
                           THE VIRUS TERMINUS - v5.6BN
                         Copyright 1990-1994  S.T.CALISE
                              All Rights Reserved!!

                              STC BBS: 908-206-1386

                               TABLE OF CONTENTS                   page

          Brief Program Overview        ...........................  3
          Hardware/Software Required    ...........................  3
          General Guidelines            ...........................  3
          Installation - General        ...........................  4
          Installation Procedure for
          Systems Already Infected      ...........................  5
          Typical Disinfection Sequence ...........................  7
          360Kb Disk Install/Swapping   ...........................  8
          Make EMERGENCY WORK DISK      ...........................  9
   (n)    Terminus Start-Up Options     ........................... 10
   (n)    Self-Test Virus Check         ........................... 10
   (n)    Start-Up Virus Check          ........................... 10
          Program Setup/Configuration   ........................... 11
          Default Parameters/Options    ........................... 11
          Add Additional SCAN Opts.     ........................... 12
          Add Additional CLEAN Opts.    ........................... 12
          DOS Session                   ........................... 12
          Mouse Operation               ........................... 12
          SCAN/CLEAN Version Notes      ........................... 12
          SCAN/CLEAN Logical Drive Menu ........................... 13
          SCAN/CLEAN DIRS/FILES Menu    ........................... 13
          IMMUNIZE/DETECT/RECOVER       ........................... 15
          REPORT FUNCTIONS Menu         ........................... 16
   (n)    Activity Summary LOG          ........................... 16
          Individual Reports            ........................... 16
          VIRUS Info Sheets             ........................... 16
          SCAN/CLEAN Option Switches    ........................... 17
          SAVING Options                ........................... 18
   (n)    SETUP - OPTIONS Lock          ........................... 18
   (n)    OPTIONS Lock Password         ........................... 18
          Limit Operation To Floppies   ........................... 19
          SCREEN SAVER                  ........................... 19
          Experimental Virus Data       ........................... 20
          WRITE PROTECTED Floppy Notes  ........................... 20
          Memory Requirements Etc.      ........................... 20
   (n)    NETWORK GROUP SERVICE         ........................... 21
   (n)    NETWORK Installation          ........................... 21
   (n)    DOS Environment Var. STCVTEC  ........................... 24
   (n)    DOS ERRORLEVEL on Exit        ........................... 24
          Operation From WINDOWS        ........................... 24
          Program ERROR Messages        ........................... 25
          Upgrades                      ........................... 27
          Registration Information      ........................... 27
          Acknowledgements              ........................... 28
          CRC VALIDATION Values 5.6BN   ........................... 28
          Additions/Changes VTEC56BN    ........................... 29


                                   - PAGE 2 -

         *****

         Programs included in THE VIRUS TERMINUS(c) Package: VT56B.EXE ;
         VTCF2B.EXE ; VTCF56.EXE ; VTCF5B.EXE ; PRINTDOC.BAT ; VT56BDOC.TXT;
         STC.ICO ;  README56.TXT   (8 files ONLY!)

         *****

    You have a contiguous fifteen(15) day period to evaluate THE VIRUS
    TERMINUS. Payment of a registration/license fee is required for any
    use beyond this period.

         S.T.Calise hereby disclaims all warranties relating to this
    software, whether express or implied, including and without limitation
    to any implied warranties of merchantability or fitness for a particular
    purpose.  The USER of this software shall bear all risk as to the quality
    and performance of the software. In no event shall S.T.Calise be liable
    to you for any consequential, special, incidental or indirect damages of
    any kind arising out of the performance or use of the software, even if
    S.T.Calise has been advised of the possibility of such damages.
                 THE VIRUS TERMINUS(c) IS DISTRIBUTED 'AS IS' .
                           ALL RIGHTS ARE RESERVED!

       NO PART OF THIS MANUAL AND/OR ACCOMPANYING DOCUMENTATION MAY BE
      REPRINTED, REPRODUCED OR OTHERWISE COPIED WITHOUT ADVANCED WRITTEN
                         PERMISSION FROM S.T.CALISE

                             ********************
  PAID Registration gives license and right to use The Virus Terminus on a
  single machine for personal home use only. Payment of a 2 year negotiated
  license fee is required for educational, business, corporation, government
  and/or agency environment use. Registration and/or License requirements are
  subject to change without notice.
                             ********************

  **** REFER TO PAGE #25 FOR REGISTRATION FORM - PERSONAL HOME USE ONLY! ****

   The Virus Terminus is not available for export to the following countries:
                North Korea, Vietnam, Cuba, Iran, Iraq, Libya.

                   ******************************************
                   Trademarks of other companies mentioned in
                   this program,help file and/or accompanying
                   documentation    appear    strictly    for
                   identification purposes  only and are  the
                   property of their respective companies.

              Refer to pages 26,27 for trademark acknowledgements.

      ***  It is strongly suggested that you seek experienced help in  ***
           dealing with computer virus infection if you are unfamiliar
           with anti-virus software and methods.


                                   - PAGE 3 -

         THE VIRUS TERMINUS(c) is a SHELL Menu utility program for the
    McAfee Associates Anti-Virus programs VIRUSCAN, CLEAN, and VALIDATE.
    VIRUS TERMINUS is menu driven and may be used with a mouse or keyboard.
    The SCAN/CLEAN option switches are heads-up, visible and may be toggled
    through an easy to use interface. Reports are available in two different
    formats: individual or activity summary log. Virus Info Sheets allow the
    user to obtain information on virus infectors such as the known
    characteristics, areas of damage, the McAfee Associates disinfection
    program needed, etc. A quick program test is available and there are a
    variety of options including screen saver, options lock with password, etc.
         Virus Terminus v5.5 supports SCAN/CLEAN's advanced IMMUNIZATION and
    RECOVERY functions. These functions help to provide protection with
    recovery after detection from new or unknown virus infectors.

                     ******  HARDWARE RECOMMENDATIONS  ******
     RAM MEMORY: 640Kb CONVENTIONAL MEMORY  (450 Kb free at startup required)
     DISK DRIVE: HARD DRIVE, FLOPPY SHOULD BE 720K, 1.44M, or 1.2M
          VIDEO: (True MDA),(CGA C80) TEXT MODE/EMULATION REQ.
                 or SVGA/VGA/EGA Downward Compatible to CGA C80
     OPERATION : KEYBOARD or MS COMPATIBLE MOUSE OPTIONAL

                     *****  SOFTWARE REQUIREMENTS: *****
                              MS-DOS V3.1 - 6.2
          Version 9.21v111 - SCAN, CLEAN; VALIDATE.COM; VIRLIST.TXT
           from  McAfee Associates (See Version notes & guidelines)
               The Virus Terminus is a DOS REAL MODE application.
      Read page #21 for Local Area Network installation & requirement notes.

        ***** SOME GENERAL OPERATION GUIDELINES:

       DO NOT run The Virus Terminus from the hard disk if your system
         is already infected. Read Page #4 for disinfection sequence.

    AVOID the use of The Virus Terminus v5.6BN in any environment or on a
    machine where another anti-virus product is currently installed and
    running and which does not encrypt, cipher or otherwise hide its' own
    virus search strings  This includes but is not limited to TSR virus
    utilities. Use The Virus Terminus only in concert with McAfee Associates
    anti-viral products for best results. No claim is made herein or
    otherwise as to compatibility with other author/program virus disinfector
    & detector utilities.

   *   Although the Virus Terminus v5.6BN is generally LAN compatibile, no   *
   *  specific claim is made as to compatibility with any network system.    *
   * Use of The Virus Terminus on local or networked drives should be subject*
   * to System Administrator/Supervisor installation, testing and approval.  *

     Users should make every effort to use only the most recent versions of
     SCAN, CLEAN and the Virus Terminus. Version 5.6BN of The Virus Terminus
     was updated/tested for CLEAN/SCAN 9.21v111

     Files contained in archive envelopes should be extracted using an
     appropriate archive extraction utility before processing.


                                   - PAGE 4 -

         ***** INSTALL THE VIRUS TERMINUS(c): (STAND-ALONE Operation)
              ( NON-Infected System Only! Stand Alone Operation )
       ( Read Page #21 for Local Area Network Installation requirements)

              THE VIRUS TERMINUS(c) operates most efficiently when
         used in conjunction with a hard drive. You may also run
         this program from a floppy drive when your hard drive is
         infected.(720K, 1.2MEG, 1.44MEG disk size) Please read
         page #8  for information on 360Kb installation SCAN/CLEAN disk
         swapping. Read page #21 for information on NETWORK Installation
         requirements.

