair the infected file
Automatically eliminates the virus, Trojan horse, or
worm and repairs or deletes the infected file. When a
virus is found, Repair is always the best choice.
Quarantine the infected
file
Isolates the infected file, but does not remove the threat.
Select Quarantine if you suspect that the infection is
caused by an unknown threat and you want to submit
the threat to Symantec for analysis.
Delete the infected file
Erases both the threat and the infected file. Select
Delete if Repair is not successful. Replace the deleted
file with the original program file or backup copy. If the
virus, Trojan horse, or worm is detected again, your
original copy is infected.
67
68
What to do if a virus is found
If a virus is found by Auto-Protect
Action
Result
Do not open the file, but
leave the problem alone
Stops the current operation to prevent you from using
an infected file. This action does not solve the problem.
You will receive an alert the next time that you perform
the same activity.
Ignore the problem and
do not scan this file in
the future
Adds the file that is suspected of containing a threat to
the Exclusions list. When you add a file to the
Exclusions list, the file is excluded from any future
virus scans, unless you remove it from the list. Select
this option only if you know that the file does not
contain a virus.
Ignore the problem and
continue with the
infected file
Continues the current operation. Select this option only
if you are sure that a virus, Trojan horse or worm is not
at work. You will receive an alert again. If you are not
sure what to do, select Do not open the file, but leave the
problem alone.
If a file cannot be repaired, you receive an alert telling you that the repair
was not made and recommending that you quarantine the file. You have
the same options as those listed in the table, with the exception of Repair
the infected file.
If you are using Windows 2000/XP
If a threat is found and either repaired or automatically deleted by AutoProtect in Windows 2000/XP, you receive an alert telling you which file
was repaired or deleted and which virus, Trojan horse, or worm was
infecting the file. If you have an active Internet connection, clicking the
virus name opens the Symantec Web page that describes the virus.
To close the alert
4
Click OK.
If the file cannot be repaired, you receive two alerts, one telling you that
Auto-Protect was unable to repair the file, and another telling you that
access to the file was denied.
See “If you have
files in
Quarantine” on
page 70.
You can set your Auto-Protect options to try to quarantine any infected files
that it cannot repair. If you do this, you are informed if any files are
quarantined.
What to do if a virus is found
If a virus is found by Script Blocking
To resolve problems with unrepaired files
See “Perform a full
system scan” on
page 53.
1
Run a full system scan on your computer to ensure that no other files
are infected.
See “If a virus is
found during a
scan” on page 65.
2
Follow the recommended actions in the Repair Wizard to protect your
computer from the infected files.
If a virus is found by Script Blocking
See “Ensure that
protection settings
are enabled” on
page 51.
Script Blocking scans Visual Basic and JavaScript scripts for viruses. If it
detects a virus or virus-like activity, in most cases you receive an alert
telling you that a potential threat was found.
You must choose one of the options to remove the threat. The
recommended action is to stop the script from running. You can click Help
on the alert for additional information about how to respond.
If a threat is found by Worm Blocking
See “Ensure that
protection settings
are enabled” on
page 51.
If a program tries to email itself or email a copy of itself, it could be a worm
trying to spread via email. A worm can send itself or a copy of itself in an
email message without any interaction with you.
Worm Blocking continually scans outgoing email attachments for worms. If
it detects a worm, you receive an alert telling you that a malicious worm
was found.
The alert presents you with options and asks you what to do. If you were
not sending an email message at that time, then it is probably a worm and
you should quarantine the file. You can click Help on the alert for additional
information about how to respond.
After you have responded to the threat and deleted the file, you could still
have an infected system. Run LiveUpdate, scan your system, and, if
necessary, go to the Symantec security response Web page
(securityresponse.symantec.com) for the most up-to-date virus definitions
clean-up tools.
69
70
What to do if a virus is found
If you have files in Quarantine
If Inoculation alerts you about a change in
system files
w
See “Ensure that
protection settings
are enabled” on
page 51.
Inoculation protection is available on Windows 98/98SE/Me systems only.
System files can change for a variety of reasons. You may have updated
your operating system or repartitioned your hard disk, or you could have a
virus. Norton AntiVirus alerts you when a change occurs in your system
files.
If you get an alert about a change in your system files, you have two
options. You can update your inoculation snapshot or repair the file. Before
you repair the file, be sure your virus definitions are up-to-date and run a
scan.
To respond to inoculation changes
4
In the Alert window, select the action that you want to take. Your
options are:
Update the saved copy of Use if the alert appears after a legitimate change
my Master Boot Record in system files.
Restore my Master Boot
Record
Use if you are certain the system did not change
for legitimate reasons.
If you have files in Quarantine
Once a file has been placed in Quarantine, you have several options. All
actions that you take on files in Quarantine must be performed in the
Quarantine window.
To open the Quarantine window
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Reports.
What to do if a virus is found
If you have files in Quarantine
3
In the Reports pane, on the Quarantined items line, click View
Report.
