Copyright: Copyright© 2000-2003 Symantec Corporation. All rights reserved.
Citation: Copyright© 2000-2003 Symantec Corporation. All rights reserved.


 Auto-Protect Status

Keep Auto-Protect turned on (enabled) at all times to prevent viruses from infecting your computer. Auto-Protect works in the background, without interrupting your work.

Auto-Protect automatically:

Detects and protects you against all types of viruses, including macro viruses, boot sector viruses, memory resident viruses and Trojan horses, worms and other malicious code.

Protects your computer from viruses transmitted through the Internet, checking all files you download from the Internet, including Java Applets and ActiveX controls.

Keeps your system safe at all times by checking for viruses every time you use software programs on your computer, insert floppy disks or other removable media, and modify or access documents.

Monitors your computer for any unusual symptoms that may indicate an active virus.

More Info


Email Status
 Email Scanning Status

Email has become a vital part of our lives. Viruses use email as the most frequent mechanism to spread and infect computers. Norton AntiVirus supports all email programs that use POP3 and SMTP communications protocols.

Upon installation, Norton AntiVirus automatically configures your email program for protection against viruses.

Norton AntiVirus stops infections in incoming and outgoing email. For maximum protection, and to prevent you from spreading virus-infected email to your friends and colleagues, Norton AntiVirus scans your outgoing messages for viruses.

You should keep Email Scanning on at all times.

Email Scanning Status

The Email Scanning Status that is displayed depends on which Email Options you have selected.

Options Selected	Status Displayed
Scan incoming Email and Scan outgoing Email	Email Scanning On
Scan incoming Email	Incoming Email On
Scan outgoing Email	Outgoing Email On
None	Email Scanning Off
More Info


 Script Blocking Status

Script Blocking monitors script-based viruses and alerts you of virus-like malicious behavior, stopping these viruses before they can infect your computer.

More Info


 Full System Scan Status

Full System Scan status tells you if you have performed a virus scan of your computer. A full system scan checks all boot records, master boot records and all files on your computer. It is important that you perform a full system scan after initial product installation, to ensure that your system is free from viruses.

When you installed Norton AntiVirus and completed the Information Wizard, you were given the option to schedule a weekly full system scan as part of post-install tasks. If you made that choice, the scan is scheduled automatically for you. After installation, you can always review and modify the scheduled scans in the Norton AntiVirus "Scan for Viruses" section or create new scheduled scans.

More Info


 Virus Definitions Status

Virus Definitions Status warns you if your virus definitions are out of date and displays the definition file date on your computer. Virus definitions are files containing specific signature information that allows Norton AntiVirus to detect and protect you against virus and malicious code threats.

Note:  A valid antivirus subscription service is required for you to receive virus definitions from Symantec. Your Symantec product includes a complimentary, limited time subscription for virus definition services. Your subscription status is displayed in the System Status area of the Norton AntiVirus main window.

More Info


 Automatic LiveUpdate Status

Automatic LiveUpdate status tells you if the Automatic LiveUpdate feature is on. You should have automatic LiveUpdate turned on to ensure that Norton AntiVirus has the latest virus definitions and program updates. Virus definitions are files containing virus information that allow Norton AntiVirus to recognize and alert you to the presence of a specific virus. To prevent new viruses from infecting your computer, you must update your virus definitions frequently. Program updates are enhancements to Norton AntiVirus that are periodically issued by Symantec. Program updates are usually changes to the inner workings of the program. After installing program updates, you won’t necessarily see a difference in the way Norton AntiVirus works.

Note:  A valid antivirus subscription is required for you to receive virus definitions from Symantec. Your Symantec product includes a complimentary, limited time subscription for virus definition services. Your subscription status is displayed in the System Status area of the Norton AntiVirus main window. A valid antivirus subscription service is not required for you to receive program updates.

(ISDN users only): By default, Automatic LiveUpdate checks for updates to Norton AntiVirus virus definitions every four hours, when your computer is connected to the Internet. If you have an ISDN (Integrated Services Digital Network) router that is set to "Automatically Connect," you could be incurring connection and phone charges every time Automatic LiveUpdate runs. If this is a concern, you can disable automatic connection on your ISDN router, or disable Automatic LiveUpdate.

More Info


Subscription Services Status
 Subscription Service Status

Subscription Service status tells you when your antivirus subscription service expires.

A valid antivirus subscription is required for you to receive virus definitions from Symantec. Virus definitions are files containing specific signature information that allow Norton AntiVirus to detect and protect you against virus and malicious code threats.

Symantec’s global team of antivirus experts is continuously researching virus and malicious code threats, and new virus definitions are released periodically to provide you with the latest protection. To prevent new viruses from infecting your computer, you must keep your antivirus subscription service current, and update your virus definitions frequently. Symantec recommends that you update your virus definitions at least weekly by running LiveUpdate or enabling Automatic LiveUpdate.

More Info

More Info from the Symantec Knowledge Base web site


Jump to web site

Jumps to http://www.symantec.com/techsupp/subscribe/

This topic never appears. It jumps to a web site and then executes the Back macro to return to the topic from which it was called.


 Browser not found

We could not find a default Web browser on your computer. You must have a Web browser installed to view Web sites. If one is installed, start it manually to visit the Web site mentioned in the help topic.


 Scan Summary

The Scan Summary displays information about the scan just performed. It shows how many viruses were found, repaired, quarantined, or deleted and reports inoculation changes.

Scanned: Indicates how many files, master boot records, and/or boot records were scanned.

Infected: Indicates how many of the above items, if any, were infected.

Repaired, Quarantined or Deleted: Indicates how many items, if any, were repaired, quarantined or deleted. You can view the items in Quarantine by clicking Reports in the Norton AntiVirus main window. Next to Quarantined Items, click View Report.

If any viruses still exist on your computer, a message appears at the bottom of the Scan Summary dialog box.

Click the More Details button to get more information about remaining viruses. Click the name of the item to view its file name and location on your computer. If you have Internet access, click the Virus Name to go to the online virus encyclopedia Website.

More Details also displays whether the scan checked for viruses in your computer’s memory; what other types of files were scanned, such as compressed files; and the action taken on every infected file found on your computer.


Virus List dialog box
 Virus List

The Virus List displays a list of viruses that Norton AntiVirus can detect and eliminate.

It is important to update your virus definitions regularly because new viruses are discovered all the time. If you have an Internet connection, click LiveUpdate in the Norton AntiVirus main window, or ensure that Automatic LiveUpdate is on.

More Info


System integrity dialog box
 System Integrity

The System Integrity dialog box notifies you about changes in boot records that may indicate the presence of a virus. Your options are:

Repair: Repairs a boot record and returns the boot record to its original state.

Note: You should choose this option with caution since repairing after upgrading an operating system (for example, from Windows 95 to Windows 98) can cause system problems.

