Symantec AntiVirus for Win 95, Win 98/Me, and Win NT, Win 2000

Is this not the right NAV your Windows? See Symantec AntiVirus for Windows.

SAV CE (Corporate Edition) Version 9 for Windows 98/Me/NT 4.0/2000. Newer NAVs and SAVs don't support Windows 95, but Version 7.61 of NAV is still available, which does. (You can't download it from home though.)

In addition, SAV CE Version 9 cannot be used to make a emergency Rescue Disk set using current virus definitions that you can use to scan a Windows 95/98/Me computer, or a Windows NT/2000/XP computer with a FAT32 disk partition. (Emergency Rescue Disks are DOS boot disks that allow you to find a virus without booting off your hard drive. After you find the virus, you follow Symantec's instructions on how to remove it, then you can boot your computer normally and virus-free.)

However, you can still create Symantec AntiVirus Emergency Disks with a program that you download from the Symantec FTP site. The instructions on this Symantec Web page require that you have current virus definitions installed on your computer. There are links on this Web page to other Symantec Web pages with instructions on what to do when you have a virus and don't have SAV or NAV or current virus definitions already installed on your computer.

This Symantec Web page explains how to use the Emergency Rescue Disks: How to use current virus definitions and the antivirus CD Emergency disks or Rescue disks to scan for viruses in DOS.

If you have any questions, go to the CSO or contact the consultants at consult@uic.edu.

• Windows NT 4.0 Workstation/Server/Terminal Server Edition with Service Pack 6a.
• Windows 2000 Professional/Server/Advanced Server.
• Windows XP Home/Professional/Tablet PC.
• Windows Server 2003 Web/ Standard/Enterprise/Datacenter.
• 64 MB RAM, 55 MB disk space
• (80 MB RAM, 70 MB disk space for the 64-bit client, plus Internet Explorer 5.5 with SP2 or higher)
• Root Certificate Update for Windows 98/98 SE/Me (Symantec explanation of the error message)

Older versions of SAV are not available on the Webstore. If you need a copy, send email to software@uic.edu.

Note: If you are installing SAV on Windows 98/98 SE/Me, you might get the error message: "You must have the Root Certificate Update installed. Please visit www.windowsupdate.com for more information." See Symantec Support for instructions on how to resolve this problem.

You can install SAV Corporate Edition 10.0 over:

• SAV Corporate Edition 8.0 or later
• Norton AntiVirus Corporate Edition 7.6 or Later
• Symantec Client Security, all versions

So if you were using one of these antivirus software packages, you no longer have to uninstall your old antivirus software before you install your new one.

This installation is easy. Exit all running programs.

1. Double-click on the .exe file you downloaded. The install files will unzip automatically.
   
2. When everything is unzipped, the install program should start automatically.
   1. Click Next> on the splash screen.
   2. Read and accept the license agreement; then follow the instructions to install Symantec AntiVirus.
   3. Select Complete install.
3. Then click Install to begin the install. Wait a long while.
4. Click Finish when the installation finishes.
5. LiveUpdate will run. (See below.) Click Finish to end LiveUpdate.
6. Reboot your computer when/if you're asked to.

Exit all running programs.

1. Double-click on the .exe file you downloaded. The install files will unzip automatically.
   
2. When everything is unzipped, the install program should start automatically.
   1. Click Next> on the splash screen.
   2. Read and accept the license agreement; then follow the instructions to install Symantec AntiVirus.
   3. Select Client Install.
   4. Select Complete install.
   5. We run Unmanaged (unless it's for a machine at work and your department's REACH person tells you otherwise).
   6. Enable Auto-Protect and Run-LiveUpdate.
      
3. Click Install to begin the installation. Wait a long while.
4. Click Finish when the installation finishes.
5. LiveUpdate will run. (See below.) Click Finish to end LiveUpdate.
6. Reboot your computer when/if you're asked to.

1. While you are connected to the Internet, open Symantec AntiVirus. Start -> Programs -> Symantec Client Security -> Symantec AntiVirus Client or double-click on the gold shield icon in your Windows tray in the bottom right of your monitor screen.
   