The toolbar at the top of the Quarantine window contains all of the actions
that you can perform on Quarantined files.
Add Item
Adds files to Quarantine. Use this action to quarantine a
file that you suspect is infected. This action has no effect
on files that are already in Quarantine.
Properties
Provides detailed information about the selected file and
the virus that is infecting it.
Repair Item
Attempts to repair the selected file. Use this action if you
have received new virus definitions since the file was
added to Quarantine.
Restore Item
Returns the selected file to its original location without
repairing it.
Delete Item
Deletes the selected file from your computer.
Submit Item
Sends the selected file to Symantec. Use this option if you
suspect that a file is infected even if Norton AntiVirus did
not detect it.
LiveUpdate
Runs LiveUpdate to check for new protection and program
updates. Use this if you haven’t updated your virus
definitions for a while and then try to repair the files in
Quarantine.
71
72
What to do if a virus is found
If Norton AntiVirus cannot repair a file
To perform an action on a file in Quarantine
1
Select the file on which you want to perform the action.
2
In the toolbar, select the action that you want to perform.
3
When you are finished, on the File menu, click Exit.
If Norton AntiVirus cannot repair a file
See “Keeping
current with
LiveUpdate” on
page 59.
One of the most common reasons that Norton AntiVirus cannot
automatically repair or delete an infected file is that you do not have the
most up-to-date virus protection. Update your virus protection with
LiveUpdate and scan again.
If that does not work, read the information in the report window to identify
the types of items that cannot be repaired, and then take the appropriate
action.
File type
Action
Infected files with .exe, .doc, .dot, or Use the Repair Wizard to solve the problem.
.xls file name extensions (any file
See “Use the Repair Wizard” on page 66.
can be infected)
Hard disk master boot record, boot
record, or system files (such as
IO.SYS or MSDOS.SYS) and floppy
disk boot record and system files
Replace using the Rescue Disks or your
operating system disks.
See “About Rescue Disks” on page 36.
If your computer does not start properly
See “About Rescue
Disks” on page 36
and “Create
Emergency Disks”
on page 22.
If you have a virus on your computer and need to start the computer from
an uninfected disk to remove the virus, or if you need to restore a boot
record, use your Rescue Disks. If you do not have Rescue Disks, you can
use your Emergency Disks to start the computer and remove the virus. If
you need to restore boot records and do not have Rescue Disks, or if you
need to restore system files, you must reinstall Windows.
If you need to use Rescue Disks (Windows 98/98SE/Me)
Sometimes a virus infection prevents your computer from starting
normally. Some viruses can only be removed if the computer is started
from a clean disk, not the infected hard disk. Often, a Norton AntiVirus
alert tells you when to use your Rescue Disks.
What to do if a virus is found
If your computer does not start properly
You first need to determine if your Rescue Disks are current. This means
that you have created or updated your Rescue Disks since you did any of
the following:
1
Added, modified, or removed internal hardware
1
Added, modified, or removed hard disk partitions
1
Upgraded your operating system
1
Updated virus definitions
If your Rescue Disks are not current, you can still use them to remove
viruses from your computer. When the Rescue Disk screen appears, use
only the Norton AntiVirus task.
To use your Rescue Disks
1
Insert the Basic Rescue Boot floppy disk into drive A and restart your
computer.
The Rescue program runs in DOS.
2
Use the arrow keys to select the program that you want to run.
A description of the selected program appears in the right pane of the
Rescue program. Your choices are:
Norton AntiVirus
Scans your computer for viruses and repairs any
infected files
Rescue Recovery
Checks and restores boot and partition information
3
Press Enter to run the selected program.
4
Follow the on-screen instructions for inserting and removing the
Rescue Disks.
5
When the Rescue program is done, remove the Rescue Disk from drive
A and restart your computer.
73
74
What to do if a virus is found
Look up viruses on the Symantec Web site
If you need to use Emergency Disks
See “Create
Emergency Disks”
on page 22.
If you have not created Rescue Disks, you can use Emergency Disks to
restart your computer and scan for viruses.
To use Emergency Disks
1
Insert Emergency Disk 1 into drive A and restart your computer.
The Emergency program runs in DOS.
2
Ensure that Antivirus is selected, then press Enter to begin the
Norton AntiVirus Emergency program.
3
Follow the on-screen instructions for inserting and removing the
Emergency Disks.
The Emergency program automatically scans your computer and
removes viruses.
4
When the Emergency program is done, remove the Emergency Disk
from drive A and restart your computer.
If you are using the CD as an Emergency Disk
See “I cannot start
from drive A” on
page 80.
w
If you are using the Norton AntiVirus CD as an Emergency Disk, you can
ignore all of the instructions to change disks, as all necessary information
is on the CD.
You may need to change your computer’s BIOS Setup options to start from
the CD-ROM drive.
To use the CD as an Emergency Disk
1
Insert the Norton AntiVirus CD into the CD-ROM drive.
