Author: Uzi
Paz
E-Mail: for
e-mail contact: user is uzi4wg and domain is uzipaz.com
First version date:
5 October 2001
Recent version date: 8 February 2004
Legal Notice:
While as far as I know all the information here is exact and correct,
as
I'm giving this information as a free service, I'm taking no
responsibility.
Parent Page: Uzi
Paz home page on http://www.uzipaz.com
.
1. Introduction and Overview
F-Prot for DOS is an antivirus program free for home noncommercial use. I'm not affiliated with Frisk Software (the company that develops F-Prot). It is considered as a very good antivirus program and although it is called "F-Prot for DOS" it is totally up to date and can be used also in any home Windows operating system, (up to some non-common exception, see comment 1a), and identify and remove the most modern viruses and worms. It certainly is a program appropriate for modern computers.
However, from the point of user interface and features, F-Prot for DOS certainly looks like the old programs - no "on access" scanning (i.e. no option for running the antivirus in the background for providing active protection). Updates of the programs and of the virus data (if we ignore third party solutions), can only be done manually, by looking from time to time at the web or FTP site to see if there are newer versions of the virus information files, and if there are, downloading them and replacing the older files in the directory where you put the program with the newer ones. All those friendly features that you can find in other antivirus programs, cannot be found in F-Prot for DOS (Frisk Software offers also other versions of F-Prot, which are user friendly, and include all the advanced features that you can find in products by other companies, but those are not free).
We shall give here some information about how to install and handle it correctly, and how to make its use more user friendly. Some of the information below is very basic, but some is much less trivial. If you are not an experienced PC user, you might prefer to skip some parts in this document which offer some advanced features, but might be complicated to follow to a pedestrian. I have tested the instructions on my Win98, and I believe that it should work on other Windows operating systems as well. I would however, appreciate feedback about testing them on other versions of Windows, and of course since I offer this information as a free service, I take no responsibility.
Comments:
1a. If some of your hard
disks are formatted with NTFS filesystems, and you disabled short
filenames,
F-Prot for DOS will not be able to read many of the files there. This
is
not relevant in the case of Win95/98/ME, because those operating system
use FAT (FAT16 or FAT32) filesystem rather than NTFS. Also many (mainly
home) WinXP systems are built with only FAT filesystem. In the case of
those WinXP where the disks were formatted with NTFS or with Win2K
where
the standard filesystem is NTFS, you must enable support for short
filenames,
and even then, some of the files might not have a valid DOS filename,
and thus might not be accessible by F-Prot for DOS.
2. Manual Installation and Updating of F-Prot
F-Prot and its virus definition updates can be downloaded from many
mirror sites, and Frisk Software (the company that makes F-Prot)
recommends
using those mirror sites. Unfortunately, those mirror sites are too
often
not updated, and thus, I would still recommend to use either Frisk's
site
for updates, or F-Secure's site which maintains them independently.
The program can be found in a ZIP format in ftp://ftp.f-prot.com/pub/dos/
.
The name of the program's file is fp-***.zip where the asterisks come
for the version number of the program.
For example, at the moment of writing this document, the latest version
of F-Prot for DOS is 3.16a, and thus the name of the F-Prot file, is
fp-316a.zip
.
After downloading it, there are no specific installation programs.
The only thing one should do, is to open a new folder, which will be
dedicated
to the program, and to extract the content of the ZIP file into that
folder.
In this document, I shall assume that you opened the folder as
"C:\F-Prot"
but it is just to make the explanations here simpler. If you wish to
open
it instead in "C:\Program Files\F-Prot" that is OK, but you will have
to
adapt the instructions here accordingly.
After downloading the program's zip file, you should just extract its content to that folder, and you will then find in that folder, a file named f-prot.exe. This is the antivirus program. Just doubleclick on it to open the antivirus program, and you may then scan your computer, or any specific drive or folder of your wish. Please notice that although you may execute the program from Windows it is an MSDOS program, and thus once you open the program, navigation in its menus is done with the arrow keys, the "Enter" key, and the "Esc" key on your keyboard rather than with the mouse. I recommend you to navigate a bit through its menus and options, before using it. Also because it is basically a DOS program, when you prefer to search a specific path, you should use only the short filename of that file. This is not always pleasant, because it means that you sometimes have to look e.g. in the properties of folders or programs in order to see what are their short filenames (DOS filenames).