      McAfee Associates files : SCAN.EXE; CLEAN.EXE; VALIDATE.COM; VIRLIST.TXT
      VIRUS TERMINUS files   : VT56B.EXE; VTCF2B.EXE; VTCF56.EXE; VTCF5B.EXE
              --------------------------------------------------------------
              HARD DRIVE:  1. Create separate subdirectories - one each for
                              SCAN,CLEAN, VALIDATE, VIRLIST.TXT, and THE
                              VIRUS TERMINUS files. Use of a single subdir.
                              for all files is possible (required for LAN
                              or floppy installation!)

                           2. Copy McAfee Associates FILES and VIRUS
                              TERMINUS files to their own subdirectories.

                         * 3. Change the current drive and subdirectory to the
                              location of The VIRUS TERMINUS and then run the
                              file VT56B.EXE. Press <ENTER> after typing each
                              of the following lines.

                                               C:
                                               cd\location
                                               vt56B.exe

                              C: may be D: or whatever drive you installed
                              The VIRUS TERMINUS program on. cd\location
                              may be cd\utility\viruscan or any subdirectory
                              where you placed the TERMINUS files.

                           4. Press F5 to configure when you reach the Main
                              Menu. Select #8. and run a program(s) self-test.

                           5. Press F5-PROGRAM SETUP at the main menu. Then
                              select F4-MAKE EMERGENCY WORK DISK
              ------------------------------------------------------------

              FLOPPY    :  1. Format blank disk.(720K, 1.2Meg, 1.44Meg)

                           2. Copy McAfee Associates and VIRUS TERMINUS
                              files to the disk.(root directory)

                              DO NOT copy the Virus Terminus files
                              to a subdirectory on your floppy
                              disk. Place ALL files in the ROOT directory.


                                   - PAGE 5 -


                           * 3. Place this disk in DRIVE #A or DRIVE #B

                                   A:                 B:
                                   cd\          or    cd\
                                   vt56B.exe          vt56B.exe

                              Press F5 to configure at the Main Menu.
                              Select #8. and run a program(s) self-test.

              The first time you run VT56B.EXE make sure you go no further
         than the MAIN MENU before you press F5 and make the needed additions
         or corrections to the DEFAULT TABLE.


         NOTE: Make sure the version of DOS on your floppy matches the
               installed version on the hard drive. If you boot from the
               work floppy you may need to have other files/programs run
               from an autoexec.bat file besides the Virus Terminus. Some
               systems may require unique partitioning software, drive
               compression files like dblspace.bin, etc.

       *********************************************************************

      ** INSTALLATION FOR SYSTEMS ALREADY INFECTED (STAND-ALONE OPERATION) **

                          !! POWER DOWN your system first !!

                   !! DO NOT -USE CTRL-ALT-DEL KEY RESET SEQUENCE !!
                         !! DO NOT -PRESS THE RESET BUTTON !!

             1. Turn your system on and BOOT from a KNOWN NON-INFECTED DOS
                disk.(Place the DOS system disk in drive #A - WRITE PROTECT)
                DO NOT MAKE THE MISTAKE OF LEAVING AN INFECTED FLOPPY IN
                THE BOOT DRIVE.(READ ABOVE!)

             2. Format a blank disk using the DOS format command. Use the
                FORMAT.COM file found on your non-infected DOS disk. Avoid
                accessing or using any files and utilities found on your
                hard disk. Format the highest capacity floppy your system
                drives will allow. Current program version sizes allow
                720K, 1.2MEG, 1.44MEG disk sizes.

             3. Follow these guidelines for the drive specification that
                you are using:

                         A. Copy SCAN.EXE, CLEAN.EXE, VALIDATE.COM,
                            VIRLIST.TXT to the newly formatted disk.

                         B. Copy VT56B.EXE, VTCF2B.EXE, and VTCF56.EXE
                            to the newly formatted disk. DO NOT put these
                            files in a subdirectory on your disk. Put ALL
                            files in the ROOT.


                                   - PAGE 6 -


                         C. Place this disk in DRIVE #A or #B and type
                            each of the following lines pressing <ENTER>
                            after each:

                                             A:
                                             cd\
                                             VT56B.EXE
                                          or
                                             B:
                                             cd\
                                             VT56B.EXE

                          D. Press F5 as soon as you are in the main menu
                             and configure VIRUS TERMINUS.

                          E. NOW write protect the disk!

                          F. Select #8 at the MAIN menu to run a Self-Test
                             to make sure the installation did not infect
                             your work disk AND/OR computer RAM memory.



      ***** NOTE: The Report and LOG options of SCAN and CLEAN may not
                  work since you will have write protected the disk. All
                  requests to SCAN/CLEAN single or job batch files
                  will be directed to the ENTIRE SUBDIRECTORY.Terminus
                  must make a temporary options file on your disk when
                  you are in the SCAN/CLEAN DIRS/FILES submenu. This will be
                  impossible if your floppy is write protected! Instead,
                  when your disk is write protected, Terminus sends
                  SCAN/CLEAN a set of command line options which include
                  the name of the of the subdirectory you select.
                  ( \*.* instead of individual file names.)

      ***** NOTE: Care should be taken to avoid the open/run access of
                  any files on the hard disk until after the entire
                  system has been checked and disinfected.

            You should not run any programs located on your hard drive
                 until you are sure ALL files and the entire system
                            have been disinfected!

         **********
         SUGGESTION: If your system is not infected it would be wise to make
         **********  up a disk like one of those previously described so that
                     if ever the need arises you will be prepared to meet any
                     virus infection threat without delay and inconvenience.

                     Further instructions on making an emergency work disk may
                     be found on page #9 of this document.


                                   - PAGE 7 -

        ***** TYPICAL DISINFECTION SEQUENCE:

     *     It is strongly suggested that you seek experienced help in     *
     *     dealing with computer virus infection if you are unfamiliar    *
     *               with anti-virus software and methods.                *
     *  The outlined procedure below is a suggested typical disinfection  *
     *    sequence. This procedure may vary depending on the extent and   *
     *       type of computer virus infection being dealt with. These     *
     *   instructions are not meant to replace those which are found in   *
     *                 the documentation for SCAN and CLEAN.              *

        DO NOT RUN THE VIRUS TERMINUS FROM A HARD DISK if your system is
        already infected. Use the following steps for best results:

        1. Power Down your system. DO NOT reset your computer by
           pressing CTRL-ALT-DEL or the hardware reset button!
        2. Boot from a KNOWN NON-INFECTED WRITE-PROTECTED DOS SYSTEM DISK.
        3. Use the floppy installation procedure for systems already
           infected as outlined on page #6 . WRITE PROTECT YOUR DISK.
           Do a PROGRAM(s) SELF-TEST.
        4. SCAN your hard disk to determine which and/or how many virus
           infections may be present. Make sure MEMORY SCAN is toggled ON.
        5. CLEAN - Disinfect your hard disk. Use the virus ID code previously
           reported by SCAN and make sure MEMORY SCAN is ON. Do a SELF-TEST.

           -->   If you are unable to access your hard disk after booting
                 from a floppy, check to make sure that any special device
                 drivers needed to use the hard disk are on the floppy and
                 loaded from the CONFIG.SYS or AUTOEXEC.BAT file. AT THIS
                 POINT IF YOU HAVE NOT DONE A BACKUP OF ANY CRITICAL FILES
                 ON YOUR SYSTEM, THEN DO SO IMMEDIATELY.
           -->   Check to make sure the version of DOS is the same or is
                 compatible with the one on the hard disk.
           -->   If more than one virus type was detected, then CLEAN-UP will
                 have to be run for each type of virus.
           -->   If you are disinfecting a file-infecting virus, such as the
                 Jerusalem, it is recommended that you set option switch #A
                 to ON (Expand SCAN/CLEAN file type search). This will help
                 to ensure that the virus is removed from any overlay files
                 that may not use the default overlay extensions recognized
                 by SCAN/CLEAN.