2
Restart your computer.
The Emergency program scans your computer and removes viruses.
Look up viruses on the Symantec Web site
The Symantec Web site contains a complete list of all known viruses and
related malicious code, along with descriptions. You must be connected to
the Internet to look up viruses.
What to do if a virus is found
Look up viruses in Norton AntiVirus
To look up viruses
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Reports.
3
In the Reports pane, on the Online Virus Encyclopedia line, click View
Report.
The Symantec Web site opens in your Internet browser.
4
Use the links on the Web page to access the virus information for
which you are looking.
Look up viruses in Norton AntiVirus
If you don’t have an active Internet connection, you can look up a virus
name from within Norton AntiVirus. The Virus List dialog box lists the
viruses in the current virus definition service files on your local computer.
Because of the large number of viruses, the Virus List file does not include
descriptions of each virus.
See “Keeping
current with
LiveUpdate” on
page 59.
To ensure that you have the latest virus definitions, run LiveUpdate.
To look up virus names and definitions
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Reports.
3
In the Reports pane, on the Virus List line, click View Report.
75
76
What to do if a virus is found
Look up viruses in Norton AntiVirus
To get more information about a specific virus
1
In the Virus List dialog box, select the virus about which you want
more information.
2
Click Info.
3
When you are done viewing the list, in the Virus List dialog box, click
Close.
Troubleshooting
The information in this chapter will help you solve the most frequently
encountered problems. If you can’t find the solution to your problem here,
there is a wealth of information on the Symantec Web site. You can find
updates, patches, online tutorials, Knowledge Base articles, and virus
removal tools.
Explore the Symantec service and support Web site
The Symantec service and support Web site offers information focused on
your product and whether the product is for home or business use.
To explore the Symantec service and support Web site
1
Point your browser to www.symantec.com/techsupp
2
On the service and support Web page, click I am a home/small
business user.
3
On the introduction Web page, in the column on the left, click a link for
the information that you want.
If you cannot find what you are looking for using the links on the
introduction page, try searching the Web site.
78
Troubleshooting
Explore the Symantec service and support Web site
To search the Symantec service and support Web site
1
On the left side of any Web page in the Symantec service and support
Web site, click search.
2
Type a word or phrase that best represents the information for which
you are looking.
Use the following guidelines when searching the Symantec Web site:
2
2
2
2
2
2
Type a single word in lowercase letters to find all occurrences of
the word, including partial matches. For example, type install to
find articles that include the word install, installation, installing,
and so on.
Type multiple words to find all occurrences of any of the words.
For example, type virus definitions to find articles that include
virus or definitions or both.
Type a phrase enclosed in quotation marks to find articles that
include this exact phrase.
Use a plus (+) sign in front of all of the search terms and a space
between terms, if you use more than one term, to retrieve
documents containing all of the words. For example, +Internet
+Security finds articles containing both words.
For an exact match, type the search words in uppercase letters.
To search for multiple phrases, enclose each phrase in quotation
marks and use commas to separate the phrases. For example,
"purchase product", "MAC", "Norton SystemWorks" searches for
all three phrases, and finds all articles that include any of these
phrases.
3
Select the area of the Web site that you want to search.
4
Click Search.
Troubleshooting
Troubleshoot Norton AntiVirus problems
Troubleshoot Norton AntiVirus problems
Here are some solutions to issues that might arise with Norton AntiVirus.
My Rescue Disk does not work
Due to the number of product-specific technologies used by manufacturers
to configure and initialize hard drives, the Rescue program cannot always
create a bootable disk automatically. If your Rescue Boot Disk does not
work properly, do one of the following:
1
1
If you have a special startup disk for your computer, add it to your
Rescue Disk set. In an emergency, start from that disk. Remove the
disk and insert your Rescue Boot Disk. At the DOS prompt, type
A:RSHELL, press Enter, then follow the on-screen instructions.
Use the Disk Manager or similarly named program that came with
your computer to make your Rescue Boot Disk bootable. Make sure to
test your modified Rescue Boot Disk.
Sometimes, your Rescue Boot Disk does not work properly because you
have more than one operating system installed, such as Windows 2000 and
Windows 98.
To modify your Rescue Boot Disk
1
Start up from your hard drive.
2
Insert your Rescue Boot Disk into drive A.
3
At the DOS prompt, type SYS A:
4
Press Enter.
This transfers the operating system to the Rescue Boot Disk. Be sure to
retest your Rescue Disks.
The alert tells me to use my Rescue Disks, but I did not create
them
See “To create
Emergency Disks
from the CD” on
page 22.
With your Norton AntiVirus CD you can create Emergency Disks. Although
they are not as powerful as the Rescue Disks you create, you can use the
Emergency Disks to recover from most common emergencies.
See “If you are
using the CD as an
Emergency Disk”
on page 74.
You can use the CD that contains Norton AntiVirus as an Emergency Disk
if your computer can start from the CD-ROM drive.