Inoculate: Reinoculates a boot record. (Choose this option only if you expected the reported change. Reinoculating means you are recording the "fingerprint" of the boot record as it is now.)

Note: You should choose Inoculation when you have upgraded an operating system (for example from Windows 95 to Windows 98).

Continue: Continues the scan without responding to the change.

Stop: Stops the scan and returns you to the Norton AntiVirus main window.

You must reinoculate if you’ve upgraded your operating system or converted from a 16 bit to 32 bit environment. If you choose Repair, you will lose the system changes and create problems.

More Info


Inoculation Changed dialog box
 Inoculation changed

When Norton AntiVirus alerts you that a boot record’s inoculation data has changed, do one of the following:

If you are certain that the change is for legitimate reasons, click Inoculate to generate new inoculation information.

Note: Boot records change legitimately in very few situations. Upgrading operating systems (for example, from Windows 95 to Windows 98) is one of the few legitimate causes.

If you suspect a virus, click Repair to return the boot record to the way it was when you last inoculated it.


 Manual Scan Options

A manual scan enables you to check for viruses only in the files you specify. Manual scan options let you include additional types of files to scan, such as boot records. According to the manual scan options, Norton AntiVirus automatically fixes a virus-infected file or can ask you what to do with the file. You can also specify whether you want the manual virus scan to check all files on your computer or exclude files based on their extension.

More Info


New File Extensions dialog box
 New file extensions

1	Type the extension to add.

2	Click OK to save your data and return to the Program File Extensions dialog box.


File Extensions List dialog box
 File Extensions

Use the Program File Extensions dialog box to add new extensions, delete extensions, and reset the extensions to the original list installed with Norton AntiVirus. If Scan files using SmartScan is selected, Auto-Protect scans only files whose file extensions are listed in the Program File Extensions dialog box. This feature enables you to add or exclude certain types of files or programs from scanning by Auto-Protect.

The file extensions list contains the majority of extensions used for program files. If you have the Scan Files with SmartScan option turned on, Norton AntiVirus only scans files with extensions on this list.

Norton AntiVirus also scans Microsoft Office documents when scanning program files. Although these are not program files, they do contain code and can be infected by Macro Viruses.

If you are using custom applications with unique file extensions, click New to display a dialog box where you can add them to the list. Norton AntiVirus can then scan and protect them against infection.

Click Remove to delete a selected file extension. Be careful, however. Removing extensions from the list reduces your protection against viruses.

Defaults to return the file extensions list to the preset options.


 Auto-Protect Advanced Options

The Auto-Protect Advanced options let you select which virus-like activities to allow or disallow.

More Info


 Auto-Protect Options

The Auto-Protect options allow you to customize the automatic protection feature of Norton AntiVirus. This feature works continuously in the background to find and repair viruses.

More Info


 Email Options

The Email Protection options allow you to control whether Norton AntiVirus should scan your incoming or outgoing email for viruses. If you choose to have your email scanned for viruses, you can select the response you want from Norton AntiVirus when an infected attachment is found in an email message.

More Info


 Email Advanced Options

If you choose to have Norton AntiVirus scan your incoming or outgoing email, you can also set these options to keep your email client from timing out while email is being scanned, and to display indicators of scanning progress.

More Info


 Automatic LiveUpdate Options

Automatic LiveUpdate automatically checks for virus definitions and program updates to your virus protection when you are connected to the Internet.

More Info


 Inoculation options

Inoculation notifies you when the boot record for your computer has been changed, which might indicate the presence of a virus on your computer. For best protection you should leave the default settings as they are.

More Info


 Manual Scan Exclusion List Options

The Exclusions options allow you to exclude files from being checked for viruses. You can assign exclusions to drives, folders, groups of files, or single files.

More Info


 New/Edit Auto-Protect Exclusion

If you are creating a new exclusion, type the name of the item you want to exclude from virus checking. You can assign exclusions to drives, folders, groups of files, or single files. For example:

C:\program files\	excludes all files in the program files folder on the C: drive

\program files	excludes all files in the program files folder on all drives (C:\program files and D:\program files, etc.)

C:\myprogram.exe	excludes the myprogram.exe file on the C: drive

myprogram.exe	excludes the myprogram.exe file in all folders on all drives

If you specify the full path of a file (for example, C:\myprogram.exe), and then move or rename the file, you automatically invalidate its exclusion.

Wildcards

Wildcard characters, such as * or ?, can be used to exclude file extensions, provided they are not specified as part of a path. For example:

*.xl?	excludes all files on your computer with the extension .co followed by any other single character.

*.ex*	excludes all files on your computer with the extension .ex followed by any number of characters.

You cannot use a wildcard in a path. For example, C:\program files\*.xl? and C:\program ?????\ are not allowed.

You cannot specify a filename with a wildcard extension. For example, myfile.xl? is not allowed.

Be careful! If you set an exclusion, you have reduced the level of protection against viruses.

More Info


 New/Edit Manual Scan Exclusion

If you are creating a new exclusion, type the name of the item you want to exclude from virus checking. You can assign exclusions to drives, folders, groups of files, or single files. For example:

C:\program files\	excludes all files in the program files folder on the C: drive

\program files	excludes all files in the program files folder on all drives (C:\program files and D:\program files, etc.)

C:\myprogram.exe	excludes the myprogram.exe file on the C: drive

myprogram.exe	excludes the myprogram.exe file in all folders on all drives

If you specify the full path of a file (for example, C:\myprogram.exe), and then move or rename the file, you automatically invalidate its exclusion.

Wildcards

Wildcard characters, such as * or ?, can be used to exclude file extensions, provided they are not specified as part of a path. For example:

*.xl?	excludes all files on your computer with the extension .co followed by any other single character.

*.ex*	excludes all files on your computer with the extension .ex followed by any number of characters.

You cannot use a wildcard in a path. For example, C:\program files\*.xl? and C:\program ?????\ are not allowed.

You cannot specify a filename with a wildcard extension. For example, myfile.xl? is not allowed.

Be careful! If you set an exclusion, you have reduced the level of protection against viruses.

More Info


 Deny Access

If you are attempting to access a floppy disk drive and are denied access, there is no disk in the drive. If you are attempting to access a hard disk drive, you need to resolve the problem that is causing you to be denied access (for example, on a network you may not have access rights).


Overwrite dialog
 Overwrite/Append

You are about to overwrite an existing file with the file you're printing to disk.

Do one of the following:

Click Overwrite to replace the old file.

Click Append to add information to the existing file.

Click Cancel to go back and change the filename.


Bloodhound scanning options
 Bloodhound options

Norton AntiVirus includes a technology called Bloodhound, which dramatically increases your virus protection against new and unknown viruses.

Bloodhound isolates and locates the various logical regions of a file and then analyzes the program logic for virus-like behavior. Bloodhound detects a high percentage of unknown viruses. In addition, Norton AntiVirus detects unknown viruses by monitoring activity on your computer for behaviors that viruses typically perform. When a suspicious activity is detected, Norton AntiVirus prevents the action from continuing.