On the folder where you extracted the F-Prot program, you will also find a few text files, which will include many instructions regarding usage, updating it, mirrors, etc. You might be interested to read them as well.
You may, of course, wish to update the virus definition files to the
latest ones.
You may find them in ftp://ftp.f-prot.com/pub/. The files
are fp-def.zip and macrdef2.zip.
In the FTP folder, you can find their dates. So you may see if there
were updates since you last updated them. It is important to note that
the program's ZIP file itself is not updated when new definition files
are released, so when you get fp-***.zip, it will have the same virus
definition
files that were released when that version of the program was first
released.
The practical meaning is that even if you have just got the program,
you
should still get the virus definition files.
The virus definition locations at F-Secure are ftp://ftp.f-secure.com/f-prot/updates/f-prot/dos/macrdef2.zip
, and ftp://ftp.f-secure.com/f-prot/updates/f-prot/fp-def.zip
.
After downloading fp-def.zip and macrdef2.zip, you may extract their
content to the same folder where you put f-prot.
You will have to confirm the replacement of the older versions of the
definition files with the newer ones.
Those two zip files include three definition files: sign.def,
sign2.def,
and macro.def.
That is practically everything for basic usage of the program.
3. Adding Shortcuts
You may of course create shortcuts to your F-Prot program on your desktop, or in the Start menu/Programs list.
In order to create a shortcut in the desktop, rightclick on the program, and choose "copy". Then rightclick on an empty part of your desktop, and choose "Paste Shortcut".
In order to create a shortcut in the Start Menu/Programs list,
rightclick
the F-Prot program, and choose "copy", and then open the
"C:\WINDOWS\Start
Menu\Programs\" folder (for Windows98/ME), and rightclick your mouse on
an empty place in
that folder, choose "Paste Shortcut". Then you may rightclick on the
sohrtcut's icon and choose "rename" in order to rename it to, e.g.
"F-Prot". On Windows XP, the instructions are similar but the
location of the "programs" folder is on "C:\Documents and
Settings\[profile]\Programs" where your user name on the computer
should come instead of "[profile]"..
4. Uninstallation
Since the installation of the program is manual, uninstallation of
it
is done by just removing what you added.
i.e. removing the dedicated folder that you have opened for it, with
its contents and subfolders (if there are any), and removing all
shortcuts
that you put to it. Later on we will learn how to improve a few things
by adding some registry keys. If you do that, you will have to remove
those
registry keys that you added, when you decide to uninstall the program.
5. Simplifying the Updating of the Virus Definition Files (my script)
Visiting F-Prot's FTP site periodically to see if the fp-def.zip and macrdef2.zip files have a date newer than the one that were when you last updated them, is not a user friendly procedure. This fact may discourage people from keeping their virus definition files always updated. If you want your antivirus program to be effective, you should keep those files always updated. Updates are released every few days, and thus checking the FTP site often is recommended. You might wish to know if there is a way to simplify the updating of those files. For example, if you can produce a button that whenever you press it, it will check if there are updates to those files, and if one of them (or both) are newer than the ones on your PC, it will make an update automatically.
The script given in this section does it. There are other alternative third party freeware programs that do it. See comment 5a at the end of this section.
In order for this script to work, you first need to install a mirroring program. The one that I use and recommend is WGET which is a very simple and free command line program that can easily be installed (just put it in a dedicated folder). Once you installed it, you may set a small batch program that will simplify the updating of the virus definition files.
Here are the instructions:
1) Get WGET from: http://www.cmdtools.com/files/wget.zip . It is a freeware program.
2) Get PKZIP for DOS from ftp://ftp.pkware.com/PK250DOS.EXE . As far as I understand the license, it is free for private use at home. Put the file in a subfolder that you should open in the F-Prot folder. Call that folder "AVDISK" (without the quotes). It is not a must to use this name, but it will simplify things if you wish to use AVDisk program (which is explained latter).