Once you have created the Emergency Disks, use them to solve the
problem.
79
80
Troubleshooting
Troubleshoot Norton AntiVirus problems
I cannot start from drive A
If your computer does not check drive A first on startup, use your
computer’s Setup program to change settings.
Be careful when making changes using your computer’s Setup program. If
you have never used it before, you may want to refer to your computer
manufacturer’s documentation.
To change your computer’s settings
1
Restart your computer.
A message appears telling you the key or keys to press to run SETUP,
such as Press <DEL> if you want to run SETUP.
2
Press the key or keys to launch the Setup program.
3
Set the Boot Sequence to boot drive A first and drive C second.
Setup programs vary from one manufacturer to the next. If you cannot
find the Boot Sequence option, use the Setup program’s Help system,
refer to the documentation that came with your system, or contact
your system’s manufacturer.
4
Save the changes, then exit the Setup program.
You may need to use a special boot disk rather than the Rescue Boot Disk.
In this case, use the boot disk or startup disk that came with your
computer.
See “My Rescue
Disk does not
work” on page 79.
If your computer is set up with more than one operating system, such as
Windows 2000 and Windows 98, you may need to modify the Rescue Boot
Disk.
Auto-Protect does not load when I start my computer
If the Norton AntiVirus Auto-Protect icon does not appear in the lower-right
corner of the Windows taskbar, Auto-Protect is not loaded. There are three
likely reasons this is happening.
You may have started Windows in safe mode. Windows restarts in safe
mode if the previous shutdown did not complete successfully. For example,
you may have turned off the power without choosing Shut Down on the
Windows Start menu.
Troubleshooting
Troubleshoot Norton AntiVirus problems
To restart Windows
1
On the Windows taskbar, click Start > Shut Down.
2
In the Shut Down Windows dialog box, click Restart.
3
Click OK.
Norton AntiVirus may not be configured to start Auto-Protect
automatically.
To set Auto-Protect to start automatically
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under System, click Auto-Protect.
4
Ensure that Start Auto-Protect when Windows starts up is checked.
Norton AntiVirus may not be configured to show the Auto-Protect icon in
the tray.
To show the Auto-Protect icon in the tray
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under System, click Auto-Protect.
4
Ensure that Show the Auto-Protect icon in the tray is checked.
I have scanned and removed a virus, but it keeps infecting
my files
There are four possible reasons a virus could be reappearing.
The virus might be in a program file with an unusual extension for which
Norton AntiVirus is not configured to look.
To reset Norton AntiVirus scanning options
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under System, click Manual Scan.
4
Under Which file types to scan for viruses, click Comprehensive file
scanning.
5
Click Manual Scan > Bloodhound.
81
82
Troubleshooting
Troubleshoot Norton AntiVirus problems
6
Ensure that Enable Bloodhound heuristics is checked, and click
Highest level of protection.
7
Click OK.
8
Scan all of the disks that you use and repair all infected files.
The source of the infection could also be a floppy disk. Scan all of the floppy
disks that you use to ensure that they are free of viruses.
See “If you need to
use Rescue Disks
(Windows 98/98SE/
Me)” on page 72.
Another reason could be that the virus is remaining in memory after you
remove it from the boot record. It then reinfects your boot record. Use your
Rescue Disks to remove the virus.
If the problem is a Trojan horse or worm that was transmitted over a shared
network drive, you must disconnect from the network or password protect
the drive to let Norton AntiVirus delete the problem.
Norton AntiVirus cannot repair my infected files
See “Keeping
current with
LiveUpdate” on
page 59.
The most common reason that Norton AntiVirus cannot repair your infected
files is that you do not have the most current virus protection on your
computer. Update your virus protection regularly to protect your computer
from the latest viruses.
If after using LiveUpdate the virus still cannot be repaired, the file may be
corrupted, or contain a new virus. There are two additional options:
See “If you have
files in
Quarantine” on
page 70.
1
1
Quarantine the file and submit it to Symantec.
If a non-infected copy of the file exists, delete the infected file and
replace it with the non-infected file.
I get an error when testing basic Rescue Disks
If you get the message Non-system disk, replace the disk and press any key
when testing your Rescue Disks, the Rescue program may not have
prepared the floppy boot files correctly.
To repair the Rescue Boot Disk without having to reformat the disk
and create a new Rescue Disk set
1
Remove the Rescue Boot Disk and restart your computer.
2
Insert the Rescue Boot Disk into the floppy disk drive.
3
On the Windows taskbar, click Start > Run.
4
In the Run dialog box, type SYS A:
5
Click OK.
Troubleshooting
Troubleshoot Norton AntiVirus problems
I can’t receive email messages
There are three possible solutions to this problem.
Temporarily disable email protection. This might allow the problem email
message to download so that you can once again enable email protection.
You are protected by Auto-Protect and Script Blocking while email
protection is disabled.
To temporarily disable incoming email protection
See “About
Internet options”
on page 42.
