


                           THE VIRUS TERMINUS -- V4.6C

                            Copyright 1992 S.T.CALISE

                              All Rights Reserved!!



                                TABLE OF CONTENTS


                                                                    page

          Brief Program Overview        ...........................  3
          Hardware/Software Required    ...........................  3
          Operation Restrictions        ...........................  3
          Disinfection Sequence         ...........................  4
          Installation - General        ...........................  5
          Installation Procedure for
          Systems Already Infected      ...........................  6
          360Kb Disk Install/Swapping   ...........................  8
          Terminus Start-Up Options     ...........................  9
          Program Self-Test             ...........................  9
          Start-Up Self-Test            ...........................  9
          Configure Terminus            ........................... 10
          Default Parameters/Options    ........................... 10
          Adding NEW Options            ........................... 11
          Using A DOS Shell Utility     ........................... 11
          Mouse Operation               ........................... 12
          SCAN/CLEAN Version Notes      ........................... 12
          SCAN/CLEAN Files Menu         ........................... 13
          SCAN/CLEAN Drive(s) Menu      ........................... 13
          IMMUNIZATION/RECOVERY Menu    ........................... 13
          REPORT FUNCTIONS Menu         ........................... 14
          VIRUS Fact Sheets             ........................... 14
          SCAN/CLEAN Option Switches    ........................... 15
          SAVING SCAN/CLEAN Options     ........................... 16
          OPTIONS Lock                  ........................... 16
          OPTIONS Lock Password         ........................... 16
          Limit Operation To Floppies   ........................... 17
          Experimental Virus Data       ........................... 18
          WRITE PROTECTED Floppy Notes  ........................... 18
          DIRECTORY PATH FINDER         ........................... 18
          SCREEN SAVER                  ........................... 19
          Memory Available Function     ........................... 19
          DOS ERRORLEVEL on Exit        ........................... 19
          Operation From WINDOWS        ........................... 20
          Program ERROR Messages        ........................... 20
          Upgrades                      ........................... 22
          Registration Information      ........................... 22
          Acknowledgements              ........................... 23
          Corrections/Changes VTEC46C   ........................... 23


                                   - PAGE 2 -


         *****

         Programs included in THE VIRUS TERMINUS(c) Package: VT46C.EXE ;
         VTCF1.EXE ; VTCF46.EXE ; PRINTDOC.BAT ; VT46CDOC.TXT ; STC.ICO
                                   (6 files ONLY!)
         *****

    You have a contiguous five(5) day period to evaluate THE VIRUS TERMINUS
    starting from the date you first receive it. Your PAID registration/
    license is required for any use beyond this period.

         The author and holder of copyright hereby disclaim all
    warranties relating to this software, whether express or implied,
    including and without limitation to any implied warranties of
    merchantability or fitness for a particular purpose.  The USER of
    this software shall bear all risk as to the quality and performance
    of the software. In no event shall S.T.Calise be liable to you for any
    consequential, special, incidental or indirect damages of any kind
    arising out of the performance or use of the software, even if
    S.T.Calise has been advised of the possibility of such damages.

               THE VIRUS TERMINUS(c) IS DISTRIBUTED 'AS IS' .



                             ********************

  PAID Registration gives license and right to use The Virus Terminus on a
  single machine for personal home use only and  updates as described in
  VT46CDOC. A PAID negotiated site license is required for educational,
  business, corporation, government and/or agency environment use.

                             ********************

                            ALL RIGHTS ARE RESERVED!


                                   - PAGE 3 -

         THE VIRUS TERMINUS(c) is an intelligent SHELL Menu utility program
    for McAfee Associates Anti-Virus programs VIRUSCAN, CLEAN, and VALIDATE.
    VIRUS TERMINUS is menu driven and may be used with a mouse or keyboard.
    The SCAN/CLEAN option switches have been made visible and can be toggled
    through an easy to use interface. Reports may be viewed, printed, merged
    or deleted. Virus Fact Sheets allow the user to obtain information on
    virus infectors such as the known characteristics, areas of damage, the
    McAfee Associates disinfection program needed, etc. A quick program
    self-test is available and there are a variety of options including
    screen saver, options lock with password, mono video mode, etc.

         Virus Terminus v4.6 supports SCAN/CLEAN's advanced IMMUNIZATION and
    RECOVERY functions. These functions provide protection with recovery
    after detection from new or unknown virus infectors.


                             HARDWARE RECOMMENDATIONS

          RAM MEMORY:   640K BYTES MEMORY (512K MIN)

          DISK DRIVE:   HARD DRIVE + (1 or 2 FLOPPIES)
                        or 2 FLOPPIES WITHOUT A HARD DRIVE - ONE SHOULD BE
                        720K, 1.44M, or 1.2M HIGH CAPACITY TYPE (See note
                        on 360Kb installation.)

          VIDEO     :   (IBM MDA),(CGA C80) TEXT MODE/EMULATION REQ.
                        or VGA/EGA Downward Compatible to CGA

          OPERATION :   KEYBOARD or MS COMPATIBLE MOUSE OPTIONAL


                             SOFTWARE REQUIREMENTS:

                              PC/MS DOS V2.11 - 5.0
           (DOS 3.1 or higher required for certain SCAN/CLEAN options)

       Version 8.9B97 or higher - SCAN, CLEAN; VALIDATE.COM; VIRLIST.TXT
           from  McAfee Associates (See Version notes & restrictions)

        ***** GENERAL OPERATION RESTRICTIONS:

             DO NOT run The Virus Terminus from the hard disk if your system
        is already infected. Read Page #4 for disinfection sequence.

             DO NOT use the Virus Terminus in any environment or on any
        machine where another virus disinfector utility is currently installed
        and running. This includes but is not limited to TSR virus utilities.
        No claim is made herein or otherwise as to compatibility with other
        author/program virus disinfector & detector utilities.

             The Virus Terminus was designed to run in a stand-alone PC
        environment. This does not include use in LAN environments, etc.