More Info


Bloodhound scanning options
 Bloodhound options

Norton AntiVirus includes a technology called Bloodhound, which dramatically increases your virus protection against new and unknown viruses.

Bloodhound isolates and locates the various logical regions of a file and then analyzes the program logic for virus-like behavior. Bloodhound detects a high percentage of unknown viruses. In addition, Norton AntiVirus detects unknown viruses by monitoring activity on your computer for behaviors that viruses typically perform. When a suspicious activity is detected, Norton AntiVirus prevents the action from continuing.

More Info


 Script Blocking options

Use the Script Blocking options to customize the automatic Script Blocking feature of Norton AntiVirus. The "recommended" options for this feature provide maximum protection against malicious scripts.

More Info


 Expired Subscription Alert

Your Subscription Service for Norton AntiVirus has expired.

A valid Norton AntiVirus Subscription is required for you to receive virus definitions from Symantec. However, you can continue to receive product updates without renewing your subscription.

More Info


 Subscription Alert

Your Subscription Service for Norton AntiVirus is about to expire.

A valid Norton AntiVirus Subscription is required for you to receive virus definitions and product updates from Symantec.

More Info


Repair Wizard: Repair
 Repair Wizard: Fix

If the Repair Wizard indicates that you have an infected file on your computer, you should click Fix to try to remove the virus from the file. The Repair Wizard will attempt to remove the virus from the file, leaving the file contents intact; or it will automatically delete the file if it can’t be fixed. For example, if you have an infected Microsoft Word document, it automatically removes the virus from the Word document so that you can still open and edit the repaired document as usual. If a worm or Trojan is detected, the Repair Wizard automatically deletes the file containing the malicious code.

Click an item to see the complete path and file name of the item. If you have Internet access, click a virus name to connect to the Symantec security response Web site and get more information about the virus. If you do not want to try to repair any of the listed files, uncheck the box next to the file name.

If you are sure you don’t want to keep the contents of the infected file, you can skip the fixing process and immediately quarantine or delete the file. To skip the fixing process, click Skip. If you quarantine or delete the file, you will not be able to use the file again. The infected file will be inaccessible and unable to infect your computer while quarantined, unless updated virus definitions files can repair it. If you choose to delete the file, the file and its virus will be completely deleted from your computer.

More Info


 Repair Wizard: Quarantine

Norton AntiVirus has found one or more infected files on your computer that it was unable to repair with the current set of virus definitions files. The name of the infected file, the name of the virus infecting the file, and the status of the repair are displayed. To view information on the virus from the online virus encyclopedia, click the name of the virus. To see the complete path and file name of an item, click its name.

The Repair Wizard allows you to store files in a special area called Quarantine. Files in Quarantine cannot interact with the rest of your system, so if they are infected, the virus will not spread. From the Norton AntiVirus Quarantine, a file can be sent over the Internet directly to the Symantec Security Response experts for analysis. Symantec Security Response experts determine if your file is infected. If the file is not infected, they report the results to you. If a new virus is discovered in your submission, Symantec Security Response experts will create and send you updated virus definitions files to detect and eliminate the new virus on your computer.

If you want to keep the infected file in Quarantine for submission to Symantec Security Response experts, or for possible future repair by updated virus definitions files, click Quarantine.

If you do not want to keep a listed file in Quarantine, uncheck the box next to the file name.

If you are sure you don’t want to keep the contents of the infected file, click Skip to skip the quarantine process, and delete the infected file using the next page of the Repair Wizard.

More Info


 Repair Wizard: Delete

Norton AntiVirus has found one or more infected files on your computer that it was unable to repair or safely quarantine. The name of the infected file, the name of the virus infecting the file, and the status of the repair are displayed. To view information on the virus from the online virus encyclopedia, click the name of the virus. To see the complete path and file name of an item, click its name.

The Repair Wizard recommends that you delete the infected file to prevent it from infecting your computer. Be aware that if you delete the file, you will not be able to use the file again. The file and its virus will be completely and safely deleted from your computer.

If you do not want to delete a listed file, uncheck the box next to the file name.

More Info


 Miscellaneous options

Miscellaneous options enable you to customize settings for various Norton AntiVirus protection features, such as creating a password to protect Norton AntiVirus options, scanning for viruses when you turn on your computer, and telling Norton AntiVirus to alert you when your virus definitions are out of date.

More Info


Virus List Information dialog box
 Virus Information

The Virus Information dialog box contains information about the characteristics of the virus. If you are in the process of eliminating a virus, return to the Repair Wizard or other dialog box and repair, quarantine, or delete the virus.

Virus characteristics include:

Virus Name and Aliases: The most common names by which the virus is known.

Infects: What file types or boot records the virus attacks.

Likelihood: Common or Rare.

Length: Length, in bytes, of the virus code.

Memory Resident: Stays in DOS memory after it activates.

Size Stealth: Conceals itself from detection by disguising its size.

Full Stealth: Conceals itself from detection by disguising its size and attributes.

Triggered Event: Performs some action based on certain criteria (for example, a date on the computer's system clock).

Encrypting: Encrypts its code to make detection more difficult.

Polymorphic: Appears differently in each infected file.

Comments: Provides further description of the selected virus's characteristics.


 Instant Messenger Options

Instant Messenger options customize scanning of files received by instant messengers. Norton AntiVirus scans files you may receive when you are using an instant messenger.

More Info


 Malicious Worm Alert

Norton AntiVirus has detected a malicious worm on your computer that is trying to email itself to other computers. If the Malicious Worm Alert appeared when you were not sending an email message, the worm is trying to spread itself by email and you should select the "Quarantine this worm (Recommended)" option from the drop down list. You can get more information about the worm from the Symantec Security Response virus encyclopedia.

Actions you can select from the drop down list:

Stop this worm from emailing itself: Stops the worm from emailing itself at this time, but does not quarantine the worm. This action leaves the worm on your computer, where it can possibly be activated again. Select this option only if you are sure you want to leave the worm on your computer.

Quarantine this worm (Recommended): Permanently stops the worm by putting it in the Norton AntiVirus Quarantine. While in Quarantine, the worm will not be able to spread itself. This is the safest action.

Allow this worm to email itself: Sends the email containing the worm. If you allow the worm to be emailed, it could infect the recipient’s computer. Select this option only if you are sure the email is not infected with a worm.

Always allow this worm to email itself: Sends email containing the worm anytime it tries to email itself. In the future, Norton AntiVirus will not check this file for worms. This is the riskiest action because this worm could email itself from your computer without your knowledge.

Recommended procedure for handling the worm-infected file:

1.	Quarantine the file by selecting the "Quarantine this worm (Recommended)" option from the drop down list in this alert.