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under Internet, click Email.
4
Uncheck Scan incoming Email.
5
Click OK.
6
Download your email messages.
7
Reenable incoming email protection.
Your email client may have timed out. Make sure timeout protection is
enabled.
If you continue to experience problems downloading email messages,
disable email protection.
To disable email protection
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under Internet, click Email.
4
Uncheck Scan incoming Email.
5
Uncheck Scan outgoing Email.
6
Click OK.
I can’t send email messages
If you get the message, Norton AntiVirus was unable to send your email
message because the connection to your email server was disconnected,
your email client may be set to automatically disconnect after sending and
receiving mail.
For Norton AntiVirus to scan outgoing email messages for viruses, it
intercepts and scans the messages before they are sent to your email
83
84
Troubleshooting
Troubleshoot Norton AntiVirus problems
provider. To resolve this issue, turn off this option within your email client.
Consult your email client manual for instructions on how to do this, or
disable Norton AntiVirus outgoing email scanning.
To disable outgoing email scanning
1
Start Norton AntiVirus.
2
In the Norton AntiVirus main window, click Options.
3
In the Options window, under Internet, click Email.
4
Uncheck Scan outgoing Email.
5
Click OK.
Service and support
solutions
The Service & Support Web site at http://service.symantec.com supports
Symantec products. Customer Service helps with nontechnical issues such
as orders, upgrades, replacements, and rebates. Technical Support helps
with technical issues such as installing, configuring, or troubleshooting
Symantec products.
Methods of technical support and customer service can vary by region. For
information on support offerings in your region, check the appropriate Web
site listed in the sections that follow.
If you received this product when you purchased your computer, your
computer manufacturer may be responsible for providing your support.
Customer service
The Service & Support Web site at http://service.symantec.com tells you
how to:
1
Subscribe to Symantec newsletters.
1
Locate resellers and consultants in your area.
1
Replace defective CD-ROMs and manuals.
1
Update your product registration.
1
Find out about orders, returns, or a rebate status.
1
Access Customer Service FAQs.
1
Post a question to a Customer Service representative.
1
Obtain product information, literature, or trialware.
86
Service and support solutions
Technical support
For upgrade orders, visit the Symantec Store at:
http://www.symantecstore.com
Technical support
Symantec offers two technical support options for help with installing,
configuring, or troubleshooting Symantec products:
1
1
Online Service and Support
Connect to the Symantec Service & Support Web site at
http://service.symantec.com, select your user type, and then select
your product and version. You can access hot topics, Knowledge Base
articles, tutorials, contact options, and more. You can also post a
question to an online Technical Support representative.
PriorityCare telephone support
This fee-based (in most areas) telephone support is available to all
registered customers. Find the phone number for your product at the
Service & Support Web site. You’ll be led through the online options
first, and then to the telephone contact options.
Support for old and discontinued versions
When Symantec announces that a product will no longer be marketed or
sold, telephone support is discontinued 60 days later. Technical
information may still be available through the Service & Support Web site
at:
http://service.symantec.com
Subscription policy
If your Symantec product includes virus, firewall, or Web content
protection, you may be entitled to receive updates via LiveUpdate.
Subscription length varies by Symantec product.
After your initial subscription ends, you must renew it before you can
update your virus, firewall, or Web content protection. Without these
updates, you will be vulnerable to attacks.
When you run LiveUpdate near the end of your subscription period, you are
prompted to subscribe for a nominal charge. Simply follow the instructions
on the screen.
Service and support solutions
Worldwide service and support
Worldwide service and support
Technical support and customer service solutions vary by country. For
Symantec and International Partner locations outside of the United States,
contact one of the service and support offices listed below, or connect to
http://service.symantec.com and select your region under Global Service
and Support.
Service and support offices
North America
Symantec Corporation
555 International Way
Springfield, OR 97477
U.S.A.
http://www.symantec.com/
Australia and New Zealand
Symantec Australia
Level 2, 1 Julius Avenue
North Ryde, NSW 2113
Sydney
Australia
http://www.symantec.com/region/reg_ap/
+61 (2) 8879-1000
Fax: +61 (2) 8879-1001
Europe, Middle East, and Africa
Symantec Customer Service Center http://www.symantec.com/region/reg_eu/
+353 (1) 811 8032
P.O. Box 5689
Dublin 15
Ireland
Latin America
Symantec Brasil
Market Place Tower
Av. Dr. Chucri Zaidan, 920
12 andar
São Paulo - SP
CEP: 04583-904
Brasil, SA
Portuguese:
http://www.service.symantec.com/br
Spanish:
http://www.service.symantec.com/mx
Brazil: +55 (11) 5189-6300
Mexico: +52 55 5322 3681 (Mexico DF)
01 800 711 8443 (Interior)
Argentina: +54 (11) 5382-3802
Every effort has been made to ensure the accuracy of this information.