             Users should make every effort to use only the most recent
        versions of SCAN or CLEAN. Version 4.6C of The Virus Terminus was
        tested with CLEAN 8.9B97 and SCAN 9.0v99



                                   - PAGE 4 -


        ***** TYPICAL DISINFECTION SEQUENCE:

     *     It is strongly recommended that you get experienced help in    *
     *                 dealing with computer virus infection.             *
     *  The outlined procedure below is a suggested typical disinfection  *
     *    sequence. This procedure may vary depending on the extent and   *
     *       type of computer virus infection being dealt with. These     *
     *   instructions are not meant to replace those which are found in   *
     *                 the documentation for SCAN and CLEAN.              *

             DO NOT RUN THE VIRUS TERMINUS FROM A HARD DISK if your
        system is already infected. Use the following steps for best
        results:

        1. Power Down your system. DO NOT reset your computer by
           pressing CTRL-ALT-DEL or the hardware reset button!

        2. Boot from a KNOWN NON-INFECTED WRITE-PROTECTED DOS SYSTEM DISK.

        3. Use the floppy installation procedure for systems already
           infected as outlined on page #6 . Perform a SELF-TEST .

        4. SCAN your hard disk to determine which and/or how many virus
           infections may be present. Make sure MEMORY SCAN is toggled ON.

        5. CLEAN - Disinfect your hard disk. Use the virus ID code previously
           reported by SCANand make sure MEMORY SCAN is ON. Do a SELF-TEST.

           NOTE: If you are unable to access your hard disk after booting
                 from a floppy, check to make sure that any special device
                 drivers needed to use the hard disk are on the floppy and
                 run from the CONFIG.SYS or AUTOEXEC.BAT file.AT THIS POINT
                 IF YOU HAVE NOT DONE A BACKUP OF ANY CRITICAL FILES ON YOUR
                 SYSTEM, THEN DO SO IMMEDIATELY.

                 If more than one virus type was detected, then CLEAN-UP will
                 have to be run for each type of virus.

        6. Power down the system after CLEANing your hard disk.

        7. Check your hard disk once again with SCAN to make sure you
           were successful in disinfecting the system. If not, repeat
           steps #1, 2, 4, 5, 6 and 7 all over again.

        8. Now, check any floppies that may have been inserted into
           your drives to determine if they are infected. If so,
           follow the directions in the CLEAN documentation to
           disinfect. Power Down your system when finished.

        9. SCAN your Hard Disk once again to make sure you have not
           reinfected your system. Make sure MEMORY CHECK is toggled ON.
           Perform a SELF-TEST.

             Failure to disinfect floppies previously used in an infected
         system may lead to virus reinfection.


                                   - PAGE 5 -


         ***** INSTALL THE VIRUS TERMINUS(c): ( NON-Infected System Only! )

              THE VIRUS TERMINUS(c) operates most efficiently when
         used in conjunction with a hard drive. You may also run
         this program from a floppy drive when your hard drive is
         infected.(360K, 720K, 1.2MEG, 1.44MEG disk size) Please read
         page #8  for information on 360Kb installation SCAN/CLEAN disk
         swapping. Current program sizes still allow installation on a
         single 360Kb DSDD disk!

              McAfee Associates files : SCAN.EXE; CLEAN.EXE; VALIDATE.COM;
                                        VIRLIST.TXT

              VIRUS TERMINUS files   : VT46C.EXE; VTCF1.EXE; VTCF46.EXE

              --------------------------------------------------------------
              HARD DRIVE:  1. Create one subdirectory for SCAN,CLEAN,VALIDATE,
                              VIRLIST.TXT, and THE VIRUS TERMINUS.
                              (Separate directories are allowed for SCAN, CLEAN
                              , VALIDATE, AND VIRLIST.TXT - Hard Disk only!)

                           2. Copy McAfee Associates FILES and VIRUS
                              TERMINUS files to the subdirectory*

                         * 3. Change the current drive and subdirectory to the
                              location of The VIRUS TERMINUS and then run the
                              file VT46C.EXE. Press <ENTER> after typing each
                              of the following lines.

                                               C:
                                               cd\location
                                               vt46C.exe

                              C: may be D: or whatever drive you installed
                              The VIRUS TERMINUS program on. cd\location
                              may be cd\utility\viruscan or any subdirectory
                              where you placed the TERMINUS files.

                           4. Press F5 to configure when you reach the Main
                              Menu.

              ------------------------------------------------------------

              FLOPPY    :  1. Format blank disk.(360K, 720K, 1.2Meg, 1.44Meg)

                           2. Copy McAfee Associates and VIRUS TERMINUS
                              files to the disk. Copy your shell or
                              file utility to the disk if there's room.

                              DO NOT copy the Virus Terminus files
                              to a subdirectory on your floppy
                              disk. Place ALL files in the ROOT directory.


                                   - PAGE 6 -


                           * 3. Place this disk in DRIVE #A or DRIVE #B

                                           A:
                                           cd\
                                           vt46C.exe
                                      or
                                           B:
                                           cd\
                                           vt46C.exe

                              Press F5 to configure at the Main Menu.

              The first time you run VT46C.EXE make sure you go no further
         than the MAIN MENU before you press F5 and make the needed additions
         or corrections to the DEFAULT TABLE.

         *********************************************************************

            The CURRENT DRIVE and SUBDIRECTORY must be the location of the
            VIRUS TERMINUS file set. Failure to change over to the TERMINUS
            drive and subdirectory will cause you to have to re-configure
            and modify the default table each time you run the program. The
            default table is always loaded in from the current drive and
            subdirectory at the time you start-up The VIRUS TERMINUS.

               You may create a DOS BATCH file with the loading sequence
               previously outlined in HARD DRIVE step #3 and FLOPPY step #3
               installation instructions.

         *********************************************************************

                ***** INSTALLATION FOR SYSTEMS ALREADY INFECTED *****

                          !! POWER DOWN your system first !!

                   !! DO NOT -USE CTRL-ALT-DEL KEY RESET SEQUENCE !!
                         !! DO NOT -PRESS THE RESET BUTTON !!

             1. Turn your system on and BOOT from a known non-infected DOS
                disk.(Place the DOS system disk in drive #A - WRITE PROTECT)
                DO NOT MAKE THE MISTAKE OF LEAVING AN INFECTED FLOPPY IN
                THE BOOT DRIVE.(READ ABOVE!)

             2. Format a blank disk using the DOS format command. Use the
                FORMAT.COM file found on your non-infected DOS disk. Avoid
                accessing or using any files and utilities found on your
                hard disk. Format the highest capacity floppy your system
                drives will allow. Current program version sizes allow 360K,
                720K, 1.2MEG, 1.44MEG disk sizes.

