Sophos Anti-Virus OS/2 single user installation...

Installation guideOS/2 single userDocument date: February 2007

Sophos Anti-Virus installation guide

2

Contents

About this guide 3

1 Installing Sophos Anti-Virus 4

2 Using Sophos Anti-Virus via the GUI 8

3 Using Sophos Anti-Virus via the CLI 15

4 Updating Sophos Anti-Virus 18

5 Removing Sophos Anti-Virus 21

Technical support 22

OS/2 single user

3

About this guide

This guide tells you how to

install Sophos Anti-Virus on a single OS/2 computer

scan the computer for viruses

eliminate viruses

update Sophos Anti-Virus

remove Sophos Anti-Virus.

You can find details of all other configuration options in the SophosAnti-Virus OS/2 user manual.

To install Sophos Anti-Virus on an OS/2 network refer to the SophosAnti-Virus OS/2 computers on a network installation guide.

Sophos documentation is published on the Sophos Anti-VirusSupplementary CD each month and at www.sophos.com/support/docs/

http://www.sophos.com/support/docs/


4

1 Installing Sophos Anti-Virus

To run Sophos Anti-Virus, your computer must

be running OS/2 Warp 3 or later

have at least 11 MB of hard disk space if all options are active. Thisrequirement can increase considerably if Sophos Anti-Virus is scanningcomplex archive files.

To run InterCheck on-access scanning, your computer must be running OS/2Warp 4 or later (uniprocessor). InterCheck also works with eComStation(uniprocessor) from Serenity Sytems International.

You must uninstall any other anti-virus software before installing SophosAnti-Virus.

The installation process includes the following steps:

Install Sophos Anti-Virus (section 1.1).

Add the latest virus identity files (IDEs) (section 1.2).

1.1 Install Sophos Anti-Virus

1. Insert the Sophos Anti-Virus Supplementary CD in the CD drive.

2. At a command prompt, enter

F:\OS_2\INSTALL

where F: is the CD drive.

3. In the Install dialog box, click OK.

OS/2 single user

5

4. The Install – directories dialog box enables you to choose whichcomponents of Sophos Anti-Virus to install.

Sophos Anti-Virus for OS/2 GUI

Select this component if you would like to use and configure SophosAnti-Virus via its graphical user interface. You will also be able to useSophos Anti-Virus via the command line.

Sophos Anti-Virus for OS/2 Command Line

Select this component if you wish to use and configure Sophos Anti-Virusvia the command line only.

InterCheck On-Access Scanner for OS/2

You must select this if you want Sophos Anti-Virus to check files for virusesas they are accessed by the computer.

Disk space

Click this button to check how much space is available on local drives.

Sophos Anti-Virus directory

Enter the directory where Sophos Anti-Virus will be installed, e.g. C:\SAV.

5. Click Install.


6

6. When installation has finished, in the Installation and Maintenance dialog,click OK. Reboot the computer to start InterCheck.

Now add the latest IDEs to the computer (section 1.2).

1.2 Add the latest virus identity files (IDEs)

This section describes how to download IDEs from the Sophos website.

A virus identity file (IDE) enables Sophos Anti-Virus to detect a specificvirus. You need IDEs to protect your computer against viruses discoveredsince your version of Sophos Anti-Virus was compiled.

Download IDEs as follows:

1. Go to the IDE download page of the Sophos website (www.sophos.com/downloads/ide).

2. Download the compressed IDEs file for your version of Sophos Anti-Virus.

3. Extract the IDEs to

C:\SAV\OS2SWEEP\ENG

If you prefer, scroll down the IDE download page and download the IDEsone by one, to the location above.

4. If you installed InterCheck, restart it by running the following command.

C:CD \SAV\OS2SWEEP\ENGRESTART

This ensures that InterCheck uses the new IDEs.

