===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions
Symantec AntiVirus Research Center
January 17, 1996
===============================================================================
                           Word Macro Virus Updates
===============================================================================

    Thank you for downloading the virus definition update for Norton
    AntiVirus version 3.0,  Norton AntiVirus for Windows 95, Norton AntiVirus 
    Scanner for Windows NT and Norton Antivirus for Netware versions 1.0 and 
    2.0.

    This document contains instructions for:

              Updating Norton AntiVirus for Windows 95
              Updating Norton AntiVirus for NetWare 1.0 & 2.0
              Updating Norton AntiVirus 3.0 (DOS / Windows 3.x)
              Updating Norton AntiVirus 3.0 Network Manager
              Updating Notron AntiVirus Scanner for Windows NT

===============================================================================
This update contains the following files:

UPDATE.TXT    This file

JAN96B.TXT    Text file that describes what's new in this update.

VIRSCAN.DAT   This is the main data file used by Norton AntiVirus. This
              file replaces the existing VIRSCAN.DAT in your Norton
              AntiVirus directory.

VIRSCAN.INF   This data file is used by Norton AntiVirus to display
              virus information, such as virus characteristics and
              behavior. This file is not required to detect or repair
              viruses.

VIRSPEC.TXT   Special instructions concerning specific viruses.

NAVEX.DAT     External detect/repair database for DOS NAV

NAVEX.NLM     External detect/repair database for NAV for Netware

NAVEX.VXD     External detect/repair database for NAV for Windows 95

NAVEX16.DLL   External detect/repair database for NAV for Windows 3.x

NAVEX32.DLL   External detect/repair database for NAV for Windows 95/NT

VIRSCANM.DAT  Macintosh virus database used by Norton Antivirus for
              Netware v1.0 & v2.0

VIRSPAA.DAT   Detection Annoying.4060

VIRSPBY.DAT   Repair for Byway

VIRSPCB.DAT   Detection and repair for Crazy Boot

VIRSPDB.DAT   Repair for Da'Boys

VIRSPDH.DAT   Repair for Die Hard

VIRSPEM.DAT   Repair for Emmie.2702, Emmie.2823, Emmie.3097

VIRSPFZ.DAT   Repair for Fairz

VIRSPJA.DAT   Repair for Bad_Head

VIRSPNA.DAT   Detection for Sat_Bug.Natas

VIRSPNQ.DAT   Detection for Neuroquila

VIRSPNR.DAT   Repair for Neuroquila

VIRSPNS.DAT   Detection for Neuroquila

VIRSPPC.DAT   Repair for CPW

VIRSPR0.DAT   Repair for Frankenstein

VIRSPSM.DAT   Detection for SMEG

VIRSPUR.DAT   Repair for Urkel

VIRSPWD.DAT   Detection file for the Word Macro Family of viruses
              (Colors, Concept, DMV, FormatC, and Nuclear).



===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions             (cont)
Symantec AntiVirus Research Center
===============================================================================

To update Norton AntiVirus 3.0 virus definitions:

*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
*                 IMPORTANT NOTICE - Norton Antivirus v3.0                    *
*                                                                             *
*   If your version of Norton AntiVirus 3.0 for Windows and DOS is dated      *
*   before December 1, 1995, you will need to update it using the NAV Macro   *
*   Engine Update in order to protect against Word Macro Viruses. If you      *
*   have not updated your version, download the NAV Macro Engine Update from  *
*   the Symantec BBS, Symantec's FTP and Web site, CompuServe, America        *
*   Online, or Microsoft Network. The file is called UPDATEME.EXE and is      *
*   located where the monthly update files are normally found. Alternately,   *
*   you may call Customer Service at (800) 441-7234 to order a disk set.      *
*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*

   1.  Copy 01NAV96B.ZIP to the location where Norton AntiVirus has been
       installed.  By default, this is the C:\NAV directory.

   2.  Change to the drive and directory where you copied the file to.

   3.  Verify PKUNZIP.EXE can be found somewhere along the PATH.  For
       example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a
       DOS prompt should show your path to look something like the
       following:

           PATH=C:\NAV;C:\WINDOWS;C:\PKWARE

   4.  At the DOS prompt, type:

          PKUNZIP -O 01NAV96B.ZIP

   5.  Scan a drive, directory, or file with Norton AntiVirus 3.0, in
       either DOS or Windows.  Doing this, automatically updates the
       Norton Antivirus TSR.

   6.  Reboot your computer to reload the updated Norton Antivirus
       TSR.


===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions             (cont)
Symantec AntiVirus Research Center
===============================================================================

To update Norton AntiVirus for Windows 95 virus definitions:
*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
*             IMPORTANT NOTICE - Norton Antivirus for Windows 95              *
*                                                                             *
*   If your version of Norton AntiVirus for Windows 95 is dated before        *
*   December 1, 1995, you will need to update it using the NAV Macro Engine   *
*   Update in order to protect against Word Macro Viruses. If you have not    *
*   updated your version, download the NAV Macro Engine Update from the       *
*   Symantec BBS, Symantec's FTP and Web site, CompuServe, America Online,    *
*   or Microsoft Network. The file is called NAV95PCH.EXE and is located      *
*   where the monthly update files are normally found. Alternately, you may   *
*   call Customer Service at (800) 441-7234 to order a disk set.              *
*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*

   1.  Double-click the "My Computer" icon on the desktop. The My
       Computer window opens displaying your available drives.