2.	Run LiveUpdate and download the latest virus definitions files.

3.	Scan your computer for viruses.

4.	If nothing is detected, submit the infected file to Symantec Security Response, indicating that Norton AntiVirus worm blocking detected the file and that you have scanned with the latest virus definitions.

Symantec Security Response will reply to you within 48 hours.


 Reset Password

You can create a password to control access to Norton AntiVirus options. Create or change the password in the Miscellaneous section of Norton AntiVirus options.

If you have forgotten the password, you can reset it using the Reset Password feature. From the Help menu, click Help>About…>Norton AntiVirus tab>Reset Password.

Reset Password Key: Type the Reset Password Key characters exactly as displayed (upper and lowercase characters matter).

New Password: Type your new password.

Confirm New Password: Type your new password again.

More Info


 Auto-Protect Exclusion List Options

The Exclusions options allow you to exclude files from being checked for viruses. You can assign exclusions to drives, folders, groups of files, or single files.

More Info


Norton AntiVirus Virus Alert category
 Norton AntiVirus Virus Alerts

Selecting Virus Alerts on the left side of the Log Viewer displays details about the viruses that Norton AntiVirus has detected. The list on the right shows the name of the virus, what action Norton AntiVirus took to repair or quarantine the virus, and other information. The bottom of the Log Viewer window shows the original location of the infected file on your computer and, if available, a link to the Symantec virus encyclopedia for more information.

You can perform actions, such as printing the activity information, by selecting Virus Alerts and:

Clicking the appropriate button at the top of the Log Viewer

Right-clicking on Virus Alerts, or

Selecting the menus at the top of the Log Viewer.

More Info


Norton AntiVirus Application Activities category
 Norton AntiVirus Application activities

Selecting Application Activities on the left side of the Log Viewer displays details about Norton AntiVirus activities, such as virus scans. The list on the right shows the type of action that was taken and other information. The bottom of the Log Viewer window shows details about individual actions.

You can perform actions, such as printing the application activity information, by selecting Application Activities and:

Clicking the appropriate button at the top of the Log Viewer

Right-clicking on Application Activities, or

Selecting the menus at the top of the Log Viewer.

More Info


 Norton AntiVirus Errors category

Selecting Errors on the left side of the Log Viewer displays errors that Norton AntiVirus has generated. The list on the right shows the error message, the Norton AntiVirus feature that generated the error, and other information. The bottom of the Log Viewer window shows details about individual error messages.

You can perform actions, such as printing the error information, by selecting Errors and:

Clicking the appropriate button at the top of the Log Viewer

Right-clicking on Errors, or

Selecting the menus at the top of the Log Viewer.

More Info


As soon as you install Norton AntiVirus, you are already protected against viruses.

From the main window you can do the following:

Click System Status to view detailed information about virus protection on your computer.

Click Email Status to view detailed information about the status of your email protection.

Click Scan For Viruses to run a predefined scan or define a new scan.

Click Reports to run Quarantine or view activity logs and the virus list.

Click Scheduling to set up or edit events that run automatically.

Click LiveUpdate to automatically update virus definitions and program files.

Click Rescue to create either a Zip Rescue disk or a set of rescue floppy disks.

Click Option to customize Norton AntiVirus features.


Click to disable (or enable) automatic protection. Disabling automatic protection is not recommended unless you have been requested to do so in order to install new software. Disabling automatic protection seriously reduces your protection against virus infection.


Click to see the status of your quarantined files and/or the status of virus definition updates.


File Name: The name of the infected file and its path.

Status: Whether it is infected, repaired, or deleted.

Virus Name and Aliases: The most common names by which the virus is known.

Infects: What files or boot records the virus attacks.

Likelihood: Options are Common or Rare.

Length: Length, in bytes, of the virus code.


Memory Resident: Stays in memory after it activates.

Size Stealth: Tries to conceal itself from detection by disguising its size.

Full Stealth: Tries to conceal itself from detection by disguising its size and attributes.

Triggered Event: Performs some action based on certain criteria (for example, a date on the computer's system clock).

Encrypting: Encrypts its code to make detection more difficult.

Polymorphic: Appears differently in each infected file.


Click Print to display the Print dialog box, where you can print to a printer or to a file.


Click Close to exit the Virus Information dialog box.


Click Close to exit the dialog box and complete the scan.


Click Print to display the Print dialog box, where you can print to a printer or to a file.


Click Details to display the Details Of Scan dialog box, where you can see more information. This button is dimmed if no problems were found.


Click Close to close the Details Of Scan dialog box and return to the Scan Results dialog box.


Click Info to display the Virus Found Information dialog box, where you find descriptive information about the virus.


Click Repair to display the Repair File dialog box, where you can repair this file or boot record or all files or boot records.


Click Delete to display the Delete File dialog box, where you can delete this file or all files.


Click Exclude to display the Exclude File dialog box, where you can choose to keep this file from being checked during future scans.


Click Done to exit the Problems Found dialog box. You see the Scan Results dialog box that summarizes this scan, including what was scanned, what was cleaned (resolved), and what was left unresolved. From the Scan Results dialog box, you can click Close to conclude this scan.


Click Quarantine to display the Quarantine dialog box where you can isolate the infected file (prevent it from being accessed or run). From the Quarantine dialog box, you can also submit the file for further analysis by the Symantec Security Response experts.


Click Info to display the Virus Information dialog box, which shows more information about the virus. This button is dimmed if no infected files were found.


Click Print to display the Print dialog box, where you can print to a printer or to a file.


Click Filter to display the Activity Log Filter dialog box, where you can choose to display one or more specific types of Norton AntiVirus events.


Click Clear to display the Clear Activity Log dialog box, where you can delete all entries in the Activity Log.


Click Close to exit the Activity Log.


Click the Display combo box to display a list of virus types. Click one of the choices to filter the Virus List so that you can view one of the following categories of viruses: all, common, program, boot, stealth, polymorphic, multipartite, Windows, macro, and malicious programs.


The Virus List includes the names of all the viruses that Norton AntiVirus can detect and, in most cases, eliminate. Norton AntiVirus uses virus definitions to find and get rid of viruses. Since new viruses are being created all the time, you need to update the Virus List by adding new virus definitions provided by Symantec regularly. Click LiveUpdate in the Norton AntiVirus main window to automatically acquire new virus definitions and update the Virus List.

To search for a virus by name, click inside the Virus List and begin by entering the first letter to display the Smart Search text box, where you can continue entering the virus name. The text box appears at the bottom of the Virus List.


Click Info to display the Virus Information dialog box, where you can view detailed information about the selected virus.


Click Print to display the Print dialog box, where you can print to a printer or to a file.


Comments describes what the virus does to your files or boot records.


Click Exclude to exclude the file from further checks. Be careful! Excluding a file reduces your level of protection.


Click Repair to have Norton AntiVirus restore the file to its original state.


Click Continue to continue without taking any action.


Click Delete to permanently remove this file from your disk. After you have deleted the file, you should replace it with a clean (uninfected) copy.