        6. Power down the system after CLEANing your hard disk.
        7. Check your hard disk once again with SCAN to make sure you
           were successful in disinfecting the system. If not, repeat
           steps #1, 2, 4, 5, 6 and 7 all over again.
        8. Now, check any floppies that may have been inserted into
           your drives to determine if they are infected. Clean as needed.
        9. SCAN your Hard Disk once again to make sure you have not
           reinfected your system. Make sure CHECK MEMORY is toggled ON.

         Failure to disinfect floppies previously used in an infected
         system may lead to virus re-infection.


                                   - PAGE 8 -


          REFORMATTING INFECTED FLOPPIES --> DOS v5.x or v6.x

               Use the /U (unconditional) switch when reformatting infected
          floppy disks under DOS 5.x or 6.x  DOS will then not preserve the
          original infected boot sector of the disk which may cause virus
          reinfection.



         ***** 360Kb Installation, DISK SWAPPING, ALTERNATE SOLUTIONS:

              Disk swapping is forced on when the startup option /D
         is detected. This mechanism allows the creation and use of two or
         three installation disks with appropriate prompts issued to the
         user indicating which disk to put in the drive during runtime.

            DISK #1 - vt56B.exe, VTCF2B.exe, vtcf56.exe, validate.com and
                      virlist.txt

            DISK #2 - scan.exe and clean.exe


        The following program functions are disabled when disk swap is ON:

         1. SELF-TEST including startup SELF-TEST (/T)
         2. Startup LOCK (/L) which includes SELF-TEST before program entry.
            OPTIONS LOCK may also be activated while the program is running.
         3. SCAN/CLEAN report generation and activity log.

         Disk swapping may be activated by adding the /D options at startup
         time:
                         A> vt56B.exe D   <Press ENTER>

         It is possible in a two floppy system to use both drives when the
         main objective is to scan or disinfect the hard disk. One disk/drive
         would be utilized for The Virus Terminus programs plus virlist.txt &
         validate.com, and the other for SCAN and/or CLEAN. The default table
         should be modified to indicate which drive will contain SCAN & CLEAN.
         There are other alternatives such as eliminating virlist.txt and
         placing both SCAN.EXE and CLEAN.EXE  with the Virus Terminus files
         ALL on one 360Kb disk. The above installation tips are offered as
         suggestions ...  users may elect different configurations as needed.

         Disk swapping is offered as a solution to limited disk space
         on those systems which employ a single 360Kb floppy drive and hard
         disk where the intention is to SCAN and/or CLEAN the hard disk.
         Despite the tendency of computer manufacturers to now market systems
         with higher capacity floppy drives, such systems may still exist in
         the work place today.



                                   - PAGE 9 -

         ***** MAKE EMERGENCY WORK DISK: (Stand Alone Installation Only!)

         This operation creates an emergency disk which may be used in the
         event your system becomes infected with a computer virus. The Virus
         Terminus files plus SCAN, CLEAN, VALIDATE, VIRLIST.TXT, and copies
         of your AUTOEXEC.BAT & CONFIG.SYS files will be transferred over to
         the Emergency Work Disk. This operation requires a pre-formatted
         Floppy Disk of size 720Kb, 1.2Mb, 1.44Mb,etc.  Follow directions in
         your DOS manual for making a Floppy System Boot Disk if desired.

           -------------
    -->    1. Do a virus scan of your computer system + memory to make sure
              it is free of virus infection at this time.
    -->    2. Press F5-PROGRAM SETUP while in the main menu.
    -->    3. Make sure ALL configuration table entries are defined and that
              the locations of SCAN, CLEAN, VALIDATE, and VIRLIST are correct.
              Then press F4-MAKE EMERGENCY WORK DISK.
    -->    4. Insert the pre-formatted floppy disk into drive A: or B:
              Press <S> to start the operation. WRITE-PROTECT THIS DISK WHEN
              THE OPERATION IS COMPLETED.
    -->    5. SCAN THE WORK DISK TO MAKE SURE IT IS NOT INFECTED WITH A VIRUS!
              Test the operation of this disk by returning to the DOS prompt
              and then resetting your machine with the emergency disk inserted
              into the boot drive. DO THIS IF YOU USED A FLOPPY SYSTEM BOOT
              DISK to make your work disk. Otherwise, you will need to switch
              over to the boot drive manually and type vt56B.exe <ENTER>.

                   The following files will be either created or copied:
              A. autoexec.bat (a new version created for this operation)
              B. vt56B.exe, vtcf56.exe, vtcf2b.exe
              C. scan.exe, clean.exe, validate.com, virlist.txt
              D. recovlst.vt if it exists(see note below)
              E. c:\autoexec.bat and c:\config.sys (renamed on floppy)

           You may need to copy additional files if you are using certain
           unique disk partitioning software, hard disk compression, etc.
           The newly created autoexec.bat on the floppy should be modified
           to include instructions to load these programs, etc.

           NOTE: RECOVLST.VT is the file which contains the validation and
                 recovery information for your files etc. if you have
                 previously used the immunization routines found in main
                 menu selection #3. The Virus Terminus v5.6BN  supports
                 the external data file method of IMMUNIZE/RECOVERY. The
                 copy of RECOVLST.VT on the recovery disk is a "safe" copy
                 and should be updated to the recovery disk each time a
                 change or addition is made to the recovery information when
                 the user executes the ADD IMMUNIZATION or REMOVE IMMUNIZATION
                 menu selections.


                                   - PAGE 10 -

         ***** VIRUS TERMINUS START-UP OPTIONS:

               /M = Mono - Eliminates window background colors and makes
                    certain textcolor adjustments. Use with green/amber CGA,
                    gray VGA display, notebook models, etc. Mouse will work
                    if present. DO NOT use with true IBM MDA(Monochrome).

               /T = Start-up SELF-TEST - Checks Terminus file set, SCAN
                    COMMAND.COM, and RAM memory(critical viruses).

               /L = Limit Operation to SCAN FLoppies ONLY! - forces Terminus
                    to proceed directly to the SCAN/CLEAN LOGICAL DRIVE menu,
                    OPTIONS LOCK forced on, only floppy drives given as choice
                    for SCAN or CLEAN, password required to continue if virus
                    infection is found, password needed to exit the SCAN/CLEAN
                    LOGICAL DRIVE submenu. Also forces startup self-test. Read
                    Page #19 for more details.

               /D = Enable SCAN/CLEAN program disk swapping.
               /Q = Quiet mode - disable sound routines!
               /A = If LAN is present, forces activity log on.
               /O = If LAN is present, forces SETUP - OPTIONS LOCK to ON


                 Implement as follows: (or combinations thereof)

       C> vt56B.exe D   (press ENTER)  or   A> vt56B.exe M   (press ENTER)

       D> vt56B.exe T   (press ENTER)   or  C> vt56B.exe L (press ENTER)

                       B> vt56B.exe MTLQ  (press ENTER)

     *  Read page #23 for information on DOS Environment Variable STCVTEC  *
     *  to set startup options and Local Area Network installation tips.   *

         ***** RUN-TIME and START-UP PROGRAMS(s) SELF-TEST:

               The Virus Terminus provides a quick and easy way to SELF-TEST
         for possible known virus infectors. The Main menu selection #8 and
         F7-SELF-TEST found in each submenu will scan memory and the Virus
         Terminus dir. and command.com(utilized for DOS session stand alone)

              Start-up Self-Test for known virus infections may be initiated
         as outlined in the START-UP OPTIONS section above. The self-test will
         be performed before program operation reaches the Main Menu. An
         orderly program HALT is available if a virus infection is found.

         NOTE: SCAN and CLEAN also perform their own self-test each time
               they are run.