3) Extract the content of wget.zip to a dedicated folder. In this document, I shall assume that the folder is "c:\wget", but it can be anything you wish, (I use c:\util\wget).
4) Go to the AVDISK subfolder, and execute the PK250DOS.EXE file. It will set the pkzip program and more importantly, the pkunzip program on that folder.
5) Open Notepad, (or any other text editor. Do not use a word processor. Instructions here are for Notepad). It will open a new file, and type the following three lines on that file:
c:\wget\wget -N
ftp://ftp.f-prot.com/pub/fp-def.zip
ftp://ftp.f-prot.com/pub/macrdef2.zip
c:\f-prot\avdisk\pkunzip -n c:\f-prot\fp-def.zip
c:\f-prot\avdisk\pkunzip -n c:\f-prot\macrdef2.zip
The "N" in "-N" must be a capital letter. It is assumed here that
wget.exe
program has been extracted to c:\wget\
and that the location you chose for F-Prot is "C:\F-Prot" but if
not,
then you should use the right locations of them. Please notice, that if
the path to the files/folders includes spaces, such as in "C:\Program
Files", you must enclose it with quotes.
Choose in Notepad "save as" and in the "save as type" prompt, choose
"all types". Then navigate to the folder of F-Prot and open a new
subfolder
there. Name it "scripts" (Notice that in Notepad's "save as" window,
there
is a button with an icon of a folder. Clicking it will open a new
folder,
which you can rename). After navigating to the "scripts" folder in the
"save as" window, choose as the name of the file "fp-update.bat".
This will produce a text file with a name fp-update and an extension
of a batch file, that will include the command to update the files.
After
doing this, close Notepad.
6) Go to the "scripts" subfolder, and rightclick on the
fp-update.bat
file. Then choose "Properties".
In the Properties window, go to the "Command" menu, and in the
"Working"
line, type "c:\f-prot" (without the quotes. If the folder dedicated to
F-Prot is different, then type its location instead). At the first line
in this menu (near the icon) change the text to "FP-Update". At the
bottom
of this menu, you can see a button to change the icon. I would
recommend
changing it to some more meaningful icon. A simple icon, will be the
satellite
dish, that exists in the pifmgr.dll file (you are likely to see this
icon
when pressing the "Icon" button, in the "Program" section or the
properties
of the shortcut.
After making those changes confirm the changes (by pressing "OK") and quit the "Properties.
7) You will now find on the "scripts" subdirectory, another file which has an arrow of a shortcut. If its name is not "FP-Update" then rename it to that name.
8) That is all. By doubleclicking the FP-Update file (the one with the arrow) you will initiate a program that checks F-Prot's FTP site, for updates and make them if necessary.
You may now copy the FP-Update shortcut to any place you want. For
example
you may wish to put it in the
Start Menu\Programs location.
You may perhaps prefer instead of having a reference to F-Prot program
there, to have a submenu that has two links, one for F-Prot program and
one to the FP-Update program.
You can do this by opening a folder with the name "F-Prot" in the
"C:\Windows\Start
Menu\Programs" (this is for Win98/ME. For Windows XP it should be
"C:\Documents and Settings\[profile]\Programs"). Then put the F-Prot
shortcut, and
the FP-Update shortcut on that directory.
It is important to copy the shortcut that you produced, and not to
build a new shortcut by referring the batch file.
Comments:
5a. There are a few other
third party applications for updating F-Prot. We shall discuss a few of
them, such as fp-check by Nikolaus Rameis, which we shall discuss in
section 10, FP-UP and Art's F-Prot Updater by Art Kopp, which we
shall discuss in section 11, or F-Prot Updater by Over Self Research,
which is discussed in section 12.
6. Being Notified When a New Version is Released
The script mentioned in the former section, can only update the virus definition files. These are the ones that are more frequently updated. But you will probably wish to at least be notified when a new version of F-Prot is released, so that you can update it manually.
Frisk Software offers you to add your e-mail address to a
notificaiton
list that will notify you whenever a new version of the program is
released, as well as options for other kinds of notifications. In order
to subscribe to this notification service, visit
http://alerts.f-prot.com/cgi-bin/mf?lang=en
.