   
2. Click Symantec AntiVirus in the left pane, then click the LiveUpdate button in the bottom right of the right pane.
   
   
3. LiveUpdate will open. Remember that you must be connected to the Internet to run LiveUpdate. Notice that LiveUpdate can update the LiveUpdate and antivirus program as well as the virus definitions.
   
   
4. Click Next > to start the Update. The available updates will be listed and the progress of the download will be shown.
   
   
5. When the downloads are finished, the installed NAV components are listed. Click Finish to end LiveUpdate .
   
   
6. After you click Finish to end LiveUpdate, the Virus Protection Files will actually be installed; a dialog box will open showing the progress of the process.
   

Configurations:

Regardless of which type of installation you choose, it appears that SAV ends up with its default configuration, which should be entirely acceptable. I'm not 100% sure about this; you should probably check your configuration out. Which you should do anyway.

1. Click on Configuration in the left pane in SAV,
2. Then click on the type of scan you want to check below it.
3. Click the Advanced button for the details of the configuration; the Action button for the actions.

The default configuration is:

• All types of scans are turned on; these are: File System Auto-Protect, Internet Email, Lotus Notes Auto-protect, Microsoft Exchange Auto-Protect
• All scans scan all files.
• Auto-Protect: Configure -> File System Auto-Protect -> Advanced
  • Starts at system start
  • Runs on files when they are opened or modified
  • Turns itself back on after 30 minutes when you turn it off (say to install something)
  • Backs up files before attempting repair
  • Enables Threat Tracer
  • Turns on Heuristics -- searching for viruses and worms by their generic characteristics
  • Reminds you if you turn off your computer with a floppy in your floppy drive (Configure -> Auto-Protect -> Advanced -> Floppies)
• Internet Email: Configure -> Internet E-mail Auto-Protect -> Advanced
  • Scans files inside compressed files
  • Uses Heuristics
  • Protects incoming and outgoing email, using POP3 or SMTP protocols. Turn it off if you use IMAP or SSL-protected POP or SMTP.
• Microsoft Exchange: Configure -> Microsoft Exchange Auto-Protect -> Advanced
  • Scans files inside compressed files
• And turns on Tamper Protection, which protects SAV and LiveUpdate from being tampered with by unauthorized sources. (Viruses have been known to break the antivirus program; that's a wise first step for them.)

Actions:

When SAV finds a virus, worm, or expanded security threat -- spyware, adware and the like -- it has two actions that it can take. The first action is intended to fix the problem. It employs the second action when the first action fails.

The default actions are the same for each type of threat for each type of scan, but you can change the actions by scan or by file if you wish:

Configure -> Whichever scan you're interested in Auto-Protect -> Action

• Worms, Viruses, and Macro Viruses:
  • First: Clean
  • Second: Quarantine
• Expanded Security Threat - adware, dialers, hack tools, joke programs, remote access, spyware, trackware, others
  • First: Quarantine and clear any changes to the registry
  • Second: Leave alone but Log

SAV's File System Auto-Protect inspects for expanded threats, for virus-like activity, and for known viruses and worms on a continuous basis as you read or write files. It will also remind you if you shutdown your computer with a diskette in your floppy drive. The file system Auto-Protect will be started automatically every time you start Windows; you can see its yellow shield icon in the system tray on the Windows task bar at the bottom of your screen.

You shouldn't depend entirely on the file system Auto-Protect, however. You should schedule regular scans of your entire hard drive.

And, of course, you should update your virus definitions on a regular bases by scheduling LiveUpdate to run daily. (Daily is my recommendation; weekly and by hand every time there is a new virus or worm is the minimum. Daily is easier.)