             3. Follow these guidelines for the drive specification that
                you are using:

                         A. Copy SCAN.EXE, CLEAN.EXE, VALIDATE.COM,
                            VIRLIST.TXT to the newly formatted disk.


                                   - PAGE 7 -


                         B. Copy VT46C.EXE, VTCF1.EXE, and VTCF46.EXE
                            to the newly formatted disk. DO NOT put these
                            files in a subdirectory on your disk. Put ALL
                            files in the ROOT.


                         C. Place this disk in DRIVE #A or #B and type
                            each of the following lines pressing <ENTER>
                            after each:

                                             A:
                                             cd\
                                             VT46C.EXE
                                          or
                                             B:
                                             cd\
                                             VT46C.EXE

                          D. Press F5 as soon as you are in the main menu
                             and configure VIRUS TERMINUS.

                          E. NOW write protect the disk!

                          F. Select #7 at the MAIN menu to run a Self-Test
                             to make sure the installation did not infect
                             your work disk AND/OR computer RAM memory.

      ***** NOTE: Your configuration file vt46C.cfg will be ignored if
                  any of the directory paths specify a drive other than
                  A: and/or B: when running Virus Terminus from a floppy.
                  The configuration and defaults will be initialized as
                  when the program is first run. This is a safety mechanism
                  to help insure that you do not access or run any programs
                  on your hard disk while trying to disinfect same.


      ***** NOTE: The Report option of SCAN and CLEAN will not work
                  since you will have write protected the disk. All
                  requests to SCAN/CLEAN single or job batch files
                  will be directed to the ENTIRE SUBDIRECTORY.Terminus
                  must make a temporary file named OPTIONS.$$$ on
                  your disk when you are in the SCAN/CLEAN FILE(s)
                  submenu. This will be impossible if your floppy
                  is write protected! Instead, when your disk is
                  write protected, Terminus sends SCAN/CLEAN a set of
                  command line options which include the name of the
                  of the subdirectory you select. ( \*.* instead
                  of individual file names.)


                                   - PAGE 8 -

         ***** 360Kb Installation, DISK SWAPPING, ALTERNATE SOLUTIONS:

              Disk swapping is forced on when the startup option /D
         is detected. This mechanism allows the creation and use of two or
         three installation disks with appropriate prompts issued to the
         user indicating which disk to put in the drive during runtime.

            DISK #1 - vt46C.exe, vtcf1.exe, vtcf46.exe, validate.com and
                      virlist.txt

                        DISK #2 - scan.exe and clean.exe
                                       or
                   DISK #2 - scan.exe      DISK #3 - clean.exe

         Note that it is also possible to create, with current program sizes
         of SCAN/CLEAN 8.9B97, the following alternative disk installation:

            DISK #1 - vt46C.exe, vtcf1.exe, vtcf46.exe, validate.com,
                      virlist.txt, scan.exe, and clean.exe

        The following program functions are disabled when disk swap is ON:

         1. SELF-TEST including startup SELF-TEST (/T)
         2. Startup LOCK (/L) which includes SELF-TEST before program entry.
            OPTIONS LOCK may still be activated from within the program.
         3. SCAN/CLEAN report generation.

         Disk swapping may be activated by adding the /D options at startup
         time:
                         A> vt46C.exe D   <Press ENTER>

         It is possible in a two floppy system to use both drives when the
         main objective is to scan or disinfect the hard disk. One disk/drive
         would be utilized for The Virus Terminus programs plus virlist.txt &
         validate.com, and the other for SCAN and/or CLEAN. The default table
         should be modified to indicate which drive will contain SCAN & CLEAN.
         There are other alternatives such as eliminating virlist.txt and
         placing both SCAN.EXE and CLEAN.EXE  with the Virus Terminus files
         ALL on one 360Kb disk. The above installation tips are offered as
         suggestions ...  users may elect different variations as needed.

         Disk swapping is offered as a solution to limited disk space
         on those systems which employ a single 360Kb floppy drive and hard
         disk where the intention is to SCAN and/or CLEAN the hard disk.
         Despite the tendency of computer manufacturers to now market systems
         with higher capacity floppy drives, many such systems still exist in
         the work place today.

                NOTE: Operating The Virus Terminus from a floppy imposes the
                      restriction that ALL program files, i.e. VT46C.EXE
                      VTCF46.EXE VTCF1.EXE SCAN.EXE CLEAN.EXE VALIDATE.COM
                      and VIRLIST.TXT must be located on a floppy - not the
                      hard disk. This is a safety mechanism to insure that
                      no programs will be run from a potentially infected
                      hard drive during a SCAN or disinfection sequence
                      thereby helping to reduce the possibility of further
                      infection by certain virus types.


                                   - PAGE 9 -


            You should not run any programs located on your hard drive
                 until you are sure ALL files and the entire system
                            has been disinfected!

         **********
         SUGGESTION: If your system is not infected it would be wise to make
         **********  up a disk like one of those previously described so that
                     if ever the need arises you will be prepared to meet any
                     virus infection threat without delay and inconvenience.

         ***** VIRUS TERMINUS START-UP OPTIONS:

               /S = Check Snow - Use to clear up display - older CGA's

               /M = Mono - Eliminates window background colors and makes
                    certain textcolor adjustments. Use with green/amber CGA,
                    gray VGA display, Laptop models, etc. Mouse will work
                    if present. DO NOT use with true IBM MDA(Monochrome).

               /T = Start-up SELF-TEST - Checks Terminus file set, SCAN,
                    CLEAN, VALIDATE and MEMORY.

               /L = Limit Operation to SCAN FLoppies ONLY! - forces Terminus
                    to proceed directly to the SCAN/CLEAN DRIVE(s) submenu,
                    OPTIONS LOCK forced on, only floppy drives given as choice
                    for SCAN or CLEAN, password required to continue if virus
                    infection is found, password needed to exit the SCAN/CLEAN
                    DRIVE(s) submenu. Also forces startup self-test. Read
                    Page #17 for more details.

               /D = Enable SCAN/CLEAN program disk swapping.

               /Q = Quiet mode - disable sound routines!