Note: Files deleted by Norton AntiVirus cannot be recovered. If you do not have an original or backup copy of the file, you need to acquire one from the software manufacturer.


Click Stop to stop the scan without taking any further action.


Click Include Subfolders to include all subfolders in the selected folder.


From the Repair File dialog box you can remove a virus from an infected file and/or return the identified file to its original state. Click Repair or Repair All to have Norton AntiVirus repair one or all of the files identified during the scan.


Click Repair to have Norton AntiVirus restore the file or boot record to an uninfected state.


Click Repair All to have Norton AntiVirus repair all the infected files found during the scan.


From the Delete File dialog box, click Delete or Delete All to have Norton AntiVirus delete one or all of the infected files found during the scan. After you have deleted a file, you need to replace it with a clean (uninfected) copy.

Note: Files deleted by Norton AntiVirus cannot be recovered. If you do not have an uninfected original or backup copy of a deleted file, you need to acquire one from the software manufacturer.


Click Delete to have Norton AntiVirus delete this file. Files deleted by Norton AntiVirus cannot be recovered. After you have deleted a file, you need to replace it with an uninfected copy.


Click Delete All to have Norton AntiVirus delete all the infected files found during the scan. After you have deleted the files, you need to replace them with clean (uninfected) copies. If you do not have uninfected original or backup copies of the files, you need to acquire them from the software manufacturer.


Click any of the items listed to specify which events you want to be displayed in the Activity Log.


Displays events occurring on a specific date or occurring before, after, or in between specified dates. Click an option in the Dated drop-down list box, then enter the date or dates to define the scope.


Click an option in the Dated drop-down list box, then enter the date or dates to define the scope.


Click an option in the Dated drop-down list box, then enter the date or dates to define the scope.


From the Exclude File dialog box you can exclude this file from future checks for known viruses. You can choose to do this for files that can change frequently due to configuration.


Click Exclude to exclude this item from future checks for known viruses.

Note: The item is added to the list of excluded files displayed on the Exclusions tab.


The Comments describe what the virus does to your files or boot records.


Summary: Reports if infected files or boot records were found.

Items Scanned: Lists the drives, directories, or files that were scanned.

File Type: Lists the types of files that were scanned.

Other Settings: Reports on other settings, such as whether compressed files were included in the scan.

Scan Time: Reports the duration of the scan.

Scanned: Lists what was scanned.

Infected: Lists what items, if any, were infected.

Cleaned: Lists whether infected items were cleaned.


The Problems Found dialog box summarizes the current scan. The Status column indicates whether or not an infected file was repaired, deleted, or remains infected.

If the file remains infected, you should try to repair it.

If it cannot be repaired, you should do one of the following:

Delete the file and replace it with a clean copy.

Quarantine the file to prevent it from being accessed or run.

If you do not have a copy of the file, you should acquire one. Leaving the file on your system without repairing or deleting it can cause other files to become infected.


Click Close to exit the Virus List without saving any changes to the settings.


Use the Activity Log to view a record of Norton AntiVirus activities. You can specify which types of activities to view at this time by clicking Filter. If you want to permanently change the kinds of events that Norton AntiVirus records, go to the Activity Log tab in the Options dialog box.


Returns the file to its original, uninfected state.


Aborts the download. You are not able to save the file to your local hard disk drive. You need to download the file from a different site.


Continues the download and notifies you each time a new virus is found. You can select Info to find out about the virus.

Use this option cautiously. If you save this file to your hard disk drive, you are saving an infected file that you must repair before you can execute or distribute it.


Continues the download but also continues scanning the compressed file.

The safest option would be to Abort the download. However, this option continues to notify you each time another virus is identified, telling you whether the compressed file contains one or many infected files. Each time a virus is detected, you can select Info and read about the characteristics of the virus. With all of this information, you can choose to continue to Ignore the warning or to Abort the download at any time during the scan.


Continues the download, but discontinues the scan.

Use this option cautiously. You have no information about how many or what types of viruses may be found in other files inside this compressed file. You should not execute or distribute this compressed file until you have cleaned up all the infected files it contains.


Click to quarantine the selected file.


Click to quarantine all files.


Click Delete to confirm that you want to delete all files.


Click to confirm that you do not want to delete all files.


This dialog box indicates that you have no disk in the drive you are attempting to scan.


Click Retry to retry the scan after inserting a floppy disk into the drive. Or, if you are attempting to scan a hard disk drive, resolve the problem that is causing you to be denied access to the drive.


Click Continue to continue the scan.


Click Skip to skip this drive.


No help is provided for this unspecified portion of the dialog box. Move the cursor over a specific control and click the right mouse button again.


Click Inoculate to inoculate the item.


Click Inoculate to inoculate the item.


Click Continue to continue without taking any action.


Click Inoculate to record a "fingerprint" of the boot record that helps Norton AntiVirus detect any future changes to the boot record that might indicate the presence of an unknown virus.


Click Inoculate to inoculate the selected item only.


Click Inoculate All to inoculate all uninoculated items found during this scan.


The System Integrity dialog box notifies you about changes in system files and boot records. Your options are:

Repair: Repairs a boot record and returns the boot record to its original state.

Note: You should choose this option with caution since repairing after upgrading an operating system (for example, from Windows 95 to Windows 98) can cause system problems.

Inoculate: Reinoculates a boot record. (Choose this option only if you expected the reported change. Reinoculating means you are recording the "fingerprint" of the boot record as it is now.)

Note: You should choose Inoculation when you have upgraded an operating system (for example from Windows 95 to Windows 98).

Continue: Continues the scan without responding to the change.

Stop: Stops the scan and returns you to the Norton AntiVirus main window.


Click Continue to continue the scan without responding to the alert.


Click Info to display information about the virus.


Click Repair to restore the boot record to match its "fingerprint" taken when you first inoculated the item.


Click Inoculate to reinoculate the boot record.


Designates that the specified item is to be uninoculated when you click OK.


Specifies what item is to be inoculated or uninoculated.


Click Stop to stop the operation without taking any action.


Click Continue to continue without taking any action.


Click Stop to stop the operation without taking any action.


Allows you to continue the current operation. No change is made to the inoculation data.


Sometimes Norton AntiVirus detects an unknown virus that can’t be eliminated with the current set of virus definitions. Or, you have a file that you think is infected that is not being detected. From the Norton AntiVirus Quarantine, a file can be sent over the Internet directly to the Symantec Security Response experts for analysis. You must have an Internet connection to submit a sample and an email address to receive a reply. You are notified by email with the results of the analysis within seven days.


Scanned: Lists whether memory, master boot record, boot records, or files were scanned.

Infected: Lists what items, if any, were infected.

Repaired, Quarantined or Deleted: Indicates how many items, if any, were repaired, quarantined or deleted.


Excludes the item from monitoring of attempts to perform a low-level format of your hard disk, which obliterates all information on the disk.