1. Open Symantec AntiVirus: Start -> Programs -> Symantec Client Security -> Symantec AntiVirus Client or double-click on the gold shield icon in your Windows tray in the bottom right of your monitor screen.
2. Click Scheduled Scans in the left pane of the window.
3. If you reboot daily, you might use a startup scan, but the scan can get in the way of your using your computer. So, click New Scheduled Scan.
4. Click the radio button beside Full Scan, and click Next >.
5. Type a name and description for the scan in the appropriate boxes, then click Next >.
6. Then click Options. In general, the default Options settings are just fine, but you might want to increase the scan's priority when your machine is idle -- That's under Throttling. (See figure 4.)
7. Click Save Settings to save the settings for all Full Scans.
8. Click OK, then Save.
   

SAV does not have to be running for a scheduled scan to run, but your computer does have to be on.

You should also schedule LiveUpdate to run on a regular basis. In the past, I recommended running LiveUpdate weekly. Now it makes more sense to run it every day. Symantec still only updates a little more than weekly, but you don't want to wait longer than you need to get the updated virus definitions when a new virus or worm comes out.

The default is to run LiveUpdate weekly, Friday evening at 8 PM.

Your computer must be on and connected to the Internet to run LiveUpdate.

1. In SAV, select File -> Schedule Updates..., and click Enable scheduled automatic updates. Then click the Schedule... button.
2. These days it's best to run LiveUpdate daily and be sure to pick a time when your computer will be on and connected to the Internet. (See figure 3.)
3. In the Virus Definition Update Schedule dialog, click Daily.
4. Select a time for the update to start from the dropdown list. Late afternoon or evening is better, if your computer is connected to the Internet then, because that's when the updates are released. Remember that your computer must be on and connected to the Internet to run LiveUpdate.
5. When you're finished, click OK, OK, and close SAV.
   

See If You Use Windows 95 or Windows 98 and FAT Disk Partitions. Make sure you write-protect the Emergency Rescue disks so you don't accidentally change them. Also, you will need to make new ones periodically so they'll have the newest virus definitions. Also, make sure you make new ones occasionally as the virus definitions change

Reboot your computer to get Auto-Protect to start up.

You can tell when Auto-Protect is running because you'll see the gold shield in the Windows tray. (Lower right corner of the Windows monitor screen.) When Auto-Protect is turned off, the gold shield with have a red circle with a crossed line over it.

Sometimes Auto-Protect will try to protect you from installing programs that you want to install. In this case, turn it off for a short period of time, while you install the program:

• Right-click on the gold shield icon, and un-check Enable Auto-Protect. To turn it back on, right-click it again and check Enable Auto-Protect to select it.
  
  
• Or in Symantec AntiVirus, in the left pane, click Configure, then Auto-Protect. In the right pane, uncheck Enable Auto-Protect. Recheck it to turn it back on.

Double-clicking on the gold shield is an alternate way to open SAV.

After you finish setting everything up, you should run your first manual scan.

Figure 4: Running a Manual Scan in Windows Open Symantec AntiVirus: Start -> Programs -> Symantec Client Security -> Symantec AntiVirus Client. Click Scan, then Quick Scan or Full Scan . Before you run the scan, click the Options button (lower right) to pick the scan options. The default settings will probably do, if you aren't going to be using the computer, you might want to increase the scan's priority when the computer is idle (Throttling). Click OK, then click Scan. A Quick Scan scans system memory and all the common virus and security risk locations on your computer. (Available on unmanaged clients only.) A Full Scan scans system memory, boot sector, and all attached drives, including network drives. Custom user-defined Scan is limited to the files and folders that you specify. You don't have to select the drives or files to search for Quick or Full Scans, though you can select files to skip. If you want to specify which files to scan, use User-defined Scan. This screen shot is a newer version of SAV, but it is very similar.

By default, SAV will try to clean up the virus from the infected file. If it's Auto-Protect or a manual scan that finds the file, it will offer the file to you if the first action fails.

It it's a scheduled scan and the first action fails, it will automatically execute the second action, which by default is put it into Quarantine, where you won't accidentally access the file.

You can change these default settings to (1) delete the infected file when it's found, or (2) leave it alone and just log that you've found the the virus, which is called "log only".

