{ "disks": { "1": { "dirs": [ { "path": "/", "files": [ { "name": "SCAN", "dir": true, "date": "1992-05-17", "time": "17:39" }, { "name": "KILL", "dir": true, "date": "1992-05-17", "time": "17:39" } ] }, { "path": "/SCAN", "files": [ { "name": "VALIDATE COM", "size": 12197, "date": "1992-03-24", "time": "14:20" }, { "name": "AUTOEXEC COR", "size": 151, "date": "1994-02-17", "time": "16:06" }, { "name": "CLEAN114 DOC", "size": 21171, "date": "1994-04-08", "time": "20:55" }, { "name": "LANGUAGE DOC", "size": 462, "date": "1994-04-08", "time": "18:31" }, { "name": "LICENSE DOC", "size": 23033, "date": "1993-07-30", "time": "15:36" }, { "name": "REGISTER DOC", "size": 10171, "date": "1993-07-22", "time": "9:03" }, { "name": "SCAN114 DOC", "size": 55894, "date": "1994-04-08", "time": "21:33" }, { "name": "VALIDATE DOC", "size": 2415, "date": "1992-11-15", "time": "14:58" }, { "name": "CLEAN EXE", "size": 197457, "date": "1994-04-08", "time": "18:28" }, { "name": "SCAN EXE", "size": 164331, "date": "1994-04-08", "time": "18:28" }, { "name": "FRENCH MSG", "size": 16090, "date": "1993-11-29", "time": "7:39" }, { "name": "SPANISH MSG", "size": 17045, "date": "1993-11-29", "time": "7:39" }, { "name": "COMPUSER NOT", "size": 6338, "date": "1992-10-16", "time": "9:14" }, { "name": "AGENTS TXT", "size": 27369, "date": "1994-04-06", "time": "10:46" }, { "name": "VIRLIST TXT", "size": 122168, "date": "1994-04-08", "time": "20:42" }, { "name": "README 1ST", "size": 5011, "date": "1994-02-15", "time": "17:38" } ] }, { "path": "/KILL", "files": [ { "name": "KILL94A EXE", "size": 17050, "date": "1994-01-20", "time": "19:02" }, { "name": "KILL94B EXE", "size": 27040, "date": "1994-01-22", "time": "21:53" }, { "name": "KILL CPP", "size": 2911, "date": "1994-01-11", "time": "12:01" }, { "name": "KILL70 EXE", "size": 38174, "date": "1993-06-30", "time": "11:33" }, { "name": "KILL77 EXE", "size": 21824, "date": "1994-01-08", "time": "18:57" } ] } ], "volume": "SCAN" } }, "desc_file": "README.1ST", "desc_text": "\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n QUICK START INSTRUCTIONS FOR McAFEE ASSOCIATES PROGRAMS\r\n Last revised February 15, 1994.\r\n Copyright 1990-1992 by McAfee Associates.\r\n All rights reserved.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMcAfee Associates (408) 988-3832 Telephone\r\n2710 Walsh Avenue, Suite 200 (408) 970-9727 FAX\r\nSanta Clara, CA 95051-0963 (408) 988-4004 BBS\r\nUSA CompuServe GO MCAFEE\r\n Internet support@mcafee.com\r\n\r\n\fQUICK START Page 1\r\n\r\n\r\n These instructions explain how to identify a virus with the\r\nVIRUSCAN program and remove the virus with the CLEAN-UP program.\r\nThey are intended to provide an emergency means to identify and\r\nremove an infection. They are not meant to replace the program\r\ndocumentation. Please read through the documentation for\r\ndetailed instructions.\r\n\r\n Files ending in a .DOC extension have been formatted for\r\nprinting on a printer with a minimum of 55 lines per page.\r\nFiles ending in a .TXT extension have not been formatted.\r\n\r\n\r\nVIRUSCAN (SCAN)\r\n\r\n1. Copy all the VIRUSCAN files to a floppy disk in drive A:.\r\n\r\n2. WRITE PROTECT THE DISK!!!\r\n\r\n3. Turn computer off to remove the virus from memory, insert a\r\n clean (virus-free) DOS system boot disk into the A: drive,\r\n and turn the power back on.