Excludes the item from monitoring of attempts to write to the boot records on your hard disk. This action is performed legitimately by very few programs.


Excludes the item from monitoring of attempts to write to the boot record on a floppy disk. This action is performed legitimately by very few programs.


Excludes the item from monitoring of attempts to write to a program file. Some programs save configuration information within themselves rather than in a separate file.


Excludes the item from monitoring of attempts to change a read-only file so that it can be written to. This option applies specifically to operations executed by DOS applications.


Check so that the master boot record and boot records on your hard disk receive inoculation protection.


Lists all the predefined and user defined scans. Double-click one to run it.


Click to run the scan selected in the Scans list box above.


Click to run the Scan Wizard to define a scan with particular parameters.


Drop-down list of commands to edit, delete, remove predefined scans and to change what is displayed in the Scans list box.


Lists information about the status of virus protection on your computer. Select an item and click Details to get more information.


Click to display more information about the item selected in the Status list box.


Lists reporting features. Double-click an item to open.


Click to open the report selected in the Reports list.


List of events scheduled to run automatically.


Click to run the Scheduling Wizard and define a new event which will run automatically.


Drop-down list of commands to edit or delete scheduled events.


Click to display more information about the event selected in the Scheduled Events list box.


Click Close to exit the Virus List.


Click Find to enter the name of a virus you want to locate.


Click Find Next to find the next virus that matches the name entered in the Find a virus dialog box.


Lists information about the status of email and Web virus protection on your computer. Select an item and click Details to get more information.


Remove viruses from downloaded files
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Customize settings for maximum protection
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Edit exclusions
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Delete an exclusion
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Use the Network Browser
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Quarantine an item
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Get information about a quarantined item
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Submit a quarantined file to SARC
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Delete a file from Quarantine
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Open Quarantine
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Schedule LiveUpdates using the Microsoft Scheduled Task Wizard
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


 Auto-Protect Actions

When Auto-Protect detects a virus, it attempts to repair the infected file by default and automatically deletes worms and trojans. On computers running the Windows 2000 or XP operating system, if an infected file cannot be repaired, Auto-Protect does not allow you to access the file. To handle any infected files that can’t be repaired by Auto-Protect, scan your entire computer for viruses, and then scan any infected files that are found.

On computers running the Windows 98 or Me operating system, if an infected file cannot be repaired, the Alert dialog box gives you the following options:

Repair the infected file: Eliminates the virus and repairs the infected item. When a virus is found, Repair is always the best choice. If the infection is a trojan or worm that can’t be repaired, it is automatically deleted.

Quarantine the infected file: Isolates the virus-infected file, but does not remove the virus. Select Quarantine if you suspect the infection is caused by an unknown virus and you want to submit the virus to the Symantec Security Response experts for analysis.

Delete the infected file: Erases both the virus and the infected file. Select Delete if Repair is not successful. Replace the deleted file from the original program file or backup copy. If the virus is detected again, your original copy is infected. If the infection is a trojan or worm that can’t be repaired, it is automatically deleted.

Do not open the file, but leave the problem alone: Stops the current operation to prevent you from using an infected file. This action does not solve the problem. You will receive an alert the next time you perform the same activity.

Ignore the problem and do not scan this file in the future: Adds the file suspected of containing a virus to the Exclusions list. When you add a file to the Exclusions list, the file will be excluded from any future virus scans, unless you remove it from the list. Select this option only if you know the file does not contain a virus.

Ignore the problem and continue with the infected file: Continues the current operation. Select this action only if you are sure a virus is not at work. You will receive an alert again. If you are not sure what to do, select Do not open the file, but leave the problem alone.

After dealing with an infected file, you should scan your entire computer for viruses to detect any other infections.


To use command-line switches
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Tasks you can perform with Norton AntiVirus
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


To receive LiveUpdate notification by email
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


 Notes on Scanning Network Drives

Because you do not always have the same access privileges to a network drive as you have to a local drive, there are some restrictions when scanning network drives with Norton AntiVirus. Scanning network drives is more time consuming than scanning local drives. Other users may be creating, deleting, or moving files on a drive while Norton AntiVirus is scanning.

Drive access privileges	Operations you can perform
None	None
Read-Only	Scan, but not repair, quarantine, delete, or inoculate
Read-Write	Scan, repair, delete, and inoculate


To auto-protect floppies
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Enable inoculation protection
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Scan a quarantined item with updated virus definitions
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Specify allowable Quarantine actions
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Specify a Quarantine options password
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


About online tutorials
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


View an online tutorial
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


About the online knowledge base
 Online knowledge base

Symantec has an extensive knowledge base of support information available at http://www.symantec.com/techsupp/ to help you use Norton AntiVirus.


 Browser not found

Norton AntiVirus could not find a default Web browser on your computer. You must have a Web browser installed to view Websites. If one is installed, start it manually and visit the Website mentioned in the help topic.


 Script Blocking Alert Actions

The Norton AntiVirus Script Blocking feature has detected virus-like activity in a script file on your computer. Because the Script Blocking options are set to ask you what to do when a malicious script is found, the alert is prompting you to select one of the options in the Action list. You can change the Script Blocking options to disable the feature or have Script Blocking stop the script without asking you what to do.

Stop this script (recommended):  Prevents the script from running. Choose this if you do not trust the script source or the current script activity.

Allow this activity once:  Lets the potentially dangerous activity within the script run once. You might spread the problem to other files or other computers if you choose this action.

Allow the entire script once: Lets the entire script run once. Choose this option if you trust all the activities in the script.

Quarantine this script: Isolates the file in the Quarantine folder. This prevents the problem from spreading.

Authorize this script: Lets the script run with no further Script Blocking alerts. Choose this option if you know and trust the script’s source.

More information from the Symantec Knowledge Base website


Jump to web site

Jumps to http://www.symantec.com/techsupp/subscribe/

This topic never appears. It jumps to a web site and then executes the Back macro to return to the topic from which it was called.


 Browser not found

We could not find a default Web browser on your computer. You must have a Web browser installed to view Web sites. If one is installed, start it manually to visit the Web site mentioned in the help topic.


To set scanning of Microsoft Office 2000 and Office XP files
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


To uninstall Norton AntiVirus
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


 To register Norton AntiVirus with Symantec

After installing Norton AntiVirus, the Information Wizard enables you to register your copy of Norton AntiVirus using the Internet or by mail.

If you choose not to register the software using the Information Wizard or if registration fails for some reason, you can register on the Symantec Website at www.symantec.com. Go to the Products page for the registration link. You will need your Norton AntiVirus product serial number.

You can also register by selecting the Product Registration option from the Norton AntiVirus main window Help menu.

When you register, you will be issued a customer ID number. This ID number is required for contacting Symantec Customer Service. To see your ID number, in the Norton AntiVirus main window, click Help>About Norton AntiVirus.