Changing the ldetails of the subscription or signing off, should be done from the web page. Notice that the announcements of new versions are for all versions of F-Prot, not only the free F-Prot for DOS version.
Comments:
6a. Former versions of this
article mentioned a way to subscribe for notifications by e-mail. This
method is now obsolete.
7. Adding a Rightclick Option "Scan with F-Prot" to Drives, Folders, or Files - The elegant way
Many antivirus programs offer you the option to rightclick on a
file,
a drive or a folder, and choose "scan with Antivirus", which will
result
in scanning that specific folder, file, or drive.
Such a feature for F-Prot, would be even more useful because it saves
you from looking for the correct short filename for those
folders/files.
This feature can be set for F-Prot, but you will have to edit the
registry
files in order to do that.
We will use the regedit command for that (you should already have this
program as it comes with the basic installation of Windows).
If you don't have any experience with the regedit command, then please read Appendix A, before using it.
Making mistakes when changing the registry files may cause problems with your Windows. It is thus important to be very careful when editing the registry.
If you hesitate to follow the instructions in this section, or you do not understand them thoroughly, you may try an alternative method, which will provide you a less friendly and somewhat less flexible option, but its implementation is easier to follow. It will be described in the next section.
In the rest of this section I will assume that you are not new to registry tweaking with regedit.
I have prepared a file with the name addfprot_reg.txt which
simplifies
the adding of registry keys that will tell Windows to add the option
"Scan
with F-Prot" to the rightclick menus of files, folders, and drives.
As usual, I'm taking no responsibility here. But if you prefer to
change
those registry keys by doubleclicking a file rather than manually with
the use of regedit, then you can use the file that I prepared. The file
can be downloaded from http://www.uzipaz.com/eng/addfprot_reg.txt
. If the path of your F-Prot folder is not "C:\F-Prot" then you should
modify it to include the right path to the f-prot command, (notice that
backslashes in the path should be doubled), and perhaps different flags
(I explain this issue further in the rest of this section), and then
you
should rename the file to addfprot.reg and doubleclick it. This should
add the registry keys that will enable this option in the rightclick
menu.
If for any reason you wish at a later time to uninstall F-Prot, or
just
to remove those right-click options, and you used the above
addfprot_reg.txt
file, and didn't make any changes in it besides perhaps changing the
path
of the program, or changing the flags for it, then you may use another
file: http://www.uzipaz.com/eng/removefprot_reg.txt
for removing those rightclick options. Also for this file you should
first
change its extension to ".reg" before doubleclicking on it. Also here,
I take no responsibility.
If you made other changes or you manually edited the registry, then
the removal of the changes should also be manual.
The instructions how to manually add "Scan with F-Prot" to the
rightclick
menu of folders, is
the following:
* Go to
HKEY_CLASSES_ROOT\Directory\shell
and add a subkey to it. Name the subkey "F-Prot"
(without the quotes). Adding the subkey, is done by rightclicking on
that
key, and choosing "New" and then "Key".
* After making the new "F-Prot" subkey, mark it
with the mouse, and modify in the
right pane of regedit, the default's value data for that subkey to
"Scan
with F-Prot" (without the quotes). In order to modify the default's
value
data, you should mark the name "Default" in the right pane, and
rightclick
on it, and choose "Modify".
* Add a subkey to "F-Prot" (the same way you
added a subkey to "Directory"), and call it "command" (again, without
the
quotes).
* Mark this "command" key, and in the right pane,
modify the "Default" value data to:
C:\F-Prot\F-Prot.exe /ARCHIVE /PACKED "%1"
(The quotes around the "%1" are important).
This tells Windows to add an option to the rightclick menu of directories (i.e. folders), to call it "Scan with F-Prot" and if you choose it, it will initiate F-Prot from the command line with the /ARCHIVE and /PACKED flags. The /ARCHIVE flag tells F-Prot to scan also inside archives (e.g. inside ZIP files), and the /PACKED flag tells F-Prot to scan also the files inside packed executables. This is just an example. You may use other flags as you wish. For a list of the flags available for F-Prot and their meaning, see the command.txt file which sits in the F-Prot directory.