Help with downloading IDEs is available in the Sophos supportknowledgebase (www.sophos.com/support/knowledgebase).

http://www.sophos.com/downloads/ide

http://www.sophos.com/downloads/ide

http://www.sophos.com/support/knowledgebase

OS/2 single user

7

If you need further help with downloading IDEs, please contact Sophostechnical support.

You have finished adding the latest IDEs. Installation of Sophos Anti-Virus iscomplete.

Now go to section 2 to find out how to use Sophos Anti-Virus via the GUI, orsection 3 to find out how to use Sophos Anti-Virus via the CLI.


8

2 Using Sophos Anti-Virus via the GUI

The sections that follow assume you installed Sophos Anti-Virus with theGUI. If you chose to install only the command-line version of SophosAnti-Virus, go straight to section 3.

This section explains how to

open the Sophos Anti-Virus GUI (section 2.1)

scan your computer for viruses now (section 2.2)

schedule virus scanning (section 2.3)

set up automatic virus disinfection (section 2.4).

For more detailed information about using Sophos Anti-Virus via the GUI,refer to the Sophos Anti-Virus OS/2 user manual.

2.1 To open the Sophos Anti-Virus GUI

1. On the desktop, double-click the Sophos Anti-Virus for OS/2 icon.

2. In the Sophos Anti-Virus for OS/2 folder, double-click the Show SophosAnti-Virus window icon.

The Sophos Anti-Virus window is opened, displaying the Immediate tabbedpage.

OS/2 single user

9

2.2 To scan your computer for viruses now

This is also known as an ‘on-demand’ virus scan, or ‘on-demand scanning’.

1. In the Sophos Anti-Virus window, by default the Path list contains one item:Local Hard Drives. This includes all hard drives and CD drives on yourcomputer.

2. Click GO.

When the scan is complete, the results are displayed in the on-screen log atthe bottom of the window.


10

2.2.1 What happens if Sophos Anti-Virus finds a virus?

If Sophos Anti-Virus finds a virus, it displays a message box like this:

You also see details in the on-screen log at the bottom of the SophosAnti-Virus window. Double-click the name of the virus to view its analysison the Sophos website.

To find out how to set up Sophos Anti-Virus to disinfect files automatically,go to section 2.4.

You have now completed an on-demand virus scan. To find out how toschedule a virus scan, go to section 2.3.

OS/2 single user

11

2.3 To schedule a virus scan

1. In the Sophos Anti-Virus window, click the Scheduled tab.

By default, there is a job named Default, which scans all local hard drives.

2. To add a new scheduled job, click Add.

3. In the Enter new job name dialog box, add a name and click OK.


12

4. In the Job Configuration dialog box, click Add or Remove to select the filesand drives you wish to scan.

5. Click the Time tab. Enter the time and the days of the week when the scanshould occur, and click OK.

You can use the other tabs to customise the scheduled scan. Refer to theSophos Anti-Virus OS/2 user manual for more information. Go to section2.4 to find out how to configure Sophos Anti-Virus to attempt to disinfectfiles.

OS/2 single user

13

2.4 To set up disinfection

This section describes how to configure Sophos Anti-Virus to disinfect bootsectors, documents and programs automatically, and to delete or shred filesthat cannot be disinfected.

1. In the Sophos Anti-Virus window, click Configuration.

2. In the Job configuration - Immediate dialog box, click the Action tab.

3. To set up automatic disinfection of boot sectors and/or documents andprograms, select Disinfect boot sectors and/or Disinfect documents andprograms. To set up deletion or shredding of files, select Infected files, thenclick either the Delete or the Shred option. Sophos recommends that youselect Request confirmation.

If you choose to delete or shred files, Sophos Anti-Virus does not attemptto disinfect them first, even if you select disinfection as well. However,Sophos Anti-Virus does not delete or shred infected mailboxes.


14

4. Click OK.

When you scan your computer for viruses, Sophos Anti-Virus will try toperform the action you have specified on any files it finds to be infected witha virus.