What to do if you think your computer has a virus
 No online help available

There is no online help available for this feature. See the User’s Guide for more information.


Checks for boot viruses in the master boot record on your hard disk.


Checks for viruses resident in your computer's memory before any files are scanned. If a virus is in memory while you are scanning, every file scanned can become infected.


Checks for boot viruses in the boot records on your hard disk and on any floppy disks that you scan.


Scans all files on your disk, including files that are less likely to contain viruses. Check this option for maximum protection.


Scans files with the extensions contained in the Program File Extensions List. These are the files most likely to become infected, including .doc, .dot and .xls files that can contain macro viruses.


Click to display the Program File Extensions List where you can view, add, or delete program file extensions.


Click to display the Customize Response dialog box where you can differentiate between how Norton AntiVirus responds to file, boot record, and macro viruses.


Allows you to repair the file or boot record.


Allows you to delete the infected file.


Allows you to exclude the file from being checked for known viruses. Use sparingly because you are reducing your protection!


Allows you to quarantine a file, which means that the file cannot be accessed or run. Also, you can submit the file to the Symantec Security Response experts for further analysis.


Click Advanced to display the Scanner Advanced Settings dialog box, which contains more options, including network scanning and drive preselection.


Enables the Stop button in the Scan Progress dialog box, allowing you to stop a scan in progress.


All floppy disk drives and other removable media are automatically selected to be scanned when you initiate a scan.


All hard disk drives are automatically selected to be scanned when you initiate a scan.


Click Default to reset the extensions to the original list installed with Norton AntiVirus.


Click New to display a dialog box, where you can add a new extension (you'll be asked to enter the extension's letters).


Click Remove to delete the selected extension.


Scans a program file each time you run it.


Scans files whenever they are opened, such as when you copy a file. Also scans files when they are moved.


Scans files when they are created on your drive by an installation program or by some other means (such as downloading a file).


Scans all files that you access. This includes files less likely to contain viruses. Check this option for maximum protection.


Scans files with the extensions contained in the Program File Extensions List. These are the files most likely to be infected, including .doc, .dot, and .xls files that may contain macro viruses.


Click to display the Program File Extensions List, where you can view, add, or delete file extensions.


Choose an option to specify how to respond when a virus is found. Choose Ask Me What To Do to have the most control over what happens to an infected file.


Choose an option to specify how to respond when a virus is found. Choose Ask Me What To Do to have the most control over what happens to an infected file.


Allows you to repair the file or boot record.


Allows you to delete the file.


Allows you to continue accessing the file. If you select the Continue button when a virus is found, you can activate the virus.


Allows you to stop accessing the file. The virus is not activated, but the file is still infected.


Allows you to exclude the file from being checked for known viruses. (Use sparingly because this reduces your protection against viruses!)


Check to allow the Norton AntiVirus Auto-Protect icon to be shown on the task bar.


Check to allow the Norton AntiVirus Auto-Protect feature to be disabled.


Click to display the Auto-Protect Advanced Settings dialog box.


All information on the disk is erased and cannot be recovered. This type of format is generally performed by the software manufacturer. If this activity is detected, it almost certainly indicates an unknown virus at work.


Very few programs write to hard disk boot records. Unless you are specifically using a program that writes to the hard disk boot records, such as FORMAT, this activity probably indicates a virus.


Only a few programs (such as the operating system FORMAT or SYS commands) write to floppy disk boot records.


Some programs save configuration information within themselves. Although this activity often happens legitimately, it could indicate an unknown virus at work.


Many DOS programs change a file's read-only attribute. Although this activity often happens legitimately, it could indicate an unknown virus at work.


Checks for boot viruses on each floppy disk you access (such as when you list a folder, copy a file, write to a file, or run a file).


Checks a floppy disk in drive A: for boot viruses when you shut down your computer.


Checks a floppy disk in drive B: for boot viruses when you shut down your computer. Check this option if you have a system that can boot from a disk in the B: drive.


Scans for any viruses resident in your computer's memory. Viruses in memory can spread to other files that you access.


Scans for boot viruses in the master boot record.


Scans for boot viruses in the boot records on your hard disk.


Scans the operating files that your computer uses to start up and run Windows.


Choose None if you don’t want a bypass key combination.


Choose if you want to press the Shift key to bypass a scan at startup.


Choose if you want to press the Alt key to bypass a scan at startup.


Choose if you want to press the Ctrl key to bypass a scan at startup.


Loads Auto-Protect at startup. We highly recommend checking this so that Auto-Protect loads as soon as your computer starts up, which helps ensure maximum protection.


Check to add a message with instructions or special warnings to all alerts that Norton AntiVirus displays.


Enter a message with instructions or special warnings to appear in all alerts that Norton AntiVirus displays.


Check if you want Norton AntiVirus to sound a tone when it alerts you of a virus.


Check to specify how long notification dialog boxes stay on your screen, and then enter a number of seconds (between 1 and 99) in the Seconds combo box.


Choose the number of seconds (between 1 and 99) the alert should stay on the screen.


Records known virus detections (viruses identified in the Virus List).


Records detections of boot records that have changed or been inoculated.


Records virus-like activity detections (activities that many viruses perform when spreading or damaging data, such as an attempt to format your hard disk).


Records the date and ending time for scans that you initiate and for scheduled scans.


Records each update of the Virus List. The updates occur when you update the virus definitions files that Norton AntiVirus uses to detect viruses. You can update the files by clicking LiveUpdate in the Norton AntiVirus main window. Automatic LiveUpdate also performs updates automatically.


Records quarantined items.


Click to limit the size of the Activity Log file, then enter the desired size in the kilobytes combo box. When the specified file size is reached, each new entry added to the Activity Log causes deletion of the oldest entry or entries.


You can set a limit for the log file size. When the specified file size is reached, each new entry added to the Activity Log causes deletion of the oldest entry or entries.


Choose the maximum size for the Activity Log file.


Enter the pathname for the Activity Log file or use the browse button to choose an Activity Log filename from a list of files on your computer.


Click New to display a dialog box, where you can add a new exclusion.


Click Edit to display a dialog box, where you can edit an exclusion.


Click Remove to delete an exclusion.


Enter the pathname for a file or group of files to exclude, or use the browse button to select a single file from a list.


Excludes the item from checks for known viruses.


Check to backup the file in Quarantine before attempting to repair. Quarantined files cannot be run or accessed while in Quarantine.


Check to turn on password protection.


Check to password-protect all listed features.


Check to password-protect only the items you select in the list box.


Type a password in the New Password text box; then type it again in the Confirm Password text box.


Type your existing password in the Old Password text box.


Type a password in the New Password text box; then type it again in the Confirm Password text box.


These are the features you can protect with a password.


Displays the Set Password dialog box.


You can choose to password protect all Norton AntiVirus features or to customize which features are password protected. You must type in your password before you can access either feature.