                                   - PAGE 11 -

         ***** CONFIGURE THE VIRUS TERMINUS: (PROGRAM SETUP)
    (Read page #21 for information on Local Area Network operation and tips)

              THE VIRUS TERMINUS(c) may be configured from the main
         program menu or any sub-menu while the program is running. It
         is highly recommended that you configure your paths and
         parameters when running the program for the first time. DON'T
         RUN THE VIRUS TERMINUS FROM YOUR HARD DRIVE IF THE SYSTEM IS
         INFECTED. Use the floppy installation and disinfect your drive
         first - then install and run from your hard drive. Above all,
         FOLLOW THE DIRECTIONS THAT CAME WITH SCAN or CLEAN.
       -------------------------------------------------------------------
       VIRUS TERMINUS PRGM DIR: drive/directory of VIRUS TERMINUS files

       SCAN.EXE   PROGRAM  DIR: drive/directory location of SCAN.EXE

       CLEAN.EXE  PROGRAM  DIR: drive/directory location of CLEAN.EXE

       VALIDATE.COM PRGM   DIR: drive/directory location of VALIDATE.COM

       VIRLIST.TXT   FILE  DIR: drive/directory location of VIRLIST.TXT
       -------------------------------------------------------------------
       SCAN/CLEAN REPORT  TYPE: Select NONE, INDIVIDUAL, or SUMMARY LOG

       INDIVIDUAL REPORTS  DIR: Directory where indv. reports are stored.

       ACTIVITY LOG  DIRECTORY: volume\directory where RPT_VT.TXT lives.
       -------------------------------------------------------------------
       EXP.VIRUS DAT.FILESPEC : Path and filename for the experimental data
                                to be used with SCAN. Please read the DOCS
                                that came with SCAN. ADVANCED USER FUNCTION!

       EXP. VIRUS DATA ON/OFF : Set this switch to 'ON' and the experimental
                                virus data file will be used by SCAN. (/EXT)
                                Read further for more info. on Exp. Data
       -------------------------------------------------------------------
       DISABLE CTRL-BRK ON/OFF: Disable CTRL-BRK key combo during SCAN &
                                CLEAN operations. (/NOBREAK)

       DISABLE   MORE?  ON/OFF: Disable SCAN/CLEAN MORE? prompt when screen
                                is full. (/NOPAUSE)

       SCREEN   SAVER   ON/OFF: Enables screen saver. User given choice of
                                1 to 60 minute delay before Saver activates

       SETUP - OPTIONS   LOCK : Set this parameter to ON if you wish to lock
                                options including access to the default table
                                each time the program is run. Read page #18
                                for a list of options which are locked for
                                each menu.


                                   - PAGE 12 -

       ALL MENUS-LOCAL+NETWORK: ON  --> Allow selection of LOCAL + NETWORK
                                OFF --> Allow selection of LOCAL DRIVES ONLY
                                   (switch is ignored if no locals exist)

       ADD SCAN PRGM OPTIONS  : Enter options not available with The Virus
                                Terminus program. Clear by entering <SPACE>

       ADD CLEAN PRGM OPTIONS : Enter options not available with The Virus
                                Terminus program. Clear by entering <SPACE>
       -------------------------------------------------------------------


         * NOTE: The state of each switch may be changed after THE VIRUS
                 TERMINUS is up and running.


         ***** ADDING NEW or EXTRA OPTION PARAMETERS:

         Modify the default table entries designated as ADD SCAN PRGM OPTIONS
         and ADD CLEAN PRGM OPTIONS. Refer to your SCAN.EXE and CLEAN.EXE
         documentation for a list of valid parameter options.

         ***** DOS SESSION:(HARD DISK INSTALLATION ONLY!)

         Pressing F3-DOS SESSION while in certain submenus will cause THE
         VIRUS TERMINUS to suspend operation and drop you off at the DOS
         command prompt. You may return back to THE VIRUS TERMINUS by using
         the DOS EXIT function. Type 'EXIT' at the DOS command prompt. DO
         NOT attempt to return to THE VIRUS TERMINUS by re-launching
         VT56B.EXE. This will create a second copy of The Virus Terminus in
         computer memory. DOS SESSION is disabled when running from a floppy
         or if the SETUP OPTIONS LOCK is in the ON position.

         ***** MOUSE OPERATION:

              The two button Microsoft Mouse hardware specifications
         are supported by this program when used in conjunction with a
         color display/card that supports the CGA C80 standard.
         The program's video mode auto-detect logic disables mouse
         operation if a Monochrome Display Adapter is detected. Only
         keyboard entry is functional in MONOCHROME video mode(MDA
         standard).  Most other Microsoft Mouse compatible  mice should
         function properly.  The program logic checks for  a 'connected'
         mouse.  You should not experience any trouble if your mouse is
         truly MS compatible, connected to the serial port or buss card,
         and the mouse driver software was installed prior to running this
         program.


         ***** SCAN/CLEAN Version Notes:

     The VIRUS TERMINUS(c) V5.6B was updated/tested for SCAN/CLEAN 9.21v111


                                   - PAGE 13 -



         *****************************************************************

         NOTE: Use main menu selections #1 and #2 when directing SCAN/CLEAN
               to process using the signatures and characteristics of KNOWN
               VIRUS INFECTORS. Use main menu selection #3 to gain the
               additional advantage of protection and detection against
               NEW and/or UNKNOWN virus infectors.

         *****************************************************************



    ***** SCAN/CLEAN LOGICAL DRIVE: (Main Menu #1) --> KNOWN VIRUS INFECTORS

             Use this main menu selection when you wish to scan ENTIRE
        floppy disks or a hard drive. Turn the /MANY switch on if you
        want to SCAN/CLEAN more than one floppy disk.


     *  Archive files, those with the file extensions like ZIP, PAK,      *
     *  ARJ, ARC etc. should have the files within extracted using an     *
     *  appropriate extraction utility before processing.                 *
     *                                                                    *



      ***** SCAN/CLEAN DIRS/FILES: (Main Menu #2) --> KNOWN VIRUS INFECTORS

              Use this main menu selection when all you need to do is
         scan or clean an individual or batch of files. The /A ALL
         switch is forced on. You may choose file(s) from a paged directory
         display if your disk is not write protected. Each time you SCAN or
         CLEAN files you are given a choice of what subdirectory to pick
         files from.


        Archive files, those with the file extensions like ZIP, PAK,
        ARJ, ARC etc. should have the files within extracted using an
        appropriate extraction utility before processing.


             You must specify a VIRUS CLEAN CODE before you can 'CLEAN' a
        file or batch of files. An attempt to auto-detect the code will be
        made if you use SCAN first and provided the Virus ID is still present
        on the current screen page when SCAN has finished running. Only the
        first ID (looking down from the top of the screen) will be reported
        in the case of multiple infections. A manual entry mechanism is also
        available for entry of ID codes. Press #2. ENTER VIRUS CODE. The
        Virus ID is the character string specified between the [   ]
        brackets which SCAN outputs to the screen.


                                   - PAGE 14 -

         ***** IMMUNIZE/DETECT/RECOVER SUBMENU:  (Main Menu #3)
                           (* Advanced User Level! *)

         This program feature helps you protect your files/system against
         NEW or UNKNOWN VIRUS INFECTORS. SCAN/CLEAN operation offers two
         methods of accomplishing this. Virus Terminus v5.6 directly supports
         only the method which adds validation data directly to an external
         data file. A password is required to ADD/REMOVE IMMUNIZATION or
         ATTEMPT RECOVERY if a LAN is detected. Note that this is an advanced
         user function. Use it wisely!

         This submenu has four VIRUS TERMINUS option switches.

         A. SELECT INDIVIDUAL FILES     : Allows processing individual files
                                          in a user selected directory.

         B. SELECT ENTIRE LOGICAL DRIVE : Directs all SCAN/CLEAN processing
                                          to an ENTIRE LOGICAL DRIVE.

         C. SCAN/CLEAN REPORT FUNCTIONS : Disable or select report style.

         D. VIRUS DETECTION ALARM SOUND : Enable/Disable Virus Terminus
                                          virus detection alarm sound. Does
                                          not affect SCAN/CLEAN operation.


         #1. ADD IMMUNIZATION ( /AF ) : This function will add validation
             and recovery information for each file processed to RECOVLST.VT
             The added data facilitates detection and recovery from unknown
             or new virus infectors. NOTE: self-modifying files like
             MS-DOS SETVER.EXE should not be included in this process. Use
             menu selection #3 REMOVE IMMUNIZATION to delete the file data
             and validation information from RECOVLST.VT  Read the VIRUSCAN
             documentation for more examples of files which should not be
             submitted to this process.

             User should set Terminus option switch #B SELECT ENTIRE LOGICAL
             DRIVE to the ON position when immunizing for the first time.
             Select each logical drive available in your system one at a time
             and perform the immunization process. Make sure you include the
             boot drive( usually C:) so that the boot record, partition table
             information etc. is saved to RECOVLST.VT

             IMPORTANT: Please refer to the VIRUSCAN(tm) documentation
                        concerning some older Hewlett Packard and Zenith PC's
                        that modify the boot sector each time the system is
                        booted.