* The above instructions are how to add this
option
to the menu that you see when you rightclick on a folder. If you wish
to
add a similar option to the rightclick menu of Drives (which are
usually
at the "My Computer" folder), the instructions are the same, besides
the
fact that the relevant registry key here, is
HKEY_CLASSES_ROOT\Drive\shell
instead of
HKEY_CLASSES_ROOT\Directory\shell
(Of course you can set rightclick menus on both
keys).
* In order to set a similar rightclick menu
option
to whenever you rightclick on a file, the instructions are again
equivalent,
but as before, the right registry key for it is:
HKEY_CLASSES_ROOT\*\shell
(The asterisk is indeed a name of a subkey).
You may find that the "shell" subkey is
missing
in the
HKEY_CLASSES_ROOT\*
key. If the "shell" subkey is missing, you will
have to add this subkey.
* I strongly recommend you to look at the various flags in the command.txt file, as I explained above.
* Please notice that unless you use the /INTER flag, the "close
program
on exit" must be unchecked in order to prevent the window to
automatically
be closed immediately after F-Prot finished its scanning, without
giving
you the opportunity to see the results of the scan.
To do this you should rightclick on the F-Prot program, and then choose
"properties" and in the "program" tab you should uncheck the "close
on exit". This will leave the MSDOS window opened after F-Prot has
finished.
The only place in this window, that notifies you when the program is
finished
is the title bar.
8. Adding Rightclick Options to Folders and Files - The More Basic Alternmative
When rightclicking on a folder, or on a file, you may see a "Send
to"
option, and when choosing it, you will receive a list of programs.
Choosing
one of them, will cause Windows to send the file or the folder to that
program so that it can handle it. The idea is to just add F-Prot
program
to that list.
In order to add the F-Prot program to that list, you should simply
put a shortcut to the F-Prot program, in the SendTo folder (on Windows
98 it usually is C:\Windows\SendTo while
on Windows XP it usually is C:\Documents
and Settings\[profile]\SendTo
Where you should use your user's name instead of "[profile]"). The
instructions how to make this shortcut, are described in section
3.
After making this shortcut, please rightclick on that shortcut, choose "properties", and then on the "program" tab, verify that the "close on exit" option is not checked. I recommend you to rightclick on the icon of the shortcut, choose "Rename" and rename it to simply "F-Prot".
Once you did it, you will have an option to check a file or a folder
with F-Prot by rightclicking on it, choosing "Send to" and then
"F-Prot".
The main advantage of this method over the one which we described in
the former section, is that it is very easy to implement. It is also
very
easy to be removed, if you decide to remove F-Prot. Just delete the
shortcut.
No need to deal with the registry.
It has, however some drawbacks over the method described in the
former
section:
a) Scanning with F-Prot is not done directly from the rightclick menu,
but rather from a submenu of it.
b) This method will not add the option to logical drives.
c) In this method, the F-Prot program will run without switches. This
means that it will not scan files with non-executable extensions, will
not scan packed or archived files, etc.
You may still be able to turn some switches (flags) in the program
if
you wish, but this needs some extra work. This is done by first
deciding
which switches you wish to use with the F-Prot program, when using it
from
the "Send to" menu. You may consult the command.txt file which is in
the
F-Prot folder, for that.
Then enter Notepad.
Now, if you wish to add the options to scan the files, including
compressed
executables, and archives, then type in the new file (from Notepad) the
following line:
C:\F-Prot\F-Prot.exe /packed /archived %1
Of-course, you will have to use the correct path to the F-Prot
program.
You may also use switches different from the ones in this example.
The "%1" mark is important.
If the path to the F-Prot program, includes blank characters in it,
you should enclose it with quotes. For example, if the F-Prot program
is
in C:\Program Files, then you should type something like that:
"C:\Program Files\F-Prot\F-Prot.exe" /packed
/archived %1
If you use Windows XP, it is recommended to also add the following line as the bottom of the file:
pause
After typing this line (/these lines), choose "save as" and in the
"save as" menu,
choose "save as type" to "all types", and then browse to F-Prot
program,
and save it under the name: f-prot4sendto.bat .