If you selected Request confirmation in step 3, a dialog box is displayed.Click Yes to confirm Sophos Anti-Virus should carry out the requestedactions on finding a virus.

After the scan, the results are displayed in the on-screen log.

Check the contents of any disinfected documents carefully, as the virusmay have corrupted them.

Delete any disinfected programs and replace them from backups, as thevirus may have corrupted them.

If you need further help, contact Sophos technical support.

OS/2 single user

15

3 Using Sophos Anti-Virus via the CLI

This section explains how to

scan your computer for viruses now (section 3.1)

disinfect documents, boot sectors and programs (section 3.2)

from the command line.

For more detailed information about using Sophos Anti-Virus via the CLI,refer to the Sophos Anti-Virus OS/2 user manual.

3.1 To scan your computer for viruses now

To scan the computer for viruses, enter

OSWEEP

This scans all local hard drives.

To scan particular hard drives, use their letters. For example

OSWEEP D: E:

3.1.1 What happens if Sophos Anti-Virus finds a virus?

If command-line Sophos Anti-Virus finds a virus, it displays a message likethis:

Sophos Anti-VirusVersion 3.68, April 2003Includes detection for 80962 viruses, trojans and wormsCopyright (c) 1989,2003 Sophos Plc, www.sophos.com

System time 11:34:41, System date 02 May 2003

Quick SweepingPress Esc to quit

>>> Virus 'EICAR-AV-Test' found in file F:\EICAR.COM

39 files swept in 0 minutes and 2 seconds.

For information on disinfection, see section 3.2.


16

3.2 To disinfect from the command line

3.2.1 To disinfect a document

1. Close down the application in which the document was created, and enter

OSWEEP [FILE.DOC] -DI

where [FILE.DOC] is the file name.

2. Check the document carefully after disinfection. The virus may havecorrupted the contents.

3.2.2 To disinfect a boot sector on your hard disk

This procedure assumes that A: is the floppy disk and E: is the CD.

1. If OS/2 is already running, shut it down.

2. Boot OS/2 from the OS/2 Utility disk set. The disks should include a CDdriver and the following files: NLS.DLL, QUECALLS.DLL, andVIOCALLS.DLL. Follow the on-screen instructions. When booting is finished,the A: prompt appears.

3. Insert the Sophos Anti-Virus Supplementary CD.


SET BEGINLIBPATH=A:\;E:\OS_2

This tells OS/2 where to find the files mentioned in step 2.

5. Enter

E:\OS_2\OSWEEP -DI

The computer is scanned for boot sector and file viruses. Sophos Anti-Virusdisinfects infected boot sectors and some programs (see section 3.2.4). Ifthis procedure fails to disinfect a virus on your computer, contact Sophostechnical support.

3.2.3 To disinfect a boot sector on a floppy disk

This procedure assumes that A: is the floppy disk and E: is the CD.

1. If OS/2 is already running, shut it down.

2. Boot OS/2 from the OS/2 Utility disk set. The disks should include a CDdriver and the following files: NLS.DLL, QUECALLS.DLL, andVIOCALLS.DLL. Follow the on-screen instructions. When booting is finished,the A: prompt appears.

OS/2 single user

17

3. Insert the Sophos Anti-Virus Supplementary CD.


SET BEGINLIBPATH=A:\;E:\OS_2

This tells OS/2 where to find the files mentioned in step 2.

5. Enter

E:\OS_2\OSWEEP A: -DI -MU

6. When the computer prompts you, insert the floppy disks to be disinfected.Infected boot sectors and programs are disinfected.

7. When disinfection is complete, scan the whole computer for remaininginfections.

If this procedure fails to disinfect a virus on your floppy disk, contact Sophostechnical support.

3.2.4 To disinfect a program

1. To disinfect an infected program, enter

OSWEEP [PROG.EXE] -DI

where [PROG.EXE] is the program name.