                                   - PAGE 15 -

             Once an entire logical drive has been immunized, use menu
             selection #2. SCAN FOR INFECTION to check whether a virus
             infection or file modification has occurred. NOTE: Not all
             files reported as modified may have virus infection.

             *** ADDING NEW PROGRAMS/FILES TO A DRIVE ALREADY IMMUNIZED ***

             NOTE: Use the following procedure after you have added new
                   program files to a drive which has been previously
                   immunized.

                   1. Set Terminus option switch #B SELECT ENTIRE LOGICAL
                      DRIVE to ON.

                   2. Select #3. REMOVE IMMUNIZATION. Then select the
                      drive where you have added the new files to. SCAN
                      will remove recovery data for files on that drive
                      from the RECOVLST.VT data file.

                   3. Select #1. ADD IMMUNIZATION. Make sure Terminus
                      option switch #B is still ON. Then select the
                      drive where you placed the new files and SCAN
                      will re-immunize all the files once again.

                      An alternate solution might be to set Terminus
                      option switch #A to ON, manually select the
                      drive/directory(s), and then the individual files
                      which need to be immunized.

         #2. SCAN FOR INFECTION ( /CF ) : Performs a SCAN of each file etc.
             selected and uses the recovery data stored in the file
             RECOVLST.VT to determine if selected files, partition table,
             etc. have been tampered with. Selecting this function also
             allows the optional use of the /CERTIFY option so that any files
             without validation information will be reported.

         #3. REMOVE IMMUNIZATION ( /RF ) : Removes the recovery data for
             selected files from the RECOVLST.VT data file. Set Terminus
             option switch #A to ON for processing individual or groups of
             files.

         #4. ATTEMPT RECOVERY ( CLEAN /GRF ): CLEAN will attempt to
             disinfect known/unknown virus infections using the recovery
             information found in the data file RECOVLST.VT. Recovery of the
             original file and/or area will be attempted.

         #5. The CRC CHECKSUM menu selection #5 will perform a two method
             check on the file of your choice which will provide a comparison
             for future checks. The file display for this selection IS NOT
             filtered since you may perform a CRC checksum on ANY FILE.
             This program function is also available at the main menu.


                                   - PAGE 16 -

        ***** REPORT FUNCTIONS: (Main Menu #4)


        REPORT STYLES:   The Virus Terminus supports INDIVIDUAL consecutively
                         numbered reports and ACTIVITY SUMMARY LOG styles.
                         The activity summary log is an accumulative text file
                         which is updated each time SCAN or CLEAN is run with
                         the /HISTORY option. Press F5-PROGRAM SETUP to enable
                         report functions, select which style of report will
                         be used, and the location where reports/log will be
                         stored. Use "ACTIVITY LOG" for LAN installation.


                       *** SCAN/CLEAN INDIVIDUAL REPORTS ***
                           (Stand-Alone PC Installation)
              A report counter is initialized when THE VIRUS TERMINUS is
         first run. Each report generated is given a different name by
         using the report counter value as part of the name(rpt_1.txt,
         rpt_2.txt, etc,)  You may generate 255 (maximum 40 on a floppy)
         different reports before the counter recycles back to #1. It is
         important to note that the reports will always start with rpt_1.txt
         each time the program is run. Therefore, if you wish to save a
         report, copy it to another disk or directory so that the original
         report is not overwritten the next time that you run THE VIRUS
         TERMINUS.

              An alternate solution to copying the individual report files
         to another disk/directory is to select submenu option #2 MERGE
         INDV.REPORTS .  A separate file named RPT_VT.TXT will be created.
         This file will contain all the individual reports. Also, the
         original individual reports will be deleted.


                          *** ACTIVITY SUMMARY LOG ***
                 (Stand-Alone OR Local Area Network Installation)

              This report style is an accumulative text file which is
         updated each time SCAN/CLEAN receive the /HISTORY option.
         The location and name of the activity log file may be set by
         pressing F5-PROGRAM SETUP. Report merge or deletion is not
         required when using this option. NAME= RPT_VT.TXT

         ***** VIRUS FACT SHEETS: (Main Menu #5)

             Information on individual virus known characteristics, areas of
         damage, which McAfee Associates disinfector utility to use, etc.
         is available. VIRLIST.TXT should be located on a LOCAL drive.

     *     It is strongly suggested that you seek experienced help in     *
     *     dealing with computer virus infection if you are unfamiliar    *
     *               with anti-virus software and methods.


                                   - PAGE 17 -

         ***** SCAN/CLEAN OPTION SWITCHES

        Point the mouse cursor  over the word  ON! or OFF to change, add or
        remove options. Press a letter key (A through I)

                 A. SCAN/CLEAN -EXPAND FILE TYPE SEARCH- :
                           SCAN/CLEAN OPTION = /A
                    SCAN and CLEAN will expand the file search
                    instead of just checking EXE, COM, SYS, etc.
                    Use this option if a file infecting virus
                    has been detected.
                       ( Read SCAN/CLEAN documentation )

                 NOTE:  Archive  files  with ZIP, ARC, LZH,
                    or other  extensions should first have the
                    files within extracted with an appropriate
                    extraction utility before processing.

                 B. SCAN & OVERWRITE/DELETE INFECTED FILES:
                               SCAN OPTION = /D
                    Instructs  SCAN to overwrite / delete  any
                    infected files when found. Use with caution!

                 C. CHECK MEMORY FOR CRITICAL AND STEALTH ONLY:
                        SCAN/CLEAN OPTION = DEFAULT MODE
                    Terminus sends /NOMEM  option  by  default
                    to SCAN/CLEAN if BOTH #C and #D are OFF

                 D. CHECK MEMORY FOR * ALL * KNOWN VIRUSES
                            SCAN/CLEAN OPTION = /M
                    Instructs SCAN/CLEAN to check memory for all
                    known viruses. This option is not recommended
                    if you are also using another anti-viral package
                    which does not encrypt, cipher, hide or otherwise
                    remove its' own virus search strings.

                 E. EXTEND MEMORY CHECK TO 1088Kb:
                          SCAN/CLEAN OPTION = /CHKHI
                    Extends memory check from 640Kb to 1088Kb

                 F. SCAN/CLEAN MULTIPLE FLOPPIES:
                             SCAN/CLEAN OPTION: /MANY
                    Allows SCAN/CLEAN of multiple floppies.

                 G. FAST DISPLAY & SKIP INSIDE LZEXE/PKLITE:
                          SCAN/CLEAN OPTION: /FAST
                    Speeds up SCAN / CLEAN operations  by  not
                    checking inside LZEXE / PKLITE  envelopes.
                    This option may cause missing of some virus
                    infections. Read SCANv111.DOC for more info.

                 H. TOGGLE SCAN/CLEAN REPORT FUNCTION:
                    Disable or select SCAN/CLEAN reports style


                                   - PAGE 18 -


                 I. VIRUS DETECTION ALARM SOUND:  ON/OFF

                    Toggles The Virus Terminus virus found detection
                    alarm sound ON/OFF. NOTE: This option does not
                    affect SCAN/CLEAN operation.

         ***** SAVING SCAN/CLEAN/TERMINUS OPTIONS:(stand-alone operation)

              To save the state of option switches A .. I simply press
         F5-PROGRAM SETUP. Then press <ESC> to leave the default
         table area. Your option settings are saved along with the other
         program parameters found in the default table. Each time you
         start Terminus the option settings for switches A .. I will
         be restored.


         ***** SETUP - OPTIONS LOCK:

       SETUP - OPTIONS LOCK set to the ON position disables the following options:

     ALL MENUS ................... : F3-DOS SESSION;  F5-PROGRAM SETUP;

     PROGRAM SETUP AREA .......... : F4-MAKE EMERGENCY WORK DISK

     IMMUNIZE/DETECT/RECOVER ..... : ADD IMMUNIZATION, REMOVE IMMUNIZATION,
                                     ATTEMPT RECOVERY

     ** NOTE: SETUP - OPTIONS LOCK set to the ON position also forces password
              entry to continue if a virus infection is detected! Additional
              menu items are password protected if network is detected.