               Implement as follows: (or any combination thereof)

       A> vt46C.exe S   (press ENTER)  or   A> vt46C.exe M   (press ENTER)

       A> vt46C.exe T   (press ENTER)   or  A> vt46C.exe L (press ENTER)

       A> vt46C.exe D   (press ENTER)   or  A> vt46C.exe MTLSQ


         ***** RUN-TIME and START-UP SELF-TEST:

               The Virus Terminus provides a quick and easy way to SELF-TEST
         for possible infections. The Main menu selection #7 and F7-SELF-TEST
         found in each submenu will scan memory and the Virus Terminus dir.

              Start-up Self-Test for virus infections may be initiated as
         outlined in the START-UP OPTIONS section above. The self-test will
         be performed before program operation reaches the Main Menu. An
         orderly program HALT is available if a virus infection is found.

         NOTE: SCAN and CLEAN also perform their own self-test each time
               they are run.


                                   - PAGE 10 -


         ***** CONFIGURE THE VIRUS TERMINUS:

              THE VIRUS TERMINUS(c) may be configured from the main
         program menu or any sub-menu while the program is running. It
         is highly recommended that you configure your paths and
         parameters when running the program for the first time. DON'T
         RUN THE VIRUS TERMINUS FROM YOUR HARD DRIVE IF THE SYSTEM IS
         INFECTED. Use the floppy installation and disinfect your drive
         first - then install and run from your hard drive. Above all,
         FOLLOW THE DIRECTIONS THAT CAME WITH SCAN or CLEAN. Here is an
         explanation of the program default parameters:


       VIRUS TERMINUS PRGM DIR: Directory where the VIRUS TERMINUS files
                                will be found.

       SCAN.EXE   PROGRAM  DIR: Directory where SCAN.EXE is located at.

       CLEAN.EXE  PROGRAM  DIR: Designates where CLEAN.EXE is located at.

       SCAN/CLEAN REPORTS  DIR: Same directory as TERMINUS PRGM DIR.

       VALIDATE.COM PRGM   DIR: Location of VALIDATE.COM

       VIRLIST.TXT   FILE  DIR: Location of VIRLIST.TXT

       DOS SHELL  PATH & FILE : This parameter will describe where the
                                DOS Shell will be located and the name
                                of the shell program. Just enter the
                                directory and name of the program that
                                must be executed to make your shell work.
                                You may even use DOS COMMAND.COM if no
                                shell is available. When you press <F3>
                                the program control will go to the file
                                you specify.(HARD DISK INSTALLATION ONLY!)

       EXP.VIRUS DAT.FILESPEC : Path and filename for the experimental data
                                to be used with SCAN. Please read the DOCS
                                that came with SCAN. ADVANCED USER FUNCTION!

       EXP. VIRUS DATA ON/OFF : Set this switch to 'ON' and the experimental
                                virus data file will be used by SCAN. /EXT
                                Read further for more info. on Exp. Data

       FRENCH MESSAGES ON/OFF : Turns on/off SCAN/CLEAN French messages. /FR

       SPANISH MESSAGE ON/OFF : Turns on/off SCAN/CLEAN Spanish messages. /SP

       DISABLE CTRL-BRK ON/OFF: Disable CTRL-BRK key combo during SCAN &
                                CLEAN operations. /NOBREAK

       DISABLE   MORE?  ON/OFF: Disable SCAN/CLEAN MORE? prompt when screen
                                is full.  /NOPAUSE


                                   - PAGE 11 -


       SCREEN   SAVER   ON/OFF: Enables screen saver. User given choice of
                                1 to 60 minute delay before Saver activates

       START-UP   OPTION  LOCK: Set this parameter to ON if you wish to lock
                                options including access to the default table
                                each time the program is run. This mechanism
                                may be defeated during program operation by
                                pressing F6-OPTIONS LOCK and entering the
                                correct password. Read further for a list of
                                options which are locked for each menu. This
                                option forces a Self-Test at startup.

       ADD SCAN PRGM OPTIONS  : Enter options not available with The Virus
                                Terminus program. Clear by entering <SPACE>

       ADD CLEAN PRGM OPTIONS : Enter options not available with The Virus
                                Terminus program. Clear by entering <SPACE>

         * NOTE: The state of each switch can be changed after THE VIRUS
                 TERMINUS is up and running. This is the only area where the
                 options /FR, /SP, /EXT, /NOBREAK, and /NOPAUSE may be
                 activated.

         ***** ADDING NEW or EXTRA OPTION PARAMETERS:

         Modify the default table entries designated as ADD SCAN PARAMETERS
         and ADD CLEAN PARAMETERS. Refer to your SCAN.EXE and CLEAN.EXE
         documentation for a list of valid parameter options.


         ***** USING A DOS SHELL UTILITY:(HARD DISK INSTALLATION ONLY!)

         Just press F3 at any menu. THE VIRUS TERMINUS will suspend
         operation while you are in your shell/utility. You can get
         back to THE VIRUS TERMINUS by using the EXIT/QUIT function
         of your utility or by typing 'EXIT' at the DOS command prompt.
         DO NOT attempt to go back to THE VIRUS TERMINUS by re-launching
         VT46C.EXE instead of using your SHELL's  'EXIT' function.


                                   - PAGE 12 -



         ***** MOUSE OPERATION:

              The two button Microsoft Mouse hardware specifications
         are supported by this program when used in conjunction with a
         color display/card that supports the IBM CGA C80 standard.
         The program's video mode auto-detect logic disables mouse
         operation if a Monochrome Display Adapter is detected. Only
         keyboard entry is functional in MONOCHROME video mode(IBM MDA
         standard).  Logitech and all other Microsoft Mouse compatible
         mice should function properly.  The program logic checks for
         a 'connected' mouse.  You should not experience any trouble
         if your mouse is truly MS compatible, connected to the
         serial port or buss card, and the mouse driver software was
         installed prior to running this program.


         ***** SCAN/CLEAN Version Notes:

       The VIRUS TERMINUS(c) V4.6C was built around SCAN/CLEAN 8.9B97

         These versions of SCAN/CLEAN incorporate many new options. The
         most important option to The Virus Terminus users is the
         @filename list file. The Virus Terminus now uses this option
         to pass all filename information, options, etc. to SCAN/CLEAN.
         The speed of the SCAN/CLEAN FILES function of The Virus Terminus
         has increased many times over because of this option. Floppy
         users MUST leave the disk containing SCAN, CLEAN, VALIDATE,
         VIRLIST, and The Virus Terminus program files in either drive #A
         or drive #B (Don't Remove! Unless you are using 360Kb disk swap)
         Hard Drive installation users should just use all the same
         precautions they have been using .

