iRiS AntiVirus
iRiS Software 
For assistance with iRiS AntiVirus  please contact the iRiS Help Desk at:
(619) 258-9293


1.	Introduction

1.1     What is "iRiS AntiVirus"?
iRiS AntiVirus is a powerful antivirus protection tool that will stop computer viruses from damaging your computer system. iRiS AntiVirus is designed to remain in the background, and prevent further infiltration. By using interactive dialogues, you provide the guidelines for dealing with a virus. You can also manually scan your disk or diskettes when desired. iRiS AntiVirus can remove viruses from files and boot sectors, as well as reconstruct your system after infection.

1.2     iRiS AntiVirus  Modules
The  iRiS AntiVirus package is made up of complimentary modules. The first module, the Active Monitor, protects yor system, while the second module, the Cure program, cleans the system from viruses. Together, these components will help you maintain a healthy computer system.

1.2.1   Active Monitor - The Memory Watchdog
The Active Monitor guards against viral penetration into your computer's memory. The Active Monitor is loaded every time you boot your computer and remain active as long as your computer is in use. Every time you run a program (either from your hard disk or from a floppy disk) or open a
file, the Active Monitor will examine the program code before it is loaded into your system's memory. The Active Monitor recognizes the unique signatures of thousands of viruses, and will stop any known virus before it can become active. The Active Monitor remains on guard to protect your system while in Windows 95 session and also protects DOS applications under Windows 95. The Active Monitor generates a Windows pop-up dialogue box that displays a warning that a virus has been discovered and offers an option to remove the virus.

1.2.2   Cure for Windows - Detection, Removal, Reconstruction
The Cure for Windows module literally "Cures" your system of viruses. It scans through your system, finds viruses, removes them and reconstructs any damaged files.  Cure for Windows detects the presence of most viruses anywhere in your computer, and usually repairs the damage instantly. You are able to decide how you wish to deal with a virus on the event of finding one. You can also redefine parameters, which will be activated automatically during the scan. You can run this program at any time to cure the specified medium (the whole disk, one or more directories, or the floppy disks).


2.	Installation - SETUP

2.1     What do you need to install iRiS AntiVirus ?
iRiS AntiVirus  requires the following system Configuration:
Hardware: IBM-PC or Compatible
Operating System: Windows 95

2.2     What Happens During Installation?
In order to use the iRiS AntiVirus  package, you need to install the software on your hard-drive. Although this process is quick and straightforward, several important measures are taken during
installation to protect your computer.

2.2.1   The SETUP program copies all files that are necessary to run iRiS AntiVirus  into a special sub-directory on your hard-drive. The new sub directory (which by default is called C:\Program FIles\iRiS\AntiVirus) will be created automatically if it does not already
exist.

2.3     First Time Installation
The iRiS AntiVirus SETUP program makes the installation of iRiS AntiVirus quick and easy. Installation will normally be a one-time process.

To Install iRiS AntiVirus on a computer with a hard-drive:

1.      Verify that your write protect original iRiS AntiVirus  diskette is in the appropriate drive.

2.      In the Windows RUN dialogue in the START menu, type:
              A:\SETUP  <ENTER>  or  B:\SETUP  <ENTER>

3. Wait for the Installation's opening screen. You can then choose either Next, which will start the installation, or Cancel, which will abort the installation.

4. The iRiS Software License Agreement will then be displayed on the screen. Please read the Agreement and if you agree please press Next. If you do not agree with the License Agreement, please press Cancel. You can also use the Back button to return to the welcome screen.

4. The setup will now request a destination for the iRiS AntiVirus program. The default is C:\Program Files\iRiS\AntiVirus. If you would like to change the default directory please use the Browse button. Your current disk space and disk space after installation are also displayed on this screen. To accept the options on this screen, please press Next. To return to the License Agreement please press Back. To abort the installation, please press Cancel.

5. You will now be asked to choose which components of iRiS AntiVirus you would like to install on your computer. You can install Cure for Windows, AntiVirus Active Monitor, and Job Manager for Windows. By default all three components are checked. To deselect an option please click on the check box next to that component. To accept the checked components please press Next. To return to the Destination screen, please press Back. To abort the installation, please press Cancel.

6. The ShortCut page will now ask you where you would like to create program shortcuts for the iRiS AntiVirus components. You can create a shortcut for:
	Cure for Windows on the Desktop
	Active Monitor in the StartUp
	Active Monitor on the Desktop
	Job Manager in the StartUp
	Job Manager on the Desktop
To accept the checked shortcuts please press Next. To return to the Components screen, please press Back. To abort the installation, please press Cancel.  