         ***** SETUP TABLE / OPTIONS LOCK PASSWORD:

              The password supplied as a default is "PASSWORD" . Do not
         include the quotes and enter in upper case letters only. The
         password may be changed by pressing F5-CHANGE PASSWORD while
         in the program setup area.


               Use ONLY the numbers 0 .. 9 , A .. Z, a .. z, and ASCII values
         #128 .. #254   No other keyboard characters will be recognized. Limit
         password to 12 characters or less.


                                   - PAGE 19 -


        ***** LIMIT OPERATION TO SCAN FLOPPIES ONLY: (Start-up option /L)

             This mode of operation may be brought up by adding a /L option
        at startup. ! YOU MUST CONFIGURE TERMINUS & SAVE VT56B.CFG FIRST !

        /L causes Terminus to perform a self-test and then proceed directly
        to the SCAN/CLEAN LOGICAL DRIVE menu setting OPTION LOCK to the ON
        position. In addition the drive choices are limited to A: and to B:
        if one exists. No exit from this submenu is allowed until the OPTION
        LOCK is defeated by pressing F5-PROGRAM SETUP and the correct password
        is entered.  (Not available with 360Kb disk swapping)

        Password to Continue is required when a virus is detected during
        either a SCAN or CLEAN. This will necessitate the intervention of
        the Superuser who should take action to prevent further system and
        or floppy infection spread. The password required is the same used
        to enable/disable the Options Lock. It is strongly suggested that
        SCAN/CLEAN OPTION "F - SCAN/CLEAN MULTIPLE FLOPPIES" be left in
        the "OFF" position.

     *     It is strongly suggested that you seek experienced help in     *
     *     dealing with computer virus infection if you are unfamiliar    *
     *               with anti-virus software and methods.

                           ***** USE WITH CAUTION *****

             This feature was NOT intended to be used as AN UNATTENDED SCAN
         STATION. A SuperUser or System Administrator should be present to
         intervene and take control when virus infection is detected.


         ***** SCREEN SAVER :

              The screen saver is an integrated program  function which
         blanks your computer screen after a pre-determined period of
         keyboard or mouse inactivity. The screen saver is turned on
         from the Default Table(press F5). Users may enter from 1 to
         60 minutes of *approximate* delay time before activation.
         The screen saver responds to keypress AND mouse clicks.


                                   - PAGE 20 -

         ***** EXPERIMENTAL VIRUS DATA:( ADVANCED USER FUNCTION! )

              Please read the SCAN docs to get a better understanding
         of what an 'experimental virus data file' consists of. If you
         decide that you need to utilize this function, press F5-SETUP
         and make an entry to the default 'EXP.VIRUS DAT.FILESPEC'. This
         entry will be the path and filename for your experimental virus
         data file. Next, turn default switch 'EXP. VIRUS DATA ON/OFF' to
         the 'ON' position. NOTE: This is the only way to tell THE VIRUS
         TERMINUS program to relay the /EXT switch to SCAN. Be sure
         to go back to PROGRAM SETUP and turn this switch off when you
         are finished!

         ***** WRITE PROTECTED FLOPPY OPERATION:

              Running The Virus Terminus, SCAN, CLEAN, etc. from a write
         protected floppy is a must if your system is infected. Doing so,
         however, imposes a few minor limitations.

             A. The SCAN/CLEAN report or LOG function will not work since
                SCAN/CLEAN  must write to the disk to create a report.
             B. The SCAN/CLEAN DIRS/FILES submenu normally uses the @filename
                response file for super fast operation. If your floppy is
                found to be write protected this mechanism is suspended.
                You are not given choice of individual files. Instead, you
                must choose from whole subdirectories only.

      ***** DIRECTORY/PATH/FILE LIMITATIONS:

          The Following limitations are imposed:

          1. Only paths 64 characters or less are included in the selection
             list.
          2. A 35 character limition on selected paths is imposed when user
             is attempting to grab a path to be placed in the default table.
             User is warned and allowed to make another selection.
          3. Maximum of 512 paths for each tree branch level with manual entry
             mechanism provided for larger systems, etc.
          4. Maximum 512 files displayed for directory listings etc. Use *.*,
             entire directory <J>, manual filename entry with optional
             wildcards if desired, or menu #1 (entire logical drive) for SCAN
             or CLEAN processing of larger file groups

         ***** MEMORY AVAILABLE FUNCTION:
                   (LARGEST CONTIGUOUS CONVENTIONAL RAM BLOCK)

              Memory available for SESSION launch or VIRUSCAN operations
         can be found by pressing CTRL-F key combination while in ANY
         MENU or PROGRAM SETUP. (This is NOT DISK space, rather computer
         CONVENTIONAL RAM memory!)
         NOTE: Current memory requirement for SCAN is 390Kb free. The Virus
               Terminus occupies approximately 60Kb RAM when executing SCAN,
               CLEAN, or DOS SESSION. (450Kb total) ( VIRUSCAN 9.21v11 )


                                   - PAGE 21 -

         ***** NETWORK GROUP SERVICE, INSTALLATION, etc:

              The Virus Terminus v5.6BN is a general LAN compatible program.
         MS-DOS v3.1 or higher + share.exe or  MS-DOS compatible equivalents
         are required. Your LAN software must be compatible with the DOS
         network services. Note that not all modes and types of installation
         may work on certain LAN implementations. Also, be sure to first refer
         to the McAfee program VIRUSCAN(tm) and CLEAN-up documentation for the
         LAN compatiblity of SCAN.EXE and CLEAN.EXE . For an updated list of
         Virus Terminus tested types, call:

         STC BBS at 908-206-1386    MODEM ACCESS ONLY: {2400 - 14.4Kb  N 8 1}

         ** INSTALLING VIRUS TERMINUS ON NETWORK:

         The Virus Terminus needs to know where the executables reside for
         configuration purposes, etc. The Virus Terminus uses a dynamic
         configuration table if LAN operation is detected. Table entries
         1..5,7,8 are adjusted, if necessary, for each workstation running
         the program before the main menu appears. These adjustments made at
         one workstation do not affect other workstations. Only one vt56B.cfg
         file is required. This mode of operation will be adhered to whether
         installation is made on a network or local drive.

         NOTE: The location of ALL executables including SCAN and CLEAN
               + reports/log MUST be the same network volume\directory or
               workstation volume\directory as The Virus Terminus.

         NOTE: The SCAN/CLEAN activity log/report will be created and updated
               in the directory where The Virus Terminus executables reside.
               If The Virus Terminus executables reside on a workstation local
               volume\directory instead of a network drive, the log will be
               created/updated on that workstation local install drive and
               directory. Therefore, if a centralized activity report log is
               of paramount importance for your LAN implementation, you should
               attempt to install the Virus Terminus on a network or server
               volume/directory. This may not be possible on certain LANs.

         The Virus Terminus SCAN/CLEAN OPTION SELECTION LIST table found in
         submenus #1 and #2 is reset at startup for each instance of operation
         in a network installation. Note that the state of each option is
         saved upon program exit and then restored on startup ONLY in a stand-
         alone installation. If a network is detected then the table resets to:

            A. SCAN/CLEAN -EXPAND FILE TYPE SEARCH- ....  [ OFF ]
            B. SCAN.EXE OVERWRITE/DELETE INFECTED FILES.  [ OFF ]
            C. CHECK MEMORY: CRITICAL & STEALTH VIRUSES.  [ ON  ]
            D. CHECK MEMORY: * ALL * KNOWN VIRUSES .....  [ OFF ]
            E. EXTEND MEMORY CHECK TO 1088Kb ...........  [ ON  ]
            F. SCAN/CLEAN MULTIPLE FLOPPY DISKS ........  [ OFF ]
            G. FAST DISPLAY & SKIP INSIDE LZEXE/PKLITE..  [ OFF ]
            H. SCAN/CLEAN REPORT FUNCTIONS .............  [ ??? ] --> SEE NOTE
            I. VIRUS DETECTION ALARM SOUND .............  [ ON  ]


                                   - PAGE 22 -

         ***** NETWORK GROUP SERVICE, INSTALLATION, etc: cont.

      NOTE: Table entry #H is reset to the value found in The Virus Terminus
            configuration table (press F5-PROGRAM SETUP to modify) Once the
            program is up and running, the state of most switches may be
            changed by the individual workstation user. A password will
            be required to toggle #B to ON if a network is detected. #H
            may not be toggled to OFF if the SETUP OPTION LOCK was set to
            ON prior to starting the program.