However, the information contained herein is subject to change without
notice. Symantec Corporation reserves the right for such change without
prior notice.
July 25, 2002
87
88
Service and support solutions
Worldwide service and support
Glossary
access rights
The types of operations and files a user or
group can access and what the user or
group is permitted to do with those
directories and files.
administrator
1. A person who oversees the operation of a
network. 2. A person responsible for
installing programs on a network and
configuring them for distribution to
workstations. This person may also update
security settings on workstations.
alert
A dialog box that appears in a graphical
user interface (GUI) to signal that an error
has occurred, or to provide a warning.
boot record
A sector at the beginning of each disk that
identifies the disk’s architecture (sector
size, cluster size, and so on). For startup
disks, the boot record also contains a
program that loads the operating system.
browser
A software application that makes
navigating the Internet easy by providing a
graphical user interface. This lets the user
click menus, icons, or buttons rather than
learn difficult computer commands. Also
called a Web client.
90
Glossary
compressed file
A file that has been compressed using a
special data storage format in order to save
space on your disk.
download
To transfer a file from one computer system
to another, through a modem or network.
Download usually refers to the act of
transferring a file from the Internet, a BBS
(bulletin board system), or a service such as
America Online.
email (electronic mail)
A method of exchanging messages and files
with other people via computer networks. A
popular protocol for sending email is SMTP
(Simple Mail Transfer Protocol). Popular
protocols for receiving email are POP3
(Post Office Protocol 3) and IMAP4
(Internet Message Access Protocol 4). Webbased email services use HTTP (Hypertext
Transfer Protocol) for sending and
receiving email.
executable file
A file containing program code that can be
launched. Generally includes any file that is
a program, extension, or a system file.
extension
The three-letter ending on a file name that
can associate the file with an activity or
program, so that double-clicking the file
causes the program to start. Examples
include .txt (text) and .exe (programs).
file type
A code that is stored in each file that
associates it with a program or activity.
HTML (Hypertext Markup
Language)
A standard language for documents on the
World Wide Web. Codes inserted in a text
file instruct the Web browser on how to
display a Web page’s words and images for
the user, and define hypertext links
between documents.
icon
A graphic symbol used to represent a file,
folder, disk, or other entity.
infected file
A file that contains a virus, Trojan horse, or
worm.
Glossary
JavaScript
A scripting language that is similar to, but
less capable than, Java. JavaScript code can
be included in Web pages to add
interactivity and other functionality.
known virus
A virus for which Norton AntiVirus has a
definition. See also virus definition.
local
A term that refers to your computer, as
opposed to a remote computer.
log
A record of actions and events that take
place on a computer or handheld device.
network
A set of computers and associated
hardware connected together in a work
group for the purpose of sharing
information and hardware among users.
operating system
A program that ties the capabilities of
computer hardware and software to input/
output devices such as disks, keyboards,
and mouse devices.
password
A character sequence entered by users to
verify their identities to a network or
program. The most secure passwords are
difficult to guess or find in a dictionary, and
contain a combination of capital letters,
lowercase letters, numbers, and symbols.
POP3 (Post Office Protocol 3)
An email protocol used to retrieve email
from a remote server over an Internet
connection.
program
A set of instructions that can be executed
by a computer, and are written for a specific
purpose such as word processing or
creating a spreadsheet. Also called
software.
Quarantine
A disk location established by Norton
AntiVirus to isolate files suspected to
contain a virus so that the files can’t be
opened or executed.
91
92
Glossary
removable media
Disks that can be removed, as opposed to
those that cannot. Some examples of
removable media are floppy disks, disk
cartridges (such as SyQuest and Bernoulli,
for example), CDs, and Zip disks.
script
A list of instructions that can be executed
without user interaction. Unlike other types
of programs, scripts can be opened with
text editors or word processing programs,
so they are very easy to change. Examples
of scripts include Visual Basic programs
and network login scripts.
startup disk
A disk that contains the system files
necessary to start your computer. Startup
disk usually refers to a floppy disk or CD
that can be used to start the computer in an
emergency.
threat
A circumstance, event, or person with the
potential to cause harm to a system in the
form of destruction, disclosure,
modification of data, and/or denial of
service.
timeout
A predetermined period of time during
which a given task must be completed. If
the timeout value is reached before or
during the execution of a task, the task is
canceled.
unknown virus
A virus for which Norton AntiVirus does
not contain a definition. See also virus
definition.
Glossary
virus
A self-replicating program intentionally
written to alter the way your computer
operates without your permission or
knowledge. A virus attaches copies of itself
to other files, and when activated, may
damage files, cause erratic system
behavior, or merely display annoying
messages. Self-replication differentiates
viruses from other virus-like computer
infections such as Trojan horse programs
and worms. See also virus-like activity.
virus definition
Virus information that lets an antivirus
program recognize and alert you to the
presence of a specific virus. See also
unknown virus.