2. Scan the whole computer for remaining infections.

3. If the program cannot be disinfected, delete the program using

OSWEEP [PROG.EXE] -REMOVEF

4. Even if you have not deleted the program, replace it from original installationdisks, a clean computer, or sound backups. The virus may have corrupted it.


18

4 Updating Sophos Anti-Virus

This section explains how to update Sophos Anti-Virus both when a newvirus is discovered, and when you receive the monthly update CD.

4.1 To update Sophos Anti-Virus between monthly updates

When a new virus is discovered, Sophos creates a virus identity file (IDE)that enables Sophos Anti-Virus to detect the new virus should it infect yourcomputer. To keep your copy of Sophos Anti-Virus up to date, download newIDEs from the Sophos website as soon as they become available.

Register at www.sophos.com/security/notifications to receive an emailnotification whenever a new IDE is made available.

Go to section 1.2 for instructions on how to download IDEs.

4.2 To update Sophos Anti-Virus from the monthly update CD

To update Sophos Anti-Virus, carry out the following steps:

Update the Sophos Anti-Virus files (section 4.2.1).

Download the latest compressed IDEs file (or individual IDEs if youprefer) from the Sophos website (section 1.2).

4.2.1 Update the Sophos Anti-Virus files



F:\OS_2\UPDATE


http://www.sophos.com/security/notifications

OS/2 single user

19

3. In the Update dialog box, ensure Update CONFIG.SYS is selected. SelectingSave a backup of the installed product saves the version of SophosAnti-Virus currently installed. A backup lets you restore the existing version ifyou stop the update or the update goes wrong. Click Update.

4. When the update is complete, in the Installation and Maintenance dialogbox, click OK.

Occasionally, UPDATE informs you that the computer must be rebooted toactivate new features of InterCheck. You must reboot the computer as soonas convenient after it has updated. However, InterCheck still detects newviruses on the computer without rebooting.

You have updated the Sophos Anti-Virus files. Now download the latestcompressed IDEs file (or individual IDEs if you prefer) from the Sophoswebsite (section 1.2). When you have done this, the monthly update ofSophos Anti-Virus is complete.

4.3 To restore a previous version of Sophos Anti-Virus

To restore a previous version, update the installation from the Sophos Anti-Virus Supplementary CD for the version you require. All the files needed arecopied from the source, regardless of their date and time.


20

When you restore a previous version, the setup program deletes any IDEsalready on the computer.

Deleted IDEs cannot be restored.

OS/2 single user

21

5 Removing Sophos Anti-Virus

You can remove Sophos Anti-Virus completely or only specific components.In each case, removing Sophos Anti-Virus involves running the setupprogram from the Sophos Anti-Virus Supplementary CD.



F:\OS_2\SETUP -REMOVE


3. In the Delete dialog box, select the components you want to remove. ClickDelete.

4. When removal is complete, in the Installation and Maintenance dialog box,click OK.

5. If you want to remove Sophos Anti-Virus completely, delete any directories orfiles that remain on the computer. If you made a default installation, deletethe C:\SAV directory and any subdirectories and files.

Components of Sophos Anti-Virus have been removed from the computer.


22

Technical support

For technical support, visit www.sophos.com/support.

If you contact technical support, provide as much information as possible,including the following:

Sophos software version number(s)

operating system(s) and patch level(s)

the exact text of any error messages.

Copyright © 2003–2005, 2007 Sophos Group. All rights reserved. No part of thispublication may be reproduced, stored in a retrieval system, or transmitted, in anyform or by any means, electronic, mechanical, photocopying, recording or otherwiseunless you are either a valid licensee where the documentation can be reproduced inaccordance with the licence terms or you otherwise have the prior permission inwriting of the copyright owner.

Sophos and Sophos Anti-Virus are registered trademarks of Sophos Plc and SophosGroup. All other product and company names mentioned are trademarks or registeredtrademarks of their respective owners.

http://www.sophos.com/support

Sophos Anti-Virus OS/2 single user installation...

Documents

Transcript of Sophos Anti-Virus OS/2 single user installation...