         ***** SCAN/CLEAN FILE(s): (Main Menu #1)

              Use this main menu selection when all you need to do is
         scan or clean an individual or batch of files. The /A ALL
         switch is forced on. You may choose file(s) from a paged directory
         display if your disk is not write protected. Each time you SCAN or
         CLEAN files you are given a choice of what subdirectory to pick
         files from.


                                   - PAGE 13 -


              You must specify a VIRUS CLEAN CODE before you can 'CLEAN' a
         file or batch of files. An attempt to auto-detect the code will be
         made if you use SCAN first and provided the Virus ID is still present
         on the current screen page when SCAN has finished running. Only the
         first ID (looking down from the top of the screen) will be reported
         in the case of multiple infections. A manual entry mechanism is also
         available for entry of ID codes. Press #2. ENTER VIRUS CODE. The
         Virus ID is the character string specified between the [   ]
         brackets which SCAN outputs to the screen.

         ***** SCAN/CLEAN DRIVE(s): (Main Menu #2)

              Use this main menu selection when you wish to scan ENTIRE
         floppy disks or a hard drive. Turn the /MANY switch on if you
         want to SCAN/CLEAN more than one floppy disk.

         ***** IMMUNIZATION/RECOVERY FUNCTIONS SUBMENU:  (Main Menu #3)

                           (* Advanced User Level! *)

         This program feature helps you protect your files/system against
         new or unknown virus infectors. Use it wisely.

         #1. ADD IMMUNIZATION ( /AG ) : This function will add 52 bytes
             of recovery information to each EXE or COM file selected.
             The added data facilitates detection and recovery from unknown
             or new virus infectors. NOTE: self-modifying files like
             MS/PC DOS SETVER.EXE should not have recovery information added
             to them. The Virus Terminus will look for a file named
             VALNOT.TXT before proceeding. VALNOT.TXT is an ASCII text file
             with a list of [path + filename] exceptions not to add recovery
             data to. This is a user defined/created file. Read the
             documentation that came with SCAN for information on how to
             construct such a file. VALNOT.TXT should be placed in The Virus
             Terminus directory. You should not add validation data to files
             that are already immunized. SCAN with /RG to remove before adding

         #2. CHECK IMMUNIZATION ( /CG ) : Performs a SCAN of each file etc.
             selected and uses the added recovery data to determine if
             selected files, partition table, etc. have been tampered with.
             Selecting this function also sends /CERTIFY option to SCAN so
             that any files without validation information will be reported.

         #3. REMOVE IMMUNIZATION ( /RG ) : Removes the recovery data from
             selected files restoring them to original length.

         #4. ATTEMPT RECOVERY ( CLEAN /GENERIC ): CLEAN will attempt to
             disinfect known/unknown virus infections using the recovery
             information added to files and found in SCANVAL.VAL hidden
             file(boot record, partition table) and attached to individual
             files. Recovery of the original file/area will be attempted.

         #5. The CRC CHECKSUM menu selection #5 will perform a two method
             check on the file of your choice which will provide a comparison
             for future checks. The file display for this selection IS NOT
             filtered since you may perform a CRC checksum on ANY FILE.


                                   - PAGE 14 -


         ** NOTE:

      You should not add validation data to files already immunized or to
      files that are self-modifying or perform their own self-check!. The
      Virus Terminus looks for a USER CREATED ASCII TEXT EXCEPTION LIST
      file named VALNOT.TXT . The file must be named VALNOT.TXT, an ASCII
      text file, and be located in the same subdirectory as the Virus
      Terminus program files. Read the documentation that came with SCAN
      for information on how to construct this file. Place this file in the
      Virus Terminus directory. Read SCAN95.DOC for more information on
      when and when not to add validation.

        ***** REPORT FUNCTIONS: (Main Menu #4)

             Version 4.6C offers several options. The REPORT FUNCTIONS
        submenu allows viewing, merging, printing and deleting of report
        files. DOS BATCH file execution is also available.

             The MERGE function first displays a list of all report files
        found in the TERMINUS directory. You may choose from any or all
        of them. Then MERGE will create a master file which combines ALL
        chosen report files together.

             User created custom DOS batch files may be launched by
        pressing sub-menu select #3. This version of The VIRUS TERMINUS
        allows the user to launch DOS batch files from ANY logical drive
        and/or subdirectory. (HARD DISK INSTALLATION ONLY!)

         ***** SCAN/CLEAN REPORTS:

              A report counter is initialized when THE VIRUS TERMINUS is
         first run. Each report generated is given a different name by
         using the report counter value as part of the name(rpt_1.txt,
         rpt_2.txt, etc,)  You may generate 35 different reports before
         the counter recycles back to #1. It is important to note that the
         reports will always start with rpt_1.txt each time the program is
         run. Therefore, if you wish to save a report copy it to another
         disk or directory so that the original report is not overwritten
         the next time that you run THE VIRUS TERMINUS.Version 4.6C allows
         report merging as in other versions with one important difference:
         As reports are merged into RPTMASTR.TXT they are automatically
         deleted so that a separate deletion operation to purge the merged
         reports is not necessary anymore.

         ***** VIRUS FACT SHEETS: (Main Menu #5)

              The Virus Terminus, v4.0B, introduced a new main menu
         selection : 5. VIRUS FACT SHEETS. Information on individual virus
         known characteristics, areas of damage, which McAfee Associates dis-
         infector utility to use, etc. is available.
              Virus Terminus v4.6C is no longer dependent on CLEAN ID codes.
         Users may now browse through the complete list of virus infectors.
         Printing of each Fact Sheet is available.


                                   - PAGE 15 -


         ***** SCAN/CLEAN OPTION SWITCHES

        Point the mouse cursor  over the word  ON! or OFF to change add or
        delete options. Press a letter key (A through H) if you  are  using
        the keyboard.