   2.  Double-click the drive or directory that contains the Norton
       AntiVirus definitions update .ZIP file.

   3.  Copy 01NAV96B.ZIP file to your Norton Antivirus for Windows 95
       folder.  By default, this is the C:\Program Files\Norton
       Antivirus folder.

   4.  Open a DOS box and change to the drive and directory where
       you copied the file to.

   5.  Verify PKUNZIP.EXE can be found somewhere along the PATH.  For
       example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a
       DOS prompt should show your path to look something like the
       following:

           PATH=C:\NAV;C:\WINDOWS;C:\PKWARE

   6.  At the DOS prompt, type:

          PKUNZIP -O 01NAV96B.ZIP

   7.  Exit the DOS box

   8.  Start NAV

   9.  Scan a drive, directory, or file with Norton AntiVirus.
       Doing this, automatically updates the Auto Protect portion of
       Norton Antivirus.

   8.  Restart your computer so that the Auto Protect uses the
       newest virus definitions.

   NOTE: WinZIP users may start the program from within Windows 95, if
   preferred.


===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions             (cont)
Symantec AntiVirus Research Center
===============================================================================

To update Norton AntiVirus for NetWare 1.0 & 2.0 virus definitions:

*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
*            IMPORTANT NOTICE - Norton Antivirus for Netware v1.0             *
*                                                                             *
*   If your Norton AntiVirus for NetWare 1.0 is dated before July 13, 1994    *
*   you will need to update your version. Using an older version of the       *
*   NLM with these virus definitions may cause false alarms with garbled      *
*   virus names. For information on how to receive the update, please         *
*   call Customer Service at (800) 441-7234.                                  *
*                                                                             *
*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*

   1.  Map a drive letter to the volume and directory where Norton
       AntiVirus for NetWare is installed.

   2.  Disable Norton AntiVirus for NetWare, using either Norton
       AntiVirus for NetWare Windows configuration component, or at the
       server console using the function keys.

   3.  Copy 01NAV96B.ZIP to the location mapped in step 2.

   4.  Change to the mapped drive.

   5.  Verify PKUNZIP.EXE can be found somewhere along the PATH.  For
       example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a
       DOS prompt should show your path to look something like the
       following:

           PATH=C:\NAV;C:\WINDOWS;C:\PKWARE

   6.  At the DOS prompt, type:

          PKUNZIP -O 01NAV96B.ZIP


     Enable Norton AntiVirus for NetWare, using either the Norton
     AntiVirus for NetWare Windows configuration component (NAVNLM.EXE),
     or at the server console using the function keys.




===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions             (cont)
Symantec AntiVirus Research Center
===============================================================================

To update Norton AntiVirus Network Manager virus definitions:

 NOTE: The Norton AntiVirus Network Manager maintains a network copy
       of Norton AntiVirus to support distribution. Make sure you have
       access rights that allow read and write operations to the
       NAV directory.

   1.  Map a drive letter to the volume and directory where Norton
       AntiVirus is installed.

   2.  Copy 01NAV96B.ZIP to the location mapped in step 2.

   3.  Change to the mapped drive.

   4.  Verify PKUNZIP.EXE can be found somewhere along the PATH.  For
       example, if PKUNZIP.EXE is located in \PKWARE, type "SET" at a
       DOS prompt should show your path to look something like the
       following:

           PATH=C:\NAV;C:\WINDOWS;C:\PKWARE

   5.  At the DOS prompt, type:

          PKUNZIP -O 01NAV96B.ZIP

   6.  If your version of Norton Antivirus Network Manager is dated on or
       before July 1, 1995, you must modify your .NNS configuration
       file to install/distribute all update files (by default, this
       file is _DEFAULT.NNS)

       a) First locate the [InstallFiles] section in your .NNS file.
          Add the entry:
              VIRSP*.DAT
              NAVEX*.*
          to the list.

       b) Second locate the [DefinitionUpdateFiles] section.  Add
          the entry:
              VIRSP*.DAT
              NAVEX*.*
          to the list.
   
    The new definition files are now in place for network distribution.
   



===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions
(cont) Symantec AntiVirus Research Center
===============================================================================

To update Norton AntiVirus Scanner for NT virus definitions:

   1.  Copy 01NAV96B.ZIP to your Norton AntiVirus folder.
       The default location is C:\WIN32APP\NAVNT

   2.  Verify PKUNZIP.EXE can be found somewhere along the PATH.  For
       example, if PKUNZIP.EXE is located in \PKWARE, typing "SET" at a
       DOS prompt should show your path to look something like the
       following:

           PATH=C:\NAV;C:\WINDOWS;C:\PKWARE

   3.  At the command prompt, type:

          PKUNZIP -O 01NAV96B.ZIP

   4.  After the files are extracted successfully, you may delete
       the compressed file.

   5.  Initiate a scan with Norton AntiVirus to activate the
       new virus definitions.


===============================================================================
UPDATE.TXT - Updating the Norton Antivirus Virus Definitions             (cont)
Symantec AntiVirus Research Center
===============================================================================

Final Notes:

    Please read JAN96B.TXT for a detailed list of the new virus
    definitions in this update and important information about current
    worldwide virus alerts.

    We welcome your comments and suggestions. Please post them wherever
    you download this file.

    Thank you for using SYMANTEC/Peter Norton products.