Virus List
A list that shows all of the viruses for which
Norton AntiVirus has a virus definition. It is
important to update this list regularly.
virus-like activity
An activity or action that Norton AntiVirus
perceives as the work of a possible
unknown virus. Virus-like activity alerts do
not necessarily indicate the presence of a
virus, but should be investigated.
Web page
A single document on the World Wide Web
that is identified by a unique URL. A Web
page can contain text, hyperlinks, and
graphics.
Web site
A group of Web pages managed by a single
company, organization, or individual. A
Web site may include text, graphics, audio
and video files, and hyperlinks to other
Web pages.
93
94
Glossary
worm
A program that replicates without infecting
other programs. Some worms spread by
copying themselves from disk to disk, while
others replicate only in memory to slow a
computer down. So far, worms do not exist
in the Macintosh world.
write-protect
Write-protecting disks prevents viruses
from infecting them. To write-protect a 3.5inch disk, slide the tab on the back of the
disk to uncover the hole through the disk.
Also referred to as a locked disk or
read-only disk.
Index
A
C
accessing Options 40
Activity Log 12, 45
Adobe Acrobat Reader, installing 48
AOL 62
Automatic LiveUpdate 42, 63
Auto-Protect
description 35
disabling 35
enabling 35, 51
failure to load on startup 80, 81
options 41
avoiding viruses 16
CD-ROM drive, starting Norton AntiVirus
from 74
changing scan schedules 57
changing settings 40
CompuServe 62
computer requirements 19
connecting to the Internet automatically 63
Contents tab in Help 47
creating
Emergency Disks 22
Rescue Disks 36
custom scans
changing schedule 57
deleting 55
deleting schedule 58
running 55
scheduling 56
B
backing up file before repair 43
Bloodhound
options 41
technology 14
booting
absent 79
Auto-Protect failure to load 80, 81
changing floppy disk drive settings 80
floppy disk drive fails 80
Rescue Disks fail 79
D
default options 44
definitions of technical terms 46
deleting
custom scans 55
infected files 67
scan schedule 58
dialog box Help 47
96
Index
disabling
Automatic LiveUpdate 64
Auto-Protect 35
displaying the Norton AntiVirus toolbar 34
E
Emergency Disks
creating 22
using 74
using the CD 74
emergency preparations 17
enabling
Automatic LiveUpdate 42
Auto-Protect 35
Office Plug-in 43
F
file extensions, unusual 81
file scans 53
files, reinfected after virus removal 81
firewalls, using LiveUpdate 61
floppy disk scans 53
floppy drives, unable to boot from 80
folder scans 53
full system scans 53
G
Information Wizard
features 27
how to use 27
when it appears 27
Inoculation
alerts 70
options 43
responding to alerts 70
instant messenger
options 42
scanning transferred files 51
support and options 11
Internet options 42
Intrusion Detection service 60
J
JavaScript 15
L
launching Norton AntiVirus 33
list of viruses 14
LiveUpdate options 42
Log Viewer 12
activities in 45
contents 45
monitoring activities in 45
glossary 46
M
H
macros, defined 12
maintaining protection 16
Miscellaneous options 43
multiple schedules for a scan 57
hard drive scans 53
Help
for dialog boxes 47
online Help 47
procedural 47
I
Index tab in Help 47
infected files
cannot repair 82
reinfected 81
N
networks, using LiveUpdate 61
new features in Norton AntiVirus 11
Norton AntiVirus
accessing from Windows Explorer 34
starting 33
updating virus definitions 62
Windows tray icon 34
Index
O
Q
Office Plug-in
enabling 43
status 39
online Help 47
online tutorials 50
online Virus Encyclopedia 49, 75
operating systems
multiple 79
required for install 19
Options
accessing 40
Auto-Protect 41
Advanced 41
Bloodhound 41
Exclusions 41
changing settings 43
email
Advanced 42
scanning 42
Inoculation 43
instant messenger 42
Internet 42
LiveUpdate 42
Manual Scan 41
Bloodhound 41
Exclusions 41
Miscellaneous 43
Other 43
resetting defaults 44
Script Blocking 41
settings categories 40
Other options 43
Quarantine
files in 70
infected files in 67
options 71
P
password protection
option 12, 43
Prodigy Internet connection 62
product serial number 28
R
registering your software 28
removable drive scans 53
removing
Norton AntiVirus from your computer 30
other antivirus programs 21
previous copies of Norton AntiVirus 21
Repair Wizard 66
repairing infected files
in Windows 2000/XP 68
in Windows 98/98SE/Me 67
required computer configuration 19
Rescue Disks
absent 79
creating 36
defined 36
failure to start from 79
testing 37
updating 37
using 72, 73
restoring boot record and system files 72
running custom scans 55
S
safe mode 80
scan summary 66
scanning
automatic 56
during installation 23
entire computer 53
files at startup 43
from a boot disk 72
individual elements 53
scheduling
custom scans 56
LiveUpdate 64
virus scans 56
97
98
Index
Script Blocking 15