Then instead of adding a shortcut to F-Prot program, to the "Send to"
folder, you should instead add a shortcut to this batch file. Also
here,
you should verify that the "close on exit" is not checked, and also
here,
you may rename the shortcut, as explained above. You will still not be
able to use some switches to folders, and others to files, but this
will
allow you to set non-default switches.
9. Preparing External Antivirus Diskettes
There are various reasons why someone would prefer to boot and run an antivirus program from an external diskette rather than from the hard-drive. You may wish to prepare such floppy disks when your computer is clean, and then, if you suspect that your computer or any other computer, is infected, you can boot from them and use them to check and clean the computer while knowing that no virus is active while the antivirus is acting. This prevents a situation when the fact that the virus is active makes it harder for the antivirus to clean it, or situations where an active virus prevents the antivirus from loading up, or situations, where a destructive virus causes harm while the computer is booted from the hard disk to use the antivirus from the hard disk.
Many modern antivirus programs offer an option to produce such an emergency disk. F-Prot for DOS does not.
Luckily, You can do it manually, or, even
better, you can use the AVDISK program for that. You can also use FP-UP
for that.
In subsections 9a and 9b we
shall discuss the manual preparation of such diskettes. Doing this with
AVDisk will be discussed in section 9c, and
FP-UP will be discussed in
section 11.
9a.
Manual preparation of the external F-Prot diskettes.
In order to prepare these diskettes, you need to have an access to a
clean computer with Internet connection. You
will also need three empty diskettes in a good condition. In our
instructions, at the end of the process the computer you will use will
be restored to the way it was before you started the process, so that
people should be relaxed that you are not changing things in their
computer, without restoring them back after the preparation of the
diskettes. Here are the instructions:
1. |
Take either 3 or 6 empty diskettes to a clean computer. In fact, you'll need only 3 diskettes, but you might prefer to make another set for backup. |
2. |
On that computer, open a new dedicated folder, and download the F-Prot program, and the updated sign.def, sign2.def and macro.def the way we discussed in section 2. |
3. |
Put the first diskette in the drive, and format it as a boot diskette. This can be done by opening "My Computer" and then rightclicking on the icon of the floppy drive. Then one should choose "Format" and in the new window, one should choose "Quick" or "Full" formatting, and check the "Copy system files" before starting the formatting. It is also recommended to check the "Display summary when finished" so that you can see if there are bad sectors on that diskette. |
4. |
Then copy the following files
from the F-Prot folder to that diskette: english.tx0, f-prot.exe,
macro.def . |
5. |
Open notepad, and type the
following line as the text of a file: f-prot /loaddef /hard /disinf /auto |
6. |
From the file menu, choose "Save as", and in the new window choose "Save as type" all, and then as the name of the file, choose "autoexec.bat". Choose to save the file in the first diskette. |
7. |
Take out the first floppy from the drive, and write on it: "boot + f-prot + macro.def". |
8. |
Put the Second floppy to the drive, and copy "Sign.def" from the F-Prot folder to it. |
9. |
Take out the second diskette, and write "sign.def" on it. |
10. |
Copy sign2.def to the third drive, and then write on the diskette "sign2.def". |
11. |
Write-protect the three
diskettes. At the top of each diskette, you may see two small
square windows, in which one of them is already opened. In order to
write-protect the diskette, you should open also the second window.
This way, it promisses that if by mistake the diskettes will later be
exposed to an active virus, it will not be able to infect them. |
You should take care to keep those diskettes away from strong magnetic fields. Mainly, not to keep them near a cellular phone.
Then, you just take the floppy diskettes to the infected computer,
verify that it is set to first try to boot from the floppy disks (this
is a BIOS configuration, and we shall not explain it here, but in many
cases it is already configured that way). You just put the first
diskette in the floppy drive and boot the computer. It will instruct
you to enter the other diskettes, and then will launch the F-Prot
antivirus and clean the computer.
9b.