                 A. SCAN/CLEAN ALL FILE TYPE EXTENSIONS:
                           SCAN/CLEAN OPTION = /A
                    SCAN  and  CLEAN will  process  ALL  files
                    found instead  of  just  .EXE  .COM  .BIN
                    .OV? .PGM .PIF .PRG .SYS .XTP .SWP

                 B. SCAN & OVERWRITE/DELETE INFECTED FILES:
                               SCAN OPTION = /D
                    Instructs  SCAN to overwrite / delete  any
                    infected files   when   found .  Use  with
                    caution!

                 C. TURN MEMORY CHECK ON:
                           SCAN/CLEAN OPTION = /NOMEM
                    Terminus automatically  sends  this option
                    to SCAN / CLEAN. You must turn this switch
                    ON!  to check  memory.  /M is then sent to
                    SCAN / CLEAN so that  ALL  memory resident
                    virus infections  are searched  for . READ
                    SCAN documentation for more information on
                    the /M option.

                 D. CHECK MEMORY ABOVE 640KB:
                            SCAN/CLEAN OPTION = /CHKHI
                    Instructs SCAN/ CLEAN to check memory 640K
                    to  1088K  (1024) .  This  switch will not
                    function when MEMORY  CHECK  switch #C  is
                    set to the OFF position.

                 E. SCAN/CLEAN MULTIPLE FLOPPIES:
                             SCAN/CLEAN OPTION: /MANY
                    Allows SCAN/CLEAN of multiple floppies.

                 F. DOS 4.0+ BOOT SECTOR, P-TABLE, NO FILES:
                             SCAN/CLEAN OPTION: /MAINT
                    Instructs SCAN/CLEAN to perform partition,
                    boot  record  etc.  type  operations  with
                    considerations  for DOS 4.x and higher. NO
                    files are processed when using this option
                    & Terminus checks  to  see if you have DOS
                    4.0  or  higher and  will not allow you to
                    use /MAINT it if not.

                 G. FAST DISPLAY & SKIP INSIDE LZEXE/PKLITE:
                             SCAN/CLEAN OPTION: /FAST
                    Speeds up SCAN / CLEAN operations  by  not
                    checking inside LZEXE / PKLITE  envelopes.
                    Display output  which shows  name  of file
                    being processed is  disabled . This option
                    may cause missing of some virus infections
                    Read SCAN documentation for more info.


                                   - PAGE 16 -


                 H. TURN ON SCAN/CLEAN REPORT FUNCTION:
                            SCAN/CLEAN OPTION: /REPORT
                    Turns on SCAN/CLEAN text file reports. The
                    report  for  each  run of SCAN / CLEAN  is
                    placed in the TERMINUS directory. The name
                    of each report is automatically  generated
                    Read VT46CDOC for more info.


         ***** SAVING SCAN/CLEAN OPTIONS:

              To save the state of option switches A .. I simply press
         F5-Change Defaults. Then press <ESC> to leave the default
         table area. Your option settings are saved along with the other
         program parameters found in the default table. Each time you
         start Terminus the option settings for switches A .. I will
         be restored.

         ***** OPTIONS LOCK:

               OPTIONS LOCK set to the ON position disables the following
         options:

     MAIN Menu ................... : F3-DOS Shell; F5-Change Defaults;
                                     #6. Run DOS BATCH FILE

     SCAN/CLEAN FILE(s) Submenu    : SCAN/CLEAN OPTIONS A .. I; F3-DOS SHELL;
                                     F5-Change Defaults;

     SCAN/CLEAN DRIVE(s) Submenu   : SCAN/CLEAN OPTIONS A .. I; F3-DOS SHELL;
                                     F5-Change Defaults;

     IMMUNIZATION/RECOVERY Submenu : F3-DOS Shell; F5-Change Defaults;
                                     #1. ADD IMMUNIZATION; #3. REMOVE
                                     IMMUNIZATION

     REPORT FUNCTIONS ............ : F3-DOS Shell; F5-Change Defaults;
                                     #4. DOS BATCH FILE



         ***** OPTIONS LOCK PASSWORD:

              The password supplied as a default is "PASSWORD" . Do not
         include the quotes and enter in upper case letters only. The
         password default was deliberately left out of the Default Table
         to promote operation security. You must edit the file VT46C.CFG
         with an ASCII text editor to change the password. VT46C.CFG is
         an ASCII text file.

              Password is the 18th line in VT46C.CFG . Use ONLY the numbers
         0 .. 9 and upper or lower case letters A .. Z .  No other keyboard
         characters will be recognized. Limit the password to 12 characters
         or less. Eliminate any spaces between characters.


                                   - PAGE 17 -




        ***** LIMIT OPERATION TO SCAN FLOPPIES ONLY: (Start-up option /L)

             This mode of operation may be brought up by adding a /L option
        at startup and by running TERMINUS from your AUTOEXEC.BAT file.

        /L causes Terminus to perform a self-test and then proceed directly
        to the SCAN/CLEAN DRIVE(s) submenu setting OPTION LOCK to the ON
        position. In addition the drive choices are limited to A: and to B:
        if one exists. No exit from this submenu is allowed until the OPTION
        LOCK is defeated by pressing F6-OPTIONS LOCK and the correct password
        is entered.  (Not available with 360Kb disk swapping)

        This mode of operation may also be initiated at any time during
        normal program operation by moving to the SCAN/CLEAN DRIVE(s)
        submenu and pressing F6-OPTIONS LOCK. Upon entering the correct
        password the user is given the choice of just locking the normal
        amount of options as outlined above or initiating further
        limitations to allow SCAN FLOPPIES ONLY.

        Password to Continue is required when a virus is detected during
        either a SCAN or CLEAN. This will necessitate the intervention of
        the Superuser who should take action to prevent further system and
        or floppy infection spread. The password required is the same used
        to enable/disable the Options Lock. It is strongly suggested that
        SCAN/CLEAN OPTION "E - SCAN/CLEAN MULTIPLE FLOPPIES" be left in
        the "OFF" position.

        The following SCAN/CLEAN DRIVE(s) submenu options are locked and
        no access is given to same when in this mode:

        1. A .. I SCAN/CLEAN option list

        2. F3-DOS SHELL,  F5-CHANGE DEFAULTS

        3. Submenu selects #2, 3 - Select Virus ID; CLEAN DRIVE

        4. Submenu select #4. QUIT - Options Lock must be disabled in order
           to leave this submenu when Floppy Lock is ON.