7. The Program Group name will now be determined. By default the name is iRiS AntiVirus. You can change this name to any name you would like. 
To accept the Program Manager please press Next. To return to the ShortCut screen, please press Back. To abort the installation, please press Cancel.

8. You are now ready to install iRiS AntiVirus.To install the program, please press Next. To return to the Program Group screen, please press Back. To abort the installation, please press Cancel.
  
9. iRiS AntiVirus will now install the program onto your hard drive.

10. You will now receive the Installation Complete message. You can now choose the final options in the installation. You can:
	Scan My Disk
	Boot System for Active Monitor
	Execute the Job Manager for Windows
To accept the checked options and exit the installation please press Finish. 

11. The Cure for Windows icon will now be located on your desktop and can be used as a shortcut to start an on-demand scan of your hard drive or diskettes. 


2.5     Removing iRiS AntiVirus

To remove the iRiS AntiVirus Program:
1.      Choose Uninstall iRiS AntiVirus from the iRiS AntiVirus Program group.

2.      Choose between Automatic and Custom Uninstall and then choose Next.

3. 	If you chose Automatic then click Finish and the program will Uninstall. If you chose Custom, then skip to # 4.

4.	Choose which files you would like to uninstall, and click Next. 

5.	Choose which directories you would like to uninstall and click Next.  

6.	Choose which Registry Keys you would like to uninstall and click Next.

7.	Choose which Registry Keys you would like to edit and click Next.

8.	Choose which Sub-Systems you would like to uninstall and click Next.  

9. 	Click Finish to Uninstall the program.


3.      Using AntiVirus

3.1     Immunization
The Active Monitor protects all applications under Windows 95 (including DOS applications).
Normal installation of iRiS AntiVirus on your hard drive ensures that the Active Monitor module is activated automatically when the computer is turned on.

3.1.1   Virus Detection with Active Monitor
When a program infected with a known virus attempts to load itself into memory, Active Monitor will be alerted. The Active Monitor will immediately warn you of the attempted infiltration. A dialogue box will pop up on your screen with a message warning of viral infection. This means that the program you are currently running was infected with a virus, which attempted to enter system memory, and the Active Monitor successfully prevented the infected program from running.

3.1.2   What should you do if you are running an Infected Program?
If you see the Active Monitor warning box appear when you run a particular program, it is likely that the program is infected with a computer virus. Active Monitor prevents the virus from entering memory and causing damage, you have three choices: Ignore, Cure, and Delete. 

3.1.3   Configuring Active Monitor
The Active Monitor is found on the tray on the right side of the task bar. Clicking on the icon will maximize the screen and show the available options. You may change the options and minimize the window. The Active Monitor also enables you to choose between ENABLE or DISABLE, by clicking the button at the bottom of the screen.

3.2     Curing your system
The Cure for Windows detects viruses, removes them from your files, and reconstructs damage files.

3.2.1   When to Use Cure for Windows
You can use the Cure for Windows program any time you want, to ensure that a specific diskette or hard drive partition is virus free. We recommend that you run Cure for Windows periodically, as well as whenever you obtain new software or add new files to your hard drive. You should always run Cure for Windows after the Active Monitor has detected a viral infection.

3.2.2   Using Cure for Windows
Double click on the Cure for Windows icon and Scan your disk or diskettes. If it is not possible to remove a virus from a file, you have the option to save a sample of the infected file for further investigation.

3.2.3   Using Cure with Command Line Arguments
The Cure module can also be run non-interactively. This is useful for including Cure in a batch file. To run Cure in batch mode, you must specify command line arguments. 

The Cure COMMAND LINE syntax is as follows:

Cure [drive: <directory: filename>  <options>
Options:
/B              - Scan BOOT / MBR ONLY
/C              - Clean infected files
/D              - Delete infected files
/H              - Scan all high memory
/L<:xxx>        - Display viruses <virus name>
/M              - Do not scan memory for viruses
/N<:directory>  - Rename infected file or move to directory
/O              - Inform only (take no action and quiet mode)
/P<:LPTx>       - Send the report to printer (default - PRN, LPTx - x is the LPT number)
/Q              - Quiet mode
/R<:x>		- Generate report (default - infected files only, 1- all files, 2 - clean files only)
/S              - Very slow scan (Scan file through)
/V   		- Include reviewer stuff scan
/?              - Help
For example:

CURE    D:\program file /S /C /R

This will Scan files using slow scan in the program files directory on drive D, clean all infected files and generate a report of the infected files only.

................Copyright (c) iRiS Software