Manual preparation of the external F-Prot diskettes - doing it with
only two diskettes
* |
On the first (boot) diskette, instead of copying macro.def, you should copy nomacro.def and scan2.def to the diskette. All the other files should be placed as in the former version. |
* |
You should then rename the file nomacro.def to macro.def (nomacro.def is the dummy macro definition file). |
* |
You should name the first diskette: "boot+scan.def+macro.def". |
* |
you should omit the preparation of the third diskette. |
AVDisk is a great freeware software for preparing boot diskettes for various antivirus programs (F-Prot for DOS is included). There is no need to use a specific version of Windows, but of course, the preparation of the diskettes, should be done in a clean computer (it might work also if you make it when on your infected computer, but it depends on the exact nature of the infection).
It is recommended that you prepare those
diskettes, and routinely update
them when you believe that your computer is clean, so that If your computer becomes infected (or you suspect
it), and you cannot run the antivirus program from the infected
computer,
or you cannot remove the virus by running it, you can boot your PC with
those diskettes that you have prepared when your computer was still
clean,
and execute your antivirus program from those diskettes.
You can get the program and learn more about
it, on its web site:
http://www.avdisk.org
. If you
automated the downloads of the virus data files, the way I explained in
section 5, then you have already installed it.
It is worthy to mention that AVDisk allows you
to produce such diskettes also for other antivirus programs, provided
that
you have them on your computer, and the way it does it, the diskettes
that
are produced by AVDisk are sometimes much more friendly than the
diskettes
that are produced directly as features offered by those programs.
Since the information on the AVDisk's site is very good, I will save myself from detailed instructions.
I still wish to comment that just as we
discussed in the folmer subsections, if you need to use
an external clean antivirus program, and you don't already have such
diskettes,
it might be a good idea to use a friend's computer which is clean and
uses Windows, and to produce an F-Prot folder in it,
and then produce AVDisk and make those diskettes, and use them on your
computer. Deleting everything on your friend's computer after that (if
your
friend wishes to restore its PC to the way it
was before you downloaded AVDisk and F-Prot) is very easy.
This may take the time but has a good chance
to solve your problem.
Also here, it is recommended to write-protect
the diskettes before using them on the infected computer. Even though
when booting from the diskettes there is no reason for these diskettes
to become infected, simply because there is no virus active, it might
still be a good idea to write-protect them, in case you forgot to
change the boot sequence, and the computer booted from the infected
hard disk while one of the floppies was inserted.
10. Updating the Program and the Virus Definition Files: FP-Check Program
FP-Check is a freeware program for updating
F-Prot. It can also be used for simplifying the first installation of
F-Prot as well. You can find it here: http://www.niksoft.at/fp-check/
.
Here is my review of version 8.5.12 as of February 1, 2004:
The program is freeware. It is formally defined as a beta version, but I found it to be stable and to work smoothly - at least on my own computer.
Features: The program offers you an easy way
to update F-Prot and its virus definition files, if F-Prot is not yet
installed, it will install it. A very easy way to install it.
There is an option to start the program whenever Windows starts. You
can use it also in a batch file or as a command line so that it makes
it
easier to use it with automation, such as with the use of the "Task
Scheduler". So that it will check periodically for updates. Please
notice that if you define it to check at times when your computer is
not connected to the Internet, it might result in no updates.
You may also configure it to update from a local archive. The features
of the programs seem to aim at being a more generic updater also for
other types of programs, but it is initially configured for F-Prot.
There is an option to start AVDISK after a successful update.
The installation of the program is simple, and the uninstallation is with the standard use of "Add/Remove programs". You may choose either English language or German. After the installation of the program, its configuration window is opened. The configuration deserves some attention. If you don't want the program to be opened automatically when Windows starts up, you should change the setting. It is enabled by default. You should define the location of the F-Prot program, and set the same location also for the definition files. If F-Prot is not yet there, it will download it at first use. It is recommended to look at the various options in this configuration.
You can start the updater from within the
configuration window, or directly from the Start/Programs menu, on your
computer. It doesn't add a shortcut to F-Prot.
Summary:
The program is very simple, friendly, and well written. I strongly
recommend it for the task of both first installation of F-Prot and for
the task of updating the program and the virus definition files.