\r\n\r\n4. Insert the VIRUSCAN disk into the infected PC and type:\r\n\r\n SCAN C: D: E:\r\n\r\n This will allow VIRUSCAN to scan the C:, D:, and E: drives.\r\n If you do not have D: and E: drives, leave them out.\r\n\r\n NOTE: If infected files are found, they may be ERASED by\r\n running SCAN with the /D (overwrite and delete)\r\n option:\r\n\r\n SCAN C: D: E: /D\r\n\r\n Running SCAN with the /D option will delete files so they\r\n can not be recovered. Use this option only if you do NOT\r\n want to recover any infected files. Otherwise use CLEAN-UP,\r\n the universal virus disinfection program.\r\n\r\n4. Copy SCAN.EXE to the hard disk and run it from there against\r\n any floppies you suspect have the virus on them.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\fQUICK START Page 2\r\n\r\n\r\nCLEAN-UP (CLEAN)\r\n\r\n1. Copy all the CLEAN-UP files to a floppy disk in drive A:.\r\n\r\n2. WRITE PROTECT THE DISK!!!\r\n\r\n3. Power down the infected system and then boot from a clean,\r\n write protected system master diskette. This must be done\r\n to remove any viruses from memory that may interfere with the\r\n virus removal process.\r\n\r\n NOTE: If you are unable to access the hard disk after booting\r\n from a floppy, check to make sure that any special\r\n device drivers needed to use the hard disk are on the\r\n floppy and loaded from the CONFIG.SYS or AUTOEXEC.BAT\r\n file. Check to make sure the version of DOS is the\r\n same version as on the hard disk (or a later version).\r\n\r\n4. AT THIS POINT IF YOU HAVE NOT DONE A BACKUP OF ANY CRITICAL\r\n FILES ON YOUR SYSTEM, THEN DO SO IMMEDIATELY.\r\n\r\n5. Insert the CLEAN-UP disk into the floppy drive of the\r\n infected PC and type:\r\n\r\n CLEAN C: D: E: [virus I.D. code]\r\n\r\n This will allow CLEAN-UP to disinfect viruses on the C:, D:,\r\n and E: drives. If you do not have D: and E: drives, leave them\r\n out.\r\n\r\n For the Jerusalem virus, the ID code is [JERU]. For the\r\n Stoned virus, the ID code is [STONED]. For other viruses,\r\n use the ID code reported by SCAN, or refer to the\r\n VIRLIST.TXT file. Be sure to include the square brackets,\r\n \"[\" and \"].\"\r\n\r\n If you are disinfecting a file-infecting virus, such as the\r\n Jerusalem, it is recommended that you add the /A switch to the\r\n command line to check all files. This will ensure that the virus\r\n is removed from any overlay files that may not use the default\r\n overlay extensions recognized by CLEAN-UP.\r\n\r\n If more than one virus type was detected, then CLEAN-UP will\r\n have to be run for each type of virus.\r\n\r\n5. Turn the computer off and then re-boot from the hard disk,\r\n run SCAN to confirm that the virus has been removed, copy\r\n CLEAN.EXE to the hard disk, and check any floppies that may\r\n have been infected by the virus.\r\n\r\n\r\n\r\n\fQUICK START Page 3\r\n\r\n\r\nAN IMPORTANT NOTE\r\n\r\nYou have now completed a virus disinfection of your computer\r\nsystem, however, you may have other computers and floppy disks\r\nthat are infected. You now have a clean PC from which to\r\nscan and clean them. Please now take the time to read through\r\nthe VIRUSCAN and CLEAN-UP documentation to show you the fastest\r\nand safest way of completely removing your computer virus infection." }