monitoring by 51
options 41
virus found by 69
security response Web page 49
serial number 28
Service and Support 85
setting options 40
settings categories 40
setup program, changing boot drive
sequence 80
starting
Norton AntiVirus 33
Norton AntiVirus from the CD-ROM
drive 74
your computer from a floppy disk 72
startup
Auto-Protect failure to load 81
changing floppy disk drive settings 80
floppy disk drive fails 80
Rescue Disks absent 79
Rescue Disks fail 79
scanning files at 43
submitting files to Symantec 71
subscriptions 60
Symantec Response Center Web site 49
Symantec service and support Web site 77
Symantec Solutions Web site 49
Symantec Store Web site 49
Symantec Web site 49, 50, 75
connecting to 34
downloading product updates 61
system status 38
T
Technical Support 85
Technical Support Web site 49
testing Rescue Disks 37
tray icon 34
Trojan horses 13
tutorials 50
U
uninstalling
Norton AntiVirus 30
other antivirus programs 21, 22
previous copies of Norton AntiVirus 21
updating
from Symantec Web site 61
Rescue Disks 37
virus protection 61
User’s Guide PDF 48
V
viewing the Activity Log 45
virus alert options 67
virus definition service 14
virus definitions 14
alternate sources 61
described 60
downloading from Symantec Web site 61
updating with LiveUpdate 62
virus descriptions 14
Virus Encyclopedia 49
Virus List 75
virus protection
alerts 43
system scans 53
updating 63
virus repair
in Windows 2000/XP 68
in Windows 98/98SE/Me 67
viruses
avoiding 16
behavior 13
defined 12
found by Auto-Protect 67
found during a scan 65
looking up in Norton AntiVirus 75
looking up on Web site 74
submitting to Symantec 71
viewing descriptions 75
Visual Basic scripts 15
Index
W
Web
filtering service 60
Web sites, Symantec 61
Windows Explorer menu, displaying 34
Windows operating systems 19
Windows safe mode 80
Windows tray icon 34, 35
Worm Blocking
introducing 12
monitoring by 14, 51
options 42
stops worms 15
threats found by 69
worms 13
99
100
Index
Norton AntiVirus
CD Replacement Form
CD REPLACEMENT: After your 60-Day Limited Warranty, if your CD becomes unusable, fill out and return 1) this form, 2) your damaged
CD, and 3) your payment (see pricing below, add sales tax if applicable), to the address below to receive replacement CD. DURING THE 60DAY LIMITED WARRANTY PERIOD, THIS SERVICE IS FREE. You must be a registered customer in order to receive CD replacements.
If your Symantec product was installed on your computer when you purchased it, contact your hardware manufacturer for CD replacement
information.
FOR CD REPLACEMENT
Please send me:
___ CD Replacement
Name ________________________________________________________________________________________________
Company Name _______________________________________________________________________________________
Street Address (No P.O. Boxes, Please) ____________________________________________________________________
City ______________________________________________________ State _______ Zip/Postal Code _________________
Country* _________________________________________ Daytime Phone _______________________________________
Software Purchase Date _________________________________________________________________________________
*This offer limited to U.S., Canada, and Mexico. Outside North America, contact your local Symantec office or distributor.
Briefly describe the problem: ____________________________________________________________________________
CD Replacement Price
Sales Tax (See Table)
Shipping & Handling
TOTAL DUE
$ 10.00
______
$ 9.95
______
SALES TAX TABLE: AZ (5%), CA (7.25%), CO (3%), CT (6%), DC (5.75%), FL (6%), GA (4%),
IA (5%), IL (6.25%), IN (5%), KS (4.9%), LA (4%), MA (5%), MD (5%), ME (6%), MI
(6%), MN (6.5%), MO (4.225%), NC (6%), NJ (6%), NY (4%), OH (5%), OK (4.5%), PA
(6%), SC (5%), TN (6%), TX (6.25%), VA (4.5%), WA (6.5%), WI (5%).
Please add local sales tax (as well as state sales tax) in AZ, CA, FL, GA, MO, NY, OH, OK,
SC, TN, TX, WA, WI.
FORM OF PAYMENT ** (CHECK ONE):
___ Check (Payable to Symantec) Amount Enclosed $_________
__ Visa
__ Mastercard
__ AMEX
Credit Card Number___________________________________________________________________ Expires __________
Name on Card (please print) _________________________________Signature ___________________________________
**U.S. Dollars. Payment must be made in U.S. dollars drawn on a U.S. bank.
MAIL YOUR CD REPLACEMENT ORDER TO:
Symantec Corporation
Attention: Order Processing
555 International Way
Springfield, OR 97477 (800) 441-7234
Please allow 2-3 weeks for delivery within the U.S.
Symantec and Norton AntiVirus are trademarks of Symantec Corporation.
Other brands and products are trademarks of their respective holder/s.
© 2002 Symantec Corporation. All rights reserved. Printed in the U.S.A.