11. Art Kopp's FP-UP Program
Art Kopp has been working on a (third party) freeware product called FP-UP, that should make F-Prot easier and more user friendly.
So here is my review of the product correct for December 28, 2003:
I used F-PUP.EXE taken from http://home.epix.net/~artnpeg/
.
Version: 1.7
Freeware
Features:
1. Simplifies the installation of the F-Prot program.
2. Simplifies the updating of the program and the virus definition
files.
3. Allows one to execute F-Prot from FP-UP with an interface which
allows the use of the mouse, and allows navigating through the folders
in order to check a specific folder.
4. Allows the creation of emergency boot disks which can be used to
boot a computer externally without running anything from the hard
drives,
and then check it with F-Prot either from F-Prot's interface or from
FP-UP's
Interface.
I have checked those abilities:
F-PUP.EXE asks you where to install itself, and then it
installs FP-UP on that folder. This will also be the place where it
will install F-Prot, so if you already have F-Prot installed, it is
recommended to set this same folder as the folder for FP-UP.
There is nothing in the installation besides extracting the FP-UP to
thar folder.
In order to use it, you just have to doubleclick FP-UP. It will then
lead you to a menu which resembles a menu of a DOS program, but will
function with the mouse keypresses. You may choose whether you wish to
update the program/definition files, or to build the boot
diskettes, or to scan your hard disks or specific folders with F-Prot.
If F-Prot is not yet installed, choosing "Update" will install it to
the same folder where FP-UP was installed.
The use of FP-UP for updating F-Prot is very simple, but while you
may configure FP-Check to automatically check and update files upon
opening the program, in FP-UP you need to first enter the menu and then
to choose the update. FP-UP also lacks the command line option which
FP-Check has and which allowed FP-Check to be used in an automation.
Hence even though FP-UP does it in a simple way, I still prefer
FP-Check (which was discussed in section 10) for that.
The execution of F-Prot from within FP-UP interface is not so user friendly: although you use your mouse for navigation in the menus, it is still a DOS program, and the pointer does not change when you move it over a "button". The folders view allows you to navigate to the folder you wish to check. This saves you from knowing their MSDOS names, but in many cases it is a rather tedious work, because all the folders and subfolders are always expanded, and this makes the navigation rather slow.
The creation of the emergency boot disks and their use works fine,
but
it lacks the ability that AVDisk has, to only update them.
All in all it works fine, but I still prefer to use AVDISK for that.
There is no uninstallation routine and no icons outside the
installation folder. You should add those shortcuts yourself (not a
hard
job), and when (and if) you wish to uninstall it, simply remove it's
files from F-Prot's folder.
Personally, even though it is good to know about FP-UP and I'd
certainly keep my eyes on it, I still prefer to use FP-Check for the
updating and first installation, AVDisk for the boot disk creation, and
the original F-Prot 's interface for the program.
###(to be updater)####
The F-Prot Updater by Overself Research is an updater mainly
meant for periodic updates. ####
Appendix A. Registry Editing with Regedit
In Windows operating systems, there are usually two files which are called "registry files". These files hold all the settings and definitions regarding the hardware of your computer, the settings of the operating systems and of many programs, and user preferences. Most of the changes that you make to the way Windows works or appears, are kept in those registry files. The registry files can be edited directly by using a registry editing program. The one which comes with Windows is called "regedit" (in win2000 it is called "regedt32", in XP there is regedt32, but its functionality is the same as "regedit").
I shall not explain here the use of regedit. Instead I refer you to
http://www.winguides.com/registry/article.php?id=1&page=3
for that.
Yet, it is important for me to make a few comments:
The main risk with regedit, is when you are not sure of what you are
doing. Anything you change with the use of regedit, is changed
immediately
and without further warnings. This causes regedit to be unforgiveful to
mistakes. besides that, it is a rather safe program. merely opening it
and taking a look at the different keys and values cannot harm your
computer.
You should double check before modifying or deleting a key or a value.
It is important for you to know how to back-up a specific branch of
keys
(to export it from the "Regisry" menu. How to back up the whole
registry,
and how to recover your system by restoring it from backups. All these
things are explained in the reference mentioned above.