         The following minimum considerations should be given when installing
         The Virus Terminus on a Local Area Network: (much of the following
         concerns itself with concurrent multi-user operation)

      *   1. Install directory must include READ/WRITE access. The Virus   *
             Terminus creates TWO unique named temporary files which are used
             for each instance of concurrent operation. Both files are then
             deleted upon program exit.   (temp filename1 = VTxxxxxx.xxx
             and  temp filename2 = xxxxxxxx.log)

      *   2. Open/Run Virus Terminus from DOS v3.1 or higher Workstation   *

      *   3. SHARE.EXE or a compatible equivalent must be active           *

      *   4. Only ACTIVITY LOG style reporting is available when network   *
             is detected. ALL references to indiviual reports including view
             or print are directed toward the ACTIVITY LOG. Each workstation
             will only be able to view etc. their current temporary activity
             log file. All temporary log files are appended to the master
             report log named RPT_VT.TXT when each instance of operation is
             terminated.

      *   5. Use the /TAO startup option combo to check workstation memory, *
             force the SETUP OPTION LOCK to ON, force the report type to
             ACTIVITY LOG and ON. This may be done from the command line,
             Terminus startup batch file, or by SET STCVTEC=TAO  NOTE: The
             /AO combo may be necessary with certain LAN setups. The same
             effect may be achieved on most networks by configuring The Virus
             Terminus from the program setup area (press F5-PROGRAM SETUP)
             by selecting ACTIVITY LOG as the report style, and toggle SETUP
             OPTION LOCK to ON. (See page #23 for a summary of lock methods)

      *   6. You MUST install the Virus Terminus in the same directory     *
             as SCAN, CLEAN, VALIDATE and VIRLIST.TXT  If The Virus Terminus
             detects network or remote operation installation/use it will
             insist that all files be placed in the Terminus directory.

      *   7. The Virus Terminus vt56B.cfg file is created by, not supplied *
             with, this program package. Therefore, if you wish to change
             the password etc. you must first press F5-PROGRAM SETUP and
             then exit the setup area by pressing <ESC>. This will save
             or create the file vt56B.cfg to the Terminus directory.


                                   - PAGE 23 -

         ***** NETWORK GROUP SERVICE, INSTALLATION, etc: cont.

      *   8. It may be desirable or * necessary * on certain LAN systems   *
             to set the DOS file attribute for each of the following files
             to Read-Only: scan.exe ; clean.exe ; validate.com ; virlist.txt
                           vt56B.exe ; vtcf2b.exe ; vtcf5b.exe ; vtcf56.exe

             The master report file named RPT_VT.TXT which will be created
             by the Virus Terminus should be made shareable but not read-only.
             Also, if you are using immunization routines, make RECOVLST.VT
             shareable.

             NOTE: After configuring The Virus Terminus for your LAN setup
                   set the file attribute of VT56B.CFG to Read-Only but
                   shareable to further prohibit individual workstation
                   users from making changes. The same effect may be achieved
                   by setting the SETUP OPTION LOCK to ON or using the /O
                   startup option.

      *   9. Files which VIRUSCAN(tm) reports either by screen message or  *
             in the activity log as:

                        " Sorry, I cannot open ..." { filename.ext }

             should be re-scanned at a later time. Note that some files may
             be temporary data constructs opened with DENY_ALL access. These
             files may not be present later on since their parent application
             will have deleted them upon exit.

      *  10. The program setup entry "ALL MENUS-LOCAL+NETWORK" may be set
             to "OFF" when multiple workstation use is expected. If you are
             a Systems Administrator and need to perform certain operations
             on network drives, install The Virus Terminus in a separate
             directory on the server and restrict rights to same. There you
             will be able to custom configure The Virus Terminus for your
             needs while  not affecting the operation of workstation users.
             NOTE: This switch is ignored for each instance of workstation
             operation where no local drives are detected.

              Viruscan(tm) options for the NETWORK GROUP SERVICE submenu
         should be set from the configuration table. Press F5-PROGRAM SETUP
         to modify. Configuration options such as Report Style, experimental
         test string, disable CTRL-Break, etc. apply to Network GROUP service.
         The configuration table entries named ADD SCAN PRGM OPTIONS and ADD
         CLEAN PRGM OPTIONS * DO NOT APPLY TO NETWORK GROUP SERVICE MENU * .

         As a review there are several methods available which may be used
         to force Systems Administrator setup and which deny individual
         workstation users access to edit/change the configuration table
         values which may affect other users:

             1. The lock may be set from the program setup area. Set "SETUP
                OPTION  LOCK:" to ON.


                                   - PAGE 24 -

         ***** NETWORK GROUP SERVICE, INSTALLATION, etc: cont.

             2. Use the /O startup option on the command line or as a value
                assigned to the STCVTEC environment variable.

             3. First configure The Virus Terminus. Exit the program. Then set
                the file attribute of vt56B.cfg to READ-ONLY and make it
                shareable.

         A password will then be required to enter the program setup area.
         Read page# 18 for password value and modification. Also, this forces
         ** PASSWORD To Continue ** when a virus infection is detected.

        Although the Virus Terminus v5.6BN is generally LAN compatible, no
       specific claim is made as to compatibility with any network system.
      Use of The Virus Terminus on local or networked drives should be subject
       to System Administrator/Supervisor installation, testing and approval.





         ***** STCVTEC ENVIRONMENT VARIABLE:

              The variable name is STCVTEC. STCVTEC may be set to include
         startup options. Please refer to page #10 for a complete list of
         startup options.

         Examples: SET STCVTEC= m     ( mono CGA notebook, portable,etc. )
                   SET STCVTEC= mt    ( mono CGA + startup self-test)

         Place the SET statement into user autoexec.bat or enter from the
         command line prior to running the Virus Terminus.






         ***** DOS ERRORLEVEL on EXIT:

          The Virus Terminus sets the DOS errorlevel upon exit as follows:

       0 = Normal Exit  1 = Virus Infection Detected  2 = Abnormal Termination

        In the event that a user chooses to (C)ontinue instead of (H)alt when
        a virus is detected, the errorlevel will still be set to '1' .


                                   - PAGE 25 -

        ***** OPERATION FROM Microsoft WINDOWS v3.1:

             The Virus Terminus is a DOS REAL MODE application. It should be
        run as such. A "PIF" file is not required although it may be of use to
        certain advanced users. A 32x32 16c icon, STC.ICO, has been included
        with this version of The Virus Terminus. Best results are obtained
        using FULL WINDOW.




        ***** PROGRAM ERROR MESSAGES:

              The following is a partial list of program error messages and
         corrective actions.

         ------------------------------------------------------------------

     1.    'FAILED! Unable to Execute/Perform Requested Program Function!',

         Terminus was requested to perform a function which requires an
         external file and an error has resulted.

         REMEDY: 1. Press F5-PROGRAM SETUP and enter the correct location
                    of the requested file. Check to make sure that the file
                    is actually there by doing a directory listing at the
                    DOS prompt (i.e. DIR C:\UTILITY\VIRUSCAN )

                 2. Press CTRL-F at the MAIN MENU to determine how much
                    conventional memory free exists. Memory free reported
                    should be 420Kb or more. Power Down and start over. Check
                    memory free again. If still not enough, run Virus Terminus
                    from the DOS prompt instead of your shell, etc.
         ------------------------------------------------------------------

     2.                 "REPORTS DISABLED WHEN DISK SWAP ON!"
                        "SELF-TEST DISABLED/DISK SWAP IS ON!"

         A /D command line option was detected at program startup.

         REMEDY:   Use a high capacity installation disk and/or
                   put ALL needed program files on the same disk.

         ------------------------------------------------------------------

     3.              "Switch Forced ON! For FILE Submenu!"
                     "Switch NOT ACTIVE For FILE Submenu!"

         /A SCAN/CLEAN option is forced on and may not be disabled for any
         reason while in the SCAN/CLEAN DIRS/FILES submenu.


                                   - PAGE 26 -


     4.               "You MUST! First *ENTER* A VIRUS ID!"