                           ***** USE WITH CAUTION *****

             This feature was NOT intended to be used as AN UNATTENDED SCAN
         STATION. A SuperUser or System Administrator should be present to
         intervene and take control when virus infection is detected.



                                   - PAGE 18 -

             Pressing F6 will request the user to enter a password to
        disable the lock and return Terminus back to normal operation.
        OPTIONS LOCK and FLOPPY LOCK may be toggled ON or OFF by use of
        F6-OPTIONS LOCK.

         ***** EXPERIMENTAL VIRUS DATA:( ADVANCED USER FUNCTION! )

              Please read the SCAN docs to get a better understanding
         of what an 'experimental virus data file' consists of. If you
         decide that you need to utilize this function, press F5-CHG.DEF
         and make an entry to the default 'EXP.VIRUS DAT.FILESPEC'. This
         entry will be the path and filename for your experimental virus
         data file. Next, turn default switch 'EXP. VIRUS DATA ON/OFF' to
         the 'ON' position. NOTE: This is the only way to tell THE VIRUS
         TERMINUS program to relay the /EXT switch to SCAN. Be sure
         to go back to CHANGE DEFAULTS and turn this switch off when you
         are finished!

         ***** WRITE PROTECTED FLOPPY OPERATION:

              Running The Virus Terminus, SCAN, CLEAN, etc. from a write
         protected floppy is a must if your system is infected. Doing so,
         however, imposes a few minor limitations.

             A.The SCAN/CLEAN report function will not work since SCAN/CLEAN
               must write to the disk to create a report.

             B. The SCAN/CLEAN FILES submenu normally uses the @filename
                response file for super fast operation. If your floppy is
                found to be write protected this mechanism is suspended.
                You are not given choice of individual files. Instead, you
                must choose from whole subdirectories only.

      ***** DIRECTORY PATH SELECT:(PATH FINDER)

      The PATH FINDER is called up during the following program operations:

          1. Default Table entry of program location paths
          2. SCAN/CLEAN a file
          3. Directory View
          4. Immunization/Recovery of files
          5. Run DOS Batch File

          The Following limitations are imposed:

          1. Only paths 64 characters or less are included in the selection
             list.
          2. A 35 character limition on selected paths is imposed when user
             is attempting to grab a path to be placed in the default table.
             User is warned and allowed to make another selection.
          3. Maximum of 512 paths with manual entry mechanism provided for
             monster systems, etc.


                                   - PAGE 19 -


          Path Finder will develop a list with a maximum of 512 paths/dirs
          starting with the ROOT directories first and working in. This is
          usually good enough for most systems. However, some users maintain
          massive file/dir inventories. Therefore, a manual entry is provided
          for paths/dirs not found on the list. The following are active:

          <PGDN> <PGUP> = Display next or previous window page.

          <ENTER>       = Selects highlighted path.

          CTRL-E        = Enter a path/dir not on the list.

          CTRL-N        = Select new drive and path - display new list

          CTRL-P        = Hardcopy print of the path list with stats.

          CTRL-T        = Creates an ASCII text file of the path list
                          in the ROOT directory of the drive that was
                          scanned.

          <ESC>         = Quit and return to submenu.

          F1,F10        = HELP


         ***** SCREEN SAVER :

              The screen saver is a NON-interrupt driven function which
         blanks your computer screen after a pre-determined period of
         keyboard or mouse inactivity. The screen saver is turned on
         from the Default Table(press F5). Users may enter from 1 to
         60 minutes of *approximate* delay time before activation.

             The screen saver responds to keypress AND mouse clicks. The
         screen saver will not interfere with system I/O's and other
         program functions. The following area of Virus Terminus program
         operation IGNOREs the screen saver:

         1. Any point of keyboard string entry(i.e. Enter Password, etc.)

         ***** MEMORY AVAILABLE FUNCTION: (LARGEST CONTIGUOUS RAM BLOCK)

              Memory available for SHELL launch or VIRUSCAN operations
         can be found by pressing CTRL-F key combination while in ANY
         MENU or CHANGE DEFAULTS. (This is NOT DISK space, rather computer
         RAM memory!)

         ***** DOS ERRORLEVEL on EXIT:

          The Virus Terminus sets the DOS errorlevel upon exit as follows:

       0 = Normal Exit  1 = Virus Infection Detected  2 = Abnormal Termination

        In the event that a user chooses to (C)ontinue instead of (H)alt when
        a virus is detected, the errorlevel will still be set to 1 when the
        Virus Terminus is finally quit from the main menu.



                                   - PAGE 20 -


        ***** OPERATION FROM Microsoft WINDOWS:

             The Virus Terminus is a DOS application. It should be run FULL
        WINDOW. A "PIF" file is not required although it may be of use to
        certain advanced users. A WINDOWS ICON, VTEC.ICO, has been included
        with this version of The Virus Terminus.


        ***** PROGRAM ERROR MESSAGES:

              The following is a partial list of program error messages and
         corrective actions.

         ------------------------------------------------------------------

     1.                    "ERROR!-Unable To Execute ... "
              "ERROR!  Unable to Execute/Find SCAN.EXE or CLEAN.EXE!"
              "ERROR! Unable to Execute/Find DOS SHELL or BATCH FILE"

         Terminus was requested to perform a function which requires an
         external file and an error has resulted.

         REMEDY: 1. Press F5-CHANGE DEFAULTS and enter the correct location
                    of the requested file. Check to make sure that the file
                    is actually there by doing a directory listing at the
                    DOS prompt (i.e. DIR C:\UTILITY\VIRUSCAN )

                 2. Press CTRL-F at the MAIN MENU to determine how much
                    memory free exists. Memory free reported should be
                    250Kb or more. Power Down and start over. Check memory
                    free again. If still not enough, run Virus Terminus
                    from the DOS prompt instead of your shell, etc.
         ------------------------------------------------------------------

     2.                 "REPORTS DISABLED WHEN DISK SWAP ON!"
                        "SELF-TEST DISABLED/DISK SWAP IS ON!"

         A /D command line option was detected at program startup.

         REMEDY:   Use a high capacity installation disk and/or
                   put ALL needed program files on the same disk.