When the clean action fails :

1. Run LiveUpdate again: In SAV, File -> LiveUpdate, then follow the prompts. (If there is a new virus definition file, SAV might be able to clean up your file.)
   
   
2. If the file is in Quarantine, in the left pane, click View, then click Quarantine.
   If it's the result of Auto-Protect or a manual scan, the worms, viruses, and security threats will be listed in a Results window (see below).
   
   
   
3. Double-click on the name of the virus or right-click and select Properties to see what the virus is, where it is, what type it is, and the status of the first action (called Set on this window).
   
   
   
4. Right-click on the name of the file you want to clean, and select Clean from the right-click menu.
   
   
5. If SAV cleans your file, you're done. Well, you'll have to move the file back where it came from, and SAV won't remember where that is.
   
   
6. If not, then right-click again and select either Delete Permanently or Move To Quarantine. (You should be cautious about deleting files; move them to quarantine and see whether the next virus update can clean them.)

To delete a file in Quarantine, do the same as above, only click the delete icon, a red X.

There is lots more in the Symantec AntiVirus Corporate Edition Client Guide, and it's totally readable. It's in Chapter 4, beginning at page 75.

Use the SAV online help:

• On the Help menu, click Help Topics.
• On the right pane and in various dialog boxes, click the Help button for context sensitive help. (This is only available when there is something that you can do.)

For general information and documentation on NAV, visit the Symantec Security Response Page: http://www.symantec.com/avcenter/

To search for information about a specific virus: http://www.symantec.com/avcenter/vinfodb.html

And the SAV CE version 10 manuals, in PDF form. The comments on the usefulness of the documents are for people using the SAV Version 10 client as a stand-alone client, unmanaged, though the Client Guide is useful for everyone using SAV Version 10.

• This is the manual you want to use: Symantec AntiVirus Corporate Edition Client Guide (91 pages)
  I recommend that you print this, even though it is 91 pages, and regardless of how you use SAV. It is really helpful, it's easy to follow, and it tells you exactly what SAV does.
  
  
• Symantec AntiVirus Corporate Edition Installation Guide (178 pages)
  Pages 13 - 88 are useful for people who use SAV unmanaged. The rest has to do with installation of networked managed servers and clients.
  
  
• Getting Started with Symantec AntiVirus Corporate Edition (8 pages)
  Skip this one. I know this sounds like it would be really helpful, but it's not unless you are setting up a SAV Network Server or installing the SAV client to use with one.
  
  
• And the Symantec Symantec AntiVirus Product Manuals Page, which has PDF versions of all SAV and NAV versions for all platforms.

If you need additional help downloading or installing the antivirus software, please contact the Client Services Office.

-- Downloading the Disks for Version 7.61

This method only works on-campus and does not involve the Webstore.

1. Click on the link for each disk
2. Choose save this file to disk
3. Choose the directory to save it to (ex. a:\)
4. Repeat for each disk

*Remember to write-protect your disks!

-- Installing NAV CE Version 7.61

Before you begin to install NAV, you should exit all running programs. To minimize problems, uninstall all previously installed antivirus programs, including previous versions of NAV CE 7.x, before you install the NAV 7.61. Restart the machine after the installation.

1. Insert the disk labeled Disk 1 in the computer.
2. Click on Start -> Run, type: A: \Nav761flp.exe then click OK
3. Insert each additional disks as instructed.
4. Setup will run automatically after you load the last disk.

Note: NAV does not automatically scan your computer after you install it. Make sure you run LiveUpdate and manually start a full scan after restarting your computer. Also turn on Realtime File System Protection and schedule regular LiveUpdates and full scans.

-- Scanning for viruses with Version 7.61

Run a manual scan after you install SAV.

1. After you have restarted your computer you can start scanning your computer or disk.
2. Click on Start -> Programs -> Symantec Client Security -> Symantec AntiVirus Client
3. On the left hand side you will have a list of option where you can scan either your computer or a disk. Make your selection and click on Scan to start the scanning process.

-- Need Additional Help?

If you need additional help downloading or installing the antivirus software, please contact the Client Services Office.