         The CLEAN-up Virus ID Code is not present in the CLEAN-up ID Code
         window and you are trying to CLEAN or disinfect a file or diskette.
         If SCAN was not previously run and/or Auto-Detect logic couldn't
         grab the code from SCAN's output then you MUST press submenu select
         #2 Enter Virus ID. The code is displayed by SCAN when a virus
         infection is detected. It is the string found BETWEEN the [ and ]
         brackets. You may also find a list of codes in the McAfee Associates
         file VIRLIST.TXT.
         ------------------------------------------------------------------

     5.                 "ACCESS DENIED! Please Run VT56B.EXE"

         VTCF2B.exe and vtcf56.exe are not stand alone program files. They
         must be used in conjunction with vt56B.exe only!
         ------------------------------------------------------------------

     6.              FAILED! Unable to ACCESS/OPEN VTCF56.EXE !!

         Please Change Active Directory to Location of The Virus Terminus!
         The current directory is not the location of the Virus Terminus.

         REMEDY:    Try typing the following just before running Terminus.
                    Press <ENTER> after each line:

                    C:
                    cd\location
                    vt56B.exe

                    C: may be D: or whatever drive Terminus is located on.
                    "location" should be the name of subdirectory where
                    Terminus is located at.

         NOTE: It may also be possible that SCANv111 has opened vtcf56.exe
               for inspection at another work station in such a way that
               vtcf56.exe will not open/run until processing is finished. In
               that case, follow the Virus Terminus retry prompts until
               vtcf56.exe finally does open and exectute.
         ------------------------------------------------------------------

     8.                  "ERROR! COMMAND LINE TOO LONG!"

         You have exceeded the DOS command line limit for a particular
         operation. Check the VTEC configuration table for program locations
         that are several subdirectories deep. Change locations if necessary.
         Try putting the scan.log file into the root directory. Reduce the
         number of options used to include just those that are necessary.
         Note: This is not a common error since whenever possible VTEC will
         use the @response option file format to overcome this limitation.


                                   - PAGE 27 -

               PRODUCT REGISTRATION --- PERSONAL HOME USE ONLY!
            ANY OTHER USE REQUIRES A PAID NEGOTIATED SITE LICENSE

  PAID Registration gives license and right to use The Virus Terminus on a
  single machine for personal home use only. Payment of a negotiated 2 year
  license fee is required for educational, business, corporation, government
  or agency environment use. This registration does not apply to underlying
  programs used in conjunction with The Virus Terminus. For a list of files
  contained in The Virus Terminus program package please read page 2 of this
  document. (VTEC56BN)

          NAME       : ________________________   CHOOSE ONE DISK MEDIA TYPE
          STREET     : ________________________      5.25" ____  3.5" ____
          CITY       : ________________________
          STATE/PROV.: ________________________   OWN/USE A MODEM ? Y__ N__
          ZIP CODE   : ________________________
          COUNTRY    : ________________________    TERMINUS OBTAINED FROM?
                                                   _______________________
                                                   _______________________

                                   | REGISTRATION + DISK             $ 20.00
        ONLY U.S. FUNDS ACCEPTED!  | OPTIONAL PRINTED MANUAL $12   + $
                                   |                                 -------
        MAKE YOUR REMITTANCE TO:   |                     SUB-TOTAL = $
                                   | SALES TAX IF APPLICABLE       + $
                                   | SHIPPING AND HANDLING         + $  4.00
             S.T.CALISE            | OVERSEAS SHIPMENT $2.00 EXTRA + $
        673 HERBERTSVILLE ROAD     |                                 -------
        BRICK, NJ  08724  USA      |                         TOTAL = $


     UPGRADES:    REGISTERED home users of V5.6B are eligible for upgrades
                  to subsequent releases. Updates may be otained by mail by
                  sending $6.00 in U.S. funds, or $15.00 for disk + printed
                  manual, to S.T.Calise at the above address. Don't forget
                  to specify the disk media type and your current address.
                  Instant update/upgrade is also available to all REGISTERED
                  home users.Your registration PACKET will contain the needed
                  access codes and information.

       STC BBS  908-206-1386  2400 .. 14.4k  v.32/.32bis v.42/.42bis MNP 1-5
    --------------------------------------------------------------------------
    NOTES:


                                   - PAGE 28 -

   For more registration/license information on VIRUSCAN(SCAN), CLEAN, and
   other McAfee Associates programs please contact:

          McAfee Associates, Inc.          (408) 988-3832 office
          2710 Walsh Avenue, Suite 200     (408) 970-9727 fax
          Santa Clara, CA  95051
          U.S.A.


                          SCAN, CLEAN, VALIDATE, VIRLIST
                     Copyright (c) 1989-1994 by McAfee Associates.
           VIRUSCAN(tm) and MCAFEE(tm) are trademarks of McAfee Associates

    IBM and OS/2 are registered trademarks of International Business Machines.
    COMMAND.COM and SETVER.EXE are copyright by Microsoft Corporation.
    MS-DOS, WINDOWS, Microsoft Mouse are registered trademarks of Microsoft
    Corporation.
    PKLITE(tm) is a trademark of PKWARE, Inc.
    LZEXE is copyright by Fabrice Bellard.



                   ******************************************
                   Trademarks of other companies mentioned in
                   this program,help file and/or accompanying
                   documentation    appear    strictly    for
                   identification purposes  only and are  the
                   property of their respective companies.



     CRC validation checksum values for the shareware version of The Virus
     Terminus v5.6BN  are available by calling the STC BBS.


                     *********************************

   The Virus Terminus is not available for export to the following countries:
                North Korea, Vietnam, Cuba, Iran, Iraq, Libya.

                     *********************************


                                   - PAGE 29 -

                   *****  UPDATE INFORMATION VERSION 5.6BN *****

    1. Updated/Tested VTEC56BN for SCAN/CLEAN 9.21v111  (also SCAN/CLEAN v110
       Beta) Note that The Virus Terminus checks for 450Kb contiguous free
       conventional RAM at startup.

    2. MAKE EMERGENCY DISK module updated for VTEC56BN. The file RECOVLST.VT
       is now also copied to the recovery disk.(read below)

    3. Changed method of immunization. The Virus Terminus v5.6BN uses the
       Viruscan(tm) /AF, /CF, /RF switch options to add, check and/or
       remove validation/recovery information. A file named RECOVLST.VT
       now holds the recovery information. Refer to the file VT56BDOC.TXT
       for new instructions on immunization and recovery.

       NOTE: Users who have previously applied The Virus Terminus to immmunize
             their files should perform a complete new immunization execution.

    4. Revised pathname manual entry and wildcard file selection procedures.

    5. IMMUNIZE/DETECT/RECOVER submenu: "User Confirm" dialog box now appears
       prior to scanning which requests user to confirm adding an optional
       /CERTIFY command line parameter.(report files/area not immunized)

    6. Modified the The Virus Terminus SCAN/CLEAN option selection table
       which appears in the SCAN/CLEAN LOGICAL DRIVE, SCAN/CLEAN DIR/FILES,
       and NETWORK GROUP SERVICE submenus. Submenu #1 now contains a new
       option:  < J > ROOT DIR. + BOOT AREA ONLY: {ON/OFF}

       Submenu #2 now contains the following option with reassigned definition:
       < J > SELECT FILES: {ON/OFF} User is able to select individual or groups
       of files when this option is ON. The user will select an entire
       subdirectory (or use wildcard filter if appropriate) when it is OFF.
       /SUB will not be sent as in v5.2AN

       The /M memory option is now available as a separate user option:

           C. CHECK MEMORY: CRITICAL & STEALTH VIRUSES.  [     ]
           D. CHECK MEMORY: * ALL * KNOWN VIRUSES .....  [     ]

     NOTE: Selection #D sends SCAN/CLEAN the /M option which instructs SCAN/
           CLEAN to check for ALL KNOWN viruses which may be found in memory.
           Turning option selection #D to ON is not recommended if the user
           also runs or makes use of another anti-viral program package which
           does not remove, cipher, hide or otherwise encrypt its own virus
           search strings in memory. Read the VIRUSCAN(tm) documentation for
           more information concerning the SCAN/CLEAN /M option.

     NOTE: Use The Virus Terminus only in concert with McAfee Associates anti-
           viral products for best results.
