GENWILD.TXT
Last updated: July 1, 1997
==========================================================================

As of July 1997, the virus definitions for Norton AntiVirus will no longer
fit on a single diskette.  This size increase only affects users
attempting to create or update Rescue disks.  Even then, this problem
occurs under two circumstances:

1. You have a virus type that makes your hard drive invisible when you
   boot "clean" to eliminate the infection.

2. You need to make a portable scanning disk that you can use on machines
   that do not have Norton AntiVirus installed on them.

This document explains how to:

· Use Norton AntiVirus Rescue Disk 2 to scan and repair using the new
  definitions on the hard drive.

·  Use GENWILD.EXE to create a single "definitions" disk for use when you
   cannot access the new definitions on the hard drive.

This document explains how this can be accomplished without compromising
your computer's safety and security through the use of a "wild list" as
compared to a "zoo list."  For more detailed instructions on using Norton
AntiVirus to repair virus infections, please request document #4211 from
the Symantec automated Fax On Demand service at (541) 984-2490.

==========================================================================
Running Norton AntiVirus From Disk 2 Using The New Definitions On The Hard
Drive
==========================================================================
1.  Choose Shut Down from the Start menu and choose Shut down the computer
    if you are using Windows 95.
2.  Turn off the power.
3.  Insert Rescue Disk 1 into the A: drive.
4.  Power up the computer.
5.  Remove the boot disk and insert Rescue Disk 2 into the A: drive.
    If you are using Windows 3.x, type NAV /CFG:C:\NAV and press Enter.
    If you are using Windows 95, type NAVBOOT /CFG:C:\Progra~1\Norton~1
    and press Enter.

Norton AntiVirus will scan your system using the virus definitions on the
hard drive.

==========================================================================
Using GENWILD.EXE to Create a Single Definitions Disk
==========================================================================
Requirements: Three blank 1.44 MB floppy disks, an uninfected computer and
              GENWILD.EXE downloaded from the Symantec Web or ftp site.

1.  Run the Rescue Disk program.
    If you are using Windows 3.x, exit to DOS and run C:\NAV\RESCUE
    If you are using Windows 95, select Programs, Norton AntiVirus, Rescue
    Disk from  the Start menu.
2.  Create Disks 1, 2 and 3.  When Rescue notifies you that Disk 3 is out
    of space, cancel out of the Rescue program.
    If you are using NU95 version 2.0 to create the Rescue disks, you will
    end up with two Virus Definitions disks.  Please disregard the second
    virus definitions disk.
3.  Remove Disk 3 and label it "WildList Definitions".
4.  Copy GENWILD.EXE to the Norton AntiVirus directory.
5.  Insert Disk 3, "WildList Definitions," into the floppy drive.
    If you are using Windows 95, select Programs, MS-DOS Prompt from the
    Start menu.
6.  At the DOS prompt, type DEL A:\VIRSCAN.DAT and press Enter.
7.  Change to the Norton AntiVirus directory.
8.  Type GENWILD VIRSCAN.DAT A:\VIRSCAN.DAT and press Enter.
    GENWILD should report "success!"
9.  Type DIR A: /OGNE.  Verify that the following files are on Disk 3:
    NAVEX.EXP
    EXCLUDE.DAT
    EXCLUDEL.DAT
    INSCANB.DAT
    INSCANF.DAT
    INSCANM.DAT
    INTSRB.DAT
    INTSRF.DAT
    NAVOPTS.DAT
    VIRSCAN.DAT
    VIRSCAN2.DAT
    VIRSPEC.TXT and TECHNOTE.TXT (optional)
10. Copy any missing files from the Norton AntiVirus directory to Disk 3.
11. Write-protect Disk 3.

NOTE: DO NOT copy over the VIRSCAN.DAT file created in Step 9.

==========================================================================
Running the scan using "WildList Definitions" On a Single Floppy
==========================================================================
1.  Choose Shut Down from the Start Menu and choose Shut Down the computer
    if using Windows 95.
2.  Turn off the power.  You must completely shut the computer off to
    fully clear memory.
3.  Place Rescue Disk 1 into drive A:
4.  Power up the computer
5.  Remove Rescue Disk 1 and insert Rescue Disk 2.
    If you are using Windows 3.x, type NAV /CFG and press Enter.
    If you are using Windows 95, type NAVBOOT /CFG and press Enter.
6.  When you see the message "NAVBOOT is unable locate its required
    settings files in the folder specified" press Enter, remove Rescue
    Disk 2, insert Disk 3 and press Enter.

Norton AntiVirus will scan your system using the WildList Definitions on
the floppy.

==========================================================================
The Difference Between Viruses Found in the Wild and "Zoo" viruses
==========================================================================
While there are many different kinds of viruses, there are only two places
where they can exist: in the wild or in a "zoo." For a virus to be
considered in the wild, it must actually be causing infections under
normal conditions.  These are the viruses that you stand the greatest
chance of catching.  A complete list of the Joe Wells' Wild Lists can be
found on the SARC web site at:

     http://www.symantec.com/avcenter/wild/wl.html

The WildList is the industry standard listing of infectious viruses.  The
May 1997 WildList reported 249 viruses in the wild, and had an additional
417 on the supplemental list.

Viruses that are not in the wild are considered to be "zoo" viruses.  Many
of these viruses exist only in a laboratory.  Others have become virtually
extinct as a result of poor programming, new technologies or the inability
to reproduce themselves.  Most of these viruses will never infect a PC.
However, there is always a chance that a virus may escape a laboratory
setting and become wild.  It is for this reason that Norton AntiVirus is
currently scanning for 12,000 viruses.