Click to enable Bloodhound heuristic technology, which dramatically increases your protection against new and unknown viruses.


Drag the pointer to increase Bloodhound's sensitivity in detecting new and unknown viruses.


These options let you specify different actions for file, macro, and boot virus detections.


Choose the action you want Norton AntiVirus to perform when a virus is found in a file.


Choose the action you want Norton AntiVirus to perform when a virus is found in a document or template file.


Choose the action you want Norton AntiVirus to perform when a virus is found in a boot record.


Click to display a dialog box where you can modify the settings used by Bloodhound heuristics, which detect new and unknown viruses.


Select this check box to send alerts to Norton AntiVirus for NetWare, if the Norton AntiVirus NLM (NetWare Loadable Module) is present on your network.


Specify which NetWare Server to alert, or select All NetWare Servers to send an alert to all servers listed.


Choose a target from the browser or type a target name in the Target text box below.


Check to have boot records automatically inoculated.


Choose how to respond when your are notified that a boot record's inoculation data has changed. Ask Me What To Do gives you the most control.


Choose an option to choose how to respond to an inoculation issue. Choose Ask Me What To Do to have the most control over what happens to the boot record.


Allows you to repair a boot record with an inoculation change, returning the item to its state when it was last inoculated.


Allows you to inoculate or reinoculate a changed boot record.


Allows you to stop the current operation (scanning or accessing a file). No change is made to the inoculation data.


Enter a folder path for the inoculation data. The path must begin with a backslash. The preset path is \NCDTREE.


Records unknown virus detections (viruses not yet identified in the Virus List).


Click the activities that you wish to exclude for the specified item.


Norton AntiVirus uses the entries in the Exclusion List in all scans it performs. An exclusion is a condition or virus-like activity that would normally be detected, but you have told Norton AntiVirus not to check for it in a particular file. Excluding files doesn't mean "don't find viruses" (unless you specifically select that option); rather, it means let some activity proceed because you know a virus did not cause it.


Records/displays time and dates of denied access events.


Displays the list of Option pages in an outline format. Click an entry to display its options. Click the + (plus sign) to expand an entry.


Drop-down command list allows you to reset options to their defaults for the displayed page of options or for all options.


Check to have system files scanned when your computer starts up or is rebooted.


Click to have the Norton AntiVirus logo displayed whenever you start the Norton AntiVirus application.


Click to have Norton AntiVirus notify you when your virus definitions are more than two weeks old.


Check to turn on background checking of email attachments. After checking this option, select your email client from the list below.


Displays a list of recognized email client applications.


Choose an option to specify how to respond when a virus is found in an email attachment. Choose Ask Me What To Do to have the most control over what happens to an infected attachment.


Check to temporarily disable email protection. When you uncheck this option to re-enable email protection your settings will be restored.


Check to run the scheduler when your computer starts up. The scheduler must be running for scheduled events to occur.


Check to display a scheduler icon in the notification area at the far end of the Windows task bar.


Check to automatically run missed events the next time your computer starts.


Check to display a confirmation dialog when you exit the scheduler. This helps to prevent shutting down the scheduler accidentally.


Check to have the Norton AntiVirus logo displayed to remind you that email scanning is active.


Check to enable timeout protection so Norton AntiVirus can scan large email attachments without causing your email client to time out.


Check to display the Norton AntiVirus Email Protection icon when email protection is active. It will appear in the notification area at the far end of the task bar.


Check to enable the Microsoft Office 2000 virus protection plugin. This protects you from macro viruses in Microsoft Office 2000 and XP documents. If a virus is found, Norton AntiVirus will respond according to the option set in the Manual Scan options "How to respond when a virus is found."


Check to scan the files contained in compressed files. Norton AntiVirus scans and repairs infections inside of many types of compressed files.


Check to have Norton AntiVirus scan Microsoft Office 2000 or Office XP files when they are opened. If a virus is found, Norton AntiVirus responds according to the option set in the Manual Scan options "How to respond when a virus is found."


Check to have Norton AntiVirus scan files you download with Microsoft Internet Explorer.


Check to have Norton AntiVirus scan files you download with Netscape Navigator and Netscape Communicator.


Check to have Norton AntiVirus automatically check for updates when you connect to the Internet.


Downloads updates to your virus definitions files and the Norton AntiVirus program in the background without disturbing your work.


Notifies you when updates are available so you can choose to download or not.


SmartScan scans files that contain embedded OLE objects that could contain malicious code.


Enables scanning of manually configured email accounts.


Click to enable script blocking technology, which increases your protection against the latest types of threats. This lets Norton AntiVirus intercept scripts containing potentially malicious code. See help for more information on script blocking technology.


When this option is selected, Norton AntiVirus displays an alert dialog box so you can view the potential threat and take further action.


Block the execution of all scripts when Norton AntiVirus detects a potential threat within the script code.


When you click this button, you can change options for the Recycle Bin and the Norton Protected Recycle Bin. Your choices include whether to use Norton Protected Recycle Bin, what files to exclude from Norton Protected Recycle Bin, and how long to keep files protected after they are deleted.


When you click this button, you can change options for the Recycle Bin and the Norton Protected Recycle Bin. Your choices include whether to use Norton Protected Recycle Bin, what files to exclude from Norton Protected Recycle Bin, and how long to keep files protected after they are deleted.


 About Norton AntiVirus Quarantine

If Norton AntiVirus detects that a file is infected with a virus, worm, or Trojan, it prompts you to put the file in Quarantine or it quarantines it automatically. Files in Quarantine are isolated from the rest of your computer, so they cannot spread or reinfect your computer.

More Info

More information from the Symantec Knowledge base


Check to ensure that your CD is in the drive and the drive can be read.


 Command line switches

NAVW32.EXE is the Windows interface and scanner. It can be run with command-line switches, typically from the Start menu Run command, to override configuration settings.

NAVW32 [[pathname] options]

pathname	Any drive, folder, file, or combination of these is scanned. If you want to scan a combination of items, use a space to separate the items. You can use wildcards when specifying pathnames for a group of files (for example, NAVW32 A:C:\MYDIR\*.EXE).

/A	All drives, except drives A: and B:, are scanned.

/L	All local drives, except drives A: and B:, are scanned.

/S[+|-]	All subfolders specified in the pathname are also scanned.

/M[+|-]	Enables (+) or disables (-) scanning of memory (for example, NAVW32 C:/M or NAVW32 D:/M-). (Available on Windows 98 and Windows Me only.)

/MEM	Only memory is scanned. (Available on Windows 98 and Windows Me only.)

/B[+|-]	Enables (+) or disables (-) scanning of boot records (for example, NAVW32 A: /B or NAVW32 B: /B-).

/BOOT	Master boot records and boot records of all hard drives, plus any specified removable drives, are scanned.

/NORESULTS	No scan results are reported on screen.

/HEUR:[0|1|2|3]	Set Bloodhound™ sensitivity (0 disables).