         ------------------------------------------------------------------

     3.              "Switch Forced ON! For FILE Submenu!"
                     "Switch NOT ACTIVE For FILE Submenu!"

         /A SCAN/CLEAN option is forced on and may not be disabled for any
         reason while in the SCAN/CLEAN Files submenu. /MAINT, /FAST and
         /MANY are not active - disabled and inappropriate for processing
         single or job batch groups of files only.



                                   - PAGE 21 -


     4.               "You MUST! First *ENTER* A VIRUS ID!"

         The CLEAN-up Virus ID Code is not present in the CLEAN-up ID Code
         window and you are trying to CLEAN or disinfect a file or diskette.
         If SCAN was not previously run and/or Auto-Detect logic couldn't
         grab the code from SCAN's output then you MUST press submenu select
         #2 Enter Virus ID. The code is displayed by SCAN when a virus
         infection is detected. It is the string found BETWEEN the [ and ]
         brackets. You may also find a list of codes in the McAfee Associates
         file VIRLIST.TXT.
         ------------------------------------------------------------------

     5.                 "DOS VERSION 4.x OR HIGHER REQUIRED!"

         You are trying to use /MAINT and DOS Version 4.0 or higher is
         not currently being run or was not used to format the disk
         you are working on. (Must be BOOT Drive C:)
         ------------------------------------------------------------------

     6.                 "ACCESS DENIED! Please Run VT46C.EXE"

         vtcf1.exe and vtcf46.exe are not stand alone program files. They
         must be used in conjunction with vt46C.exe only!
         ------------------------------------------------------------------

     7.              "ERROR! Unable to Execute/Find VTCF46.EXE !!"

         "Please Change Active Directory to Location of The Virus Terminus!"
         The current directory is not the location of the Virus Terminus.

         REMEDY:    Try typing the following just before running Terminus.
                    Press <ENTER> after each line:

                    C:
                    cd\
                    cd\location
                    vt46C.exe

                    C: may be D: or whatever drive Terminus is located on.
                    "location" should be the name of subdirectory where
                    Terminus is located at.
         ------------------------------------------------------------------




                                   - PAGE 22 -

                   PRODUCT REGISTRATION -- PERSONAL USE ONLY!
               ANY OTHER USE REQUIRES A NEGOTIATED SITE LICENSE

  PAID Registration gives license and right to use The Virus Terminus on a
  single machine of personal home use only and updates as described below,
  user help and technical assistance for The Virus Terminus. A PAID negotiated
  site license is required for educational, business, corporation, government
  and/or agency environment use. This registration does not apply to any
  underlying programs used in conjunction with The Virus Terminus. For a list
  of files contained in The Virus Terminus program package please read page 2
  of this document.(VTEC46C)

          NAME       : ________________________   CHOOSE ONE DISK MEDIA TYPE
          STREET     : ________________________      5.25" ____  3.5" ____
          CITY       : ________________________
          STATE/PROV.: ________________________   OWN/USE A MODEM ? Y__ N__
          ZIP CODE   : ________________________
          COUNTRY    : ________________________    TERMINUS OBTAINED FROM?
                                                   _______________________
                                                   _______________________

                                     | REGISTRATION / LICENSE         $ 20.00
          ONLY U.S. FUNDS ACCEPTED!  | NJ SALES TAX IF APPLICABLE     $
                                     |                                -------
          MAKE YOUR REMITTANCE TO:   |                                $
                                     |  SHIPPING AND HANDLING         $  4.00
               S.T.CALISE            |  OVERSEAS SHIPMENT ADD $2.00
          673 HERBERTSVILLE ROAD     |                                -------
          BRICK, NJ  08724  USA      |                       TOTAL  = $


     UPGRADES:    REGISTERED users of V4.6C are eligible for upgrades to
                  subsequent releases. Updates may be otained by mail by
                  sending $6.00 in U.S. funds to S.T.Calise at the above
                  address. Don't forget to specify the disk media type and
                  your current address. Instant update/upgrade is also
                  available to all REGISTERED users.Your registration packet
                  will contain the needed access codes and information.

       STC BBS  908-206-1386  2400 .. 14.4k  v.32/.32bis v.42/.42bis MNP 1-5
    --------------------------------------------------------------------------

    For registration/license information on VIRUSCAN(SCAN), CLEAN, and other
    McAfee Associates programs please contact:

          McAfee Associates                (408) 988-3832 office
          3350 Scott Blvd, Bldg. 14        (408) 970-9727 fax
          Santa Clara, CA  95054
          U.S.A.



                                   - PAGE 23 -


                          SCAN, CLEAN, VALIDATE, VIRLIST
                     Copyright (c) 1989-1992 by McAfee Associates.

    IBM and OS/2 are registered trademarks of International Business Machines
    COMMAND.COM and SETVER.EXE are copyright by Microsoft Corporation
    WINDOWS is a registered trademark of Microsoft Corporation
    PKLITE(tm) is a trademark of PKWARE, Inc.
    LZEXE is copyright by Fabrice Bellard


                   *****  UPDATE INFORMATION VERSION 4.6C *****


    1. Fixed failure of screen saver to activate at certain points of program
       operation on systems when no mouse is detected.(keyboard only
       available - problem not detectable on some systems)

    2. Added further point and shoot capability to path finder and directory
       file display selection screens.

    3. Tested VTEC46C with SCAN/CLEAN 8.9B97, VTEC46C with SCAN 9.0v99

    4. Added WINDOWS and/or OS/2 DOS session option switch. This option,
       when selected, injects /UNATTENND into the SCAN/CLEAN command line.
       Consult SCAN documentation for further information. DOS v3.1 or higher
       is required.

    5. VTEC46C.ZIP now includes STC.ICO, a WINDOWS icon for user convenience.
       Please note: The Virus Terminus is a DOS APPLICATION and should be
       treated as same. The Virus Terminus needs FULL WINDOW to operate
       satisfactorily.

    6. Revised and made adjustments to virus fact sheet module to compensate
       for shifted data field in virlist.txt file packed with SCAN 9.0v99

    7. Miscellaneous adjustments and modifications to documentation, screen
       prompts, menu commands, etc.

    8. Added /Q quiet mode start-up option which disables sound routines.

    9. Made correction to file tag display -SCAN/CLEAN FILES submenu.
