
Contents

  1 Introduction

  2 Basic Features

  3 Getting Started

  4 Commands
    Scan Menu
    Tools Menu
    Options Menu
    Help Menu

  5 How to ....
    Start Ultimate Killer
    Scan for a virus
    Clean a virus
    Create a rescue diskette
    Restore from a rescue diskette
    Use command line options
    Generate a report
    Catching unknown viruses

  6 Cleaning few special viruses

  7 Usage notes for Memory Resident Module (KILLERM)

1. Introduction

  Thanks for using Ultimate Killer Virus Vaccine Version 1.0.

  Ultimate Killer Virus Vaccine is an anti virus tool kit that removes
  all the viruses prevalent in World today and can defend against the
  thousands that can attack your systems tomorrow. It also takes care of
  macro viruses.

  It uses a menu driven interface to simplify the usage. It also employs
  powerful command line options for the power users.

  Contents of the package
  -----------------------
  KILLER.EXE       -      Scanner cum cleaner
  KILLER.DEF       -      Signature Definition Database
  KILLERM.EXE      -      Memory Resident Module
  HELP.TXT         -      Help File
  INSTALL.EXE      -      Install Program
  LICENSE.TXT      -      License terms
  REGISTER.TXT     -      Registration Form

  System Requirement
  ------------------

  Ultimate Killer Virus Vaccine requires the following:

    IBM PC/PC-XT/PC-AT or 100% compatible computer.
    DOS 3.3 or greater.
    3.5"/5.25" floppy drive supporting 1.44Mb/1.2Mb.
    200 K of free RAM

  Keyboard Help
  -------------

  1. Use cursor movement keys to move across the menu options
  2. To select a option, highlight that option and press ENTER.
    

2. Basic Features

   1. Detects and Removes all currently prevailing viruses including macro
      viruses.

   2. Algorithmic detection of Polymorphic virus families.

   3. Unique Pattern Matching technique to detect variants.

   4. Detects Corrupted/Invalid Files to prevent System Crashes.

   5. Removes viruses without Corrupting files (including Win/Win95).

   6. Inbuild Rescue Module to recover from CMOS,MBR,Boot area Corruption
      or data loss.

   7. Updates available every month.

   8. Update made available even for a single virus (mostly within 24 hours).

   9. Unique low cost.

  10. Intuitive User Interface for ease of use

  11. Virus Naming according to CARO.

  12. Extensive Customer Support.

  13. High speed Scanning engine.


3. Getting Started

  Installing Ultimate Killer
  --------------------------

  1. Boot the system from a virus free write protected DOS diskette.
  2. Insert the original Ultimate Killer Disk in drive A or drive B and
     type following at the command prompt:

     INSTALL <Path>

     Note: Path will be created if it does not exist.

  3. Follow the instruction on the screen.


  Command line syntax
  -------------------

  KILLER [<paths>] [<option>]

  where <path> is where you want to perform the scanning and <option>
  is the specific option you want to use.

  The various options supported are

  /NOMEM            Skips initial memory scan.
  /NOBOOT           Do not scan boot sector/partition table.
  /NOBREAK          Disables ESC key during scan.
  /ALLDRIVES        Scan all drives.
  /NET              Scan all network drives.
  /MULTI            Scan multiple floppies.
  /REPORT=filename  Saves report to a file.
  /NOSOUND          Alarms (sound) are switched off.
  /CLEAN            Automatically cleans a virus.
  /RENAME           Rename the infected file when cure is not provided.
  /DELETE           Delete the infected file when cure is not provided.
  /ALL              Scans for all file(s).
  /HELP             Shows this help screen.
  /NOSUB            Do not scan sub directories.
  /BACKUP           Backup file(s) before cleaning.
  /DIAG             Perform Diagnostics to catch unknown viruses.


4. Commands

  Scan Menu
  ---------

  Scan

  Choose Scan command to scan for viruses. On any infection, you
  will be presented with an action menu.

  Scan & Clean

  Choose Scan & Clean command to scan and clean the viruses without any
  confirmation.

  Dos Shell

  Choose Dos Shell command to temporarily access DOS.

  Exit

  Choose Exit command to end the program.

  Tools Menu
  ----------

  Backup system area

  Choose Backup system area command to make a backup copy of the system
  area of the computer's CMOS information, the Partition Table of Hard
  Disk, and the Boot Sector.

  Restore system area

  Choose Restore system area command to restore the system area of the
  computer's CMOS information, the Partition Table of Hard Disk, and
  the Boot Sector.

  Options Menu
  ------------

  MBR/Bootsector Scan

  Disable this command to skip Partition Table and Bootsector scanning.

  Scan all file(s)

  Enable this command to scan for all the file(s) regardless of their
  extensions.

  Sub-directory Scan

  Disable this command to stop scanning of sub-directories.

  No sound

  Enable this command to stop sound effects.

  Backup file before cleaning

  Enable this command to make a copy of infected file before cleaning it.

  Generate Report

  Enable this to generate a report file.

  Save Options

  Choose this to save the options to a configuration file.

  Help Menu
  ---------

  Program

  Choose this to get help about operating this program

  About

  Choose this command to get information about the program.


5. How to ....

  Start Ultimate Killer
  ---------------------

  1. At command prompt, type CD\KILLER and press ENTER to place yourself
     in KILLER directory.
     Note: This step is optional if you have added KILLER directory to
           the PATH.
  2. Type KILLER and press ENTER. This starts KILLER and displays the menu.

  Scan for a virus
  ----------------

  1. Boot the system from a virus free write protected DOS diskette.
  2. Run Ultimate Killer.
  3. From "Scan" menu, choose the "Scan" option.
  4. Select the drives you want to scan and choose "start" option.
  5. If any virus is found, an action menu will be presented. "Clean"
     cleans that infected file. "Clean All" cleans all the infected files
     found. "Skip" skips that file and "Scan Only" stops asking for user
     confirmation and only reports the infections.

  Clean a virus
  -------------

  1. Boot the system from a virus free write protected DOS diskette.
  2. Run Ultimate Killer.
  3. From "Scan" menu, choose the "Scan" option.
  4. Select the drives you want to scan and choose "start" option.
  5. Any virus found will be clean automatically without any user
     confirmation.

     Note: Also see "Cleaning few special viruses"

  Create a rescue diskette
  ------------------------

  1. Insert a new diskette in drive A.
  2. Type FORMAT A: /S and press ENTER.
  3. This creates a bootable diskette.
  4. Run Ultimate Killer.
  5. From "Tools" menu, choose the "Backup system area" option.
  6. Type the drive where you want to store the rescue information
     and press ENTER.
  7. Write protect your rescue disk, label it "RESCUE DISK" and keep
     it in a safe place.

  Restore from a rescue diskette
  ------------------------------

  1. Boot the system from a virus free write protected DOS diskette.
  2. Insert the rescue diskette in drive A.
  3. Run Ultimate Killer.
  4. From "Tools" menu, choose the "Restore system area" option.
  5. Type the drive where your rescue information is stored and
     press ENTER.
  6. A menu will be presented containing three options. Select
     accordingly and choose "Start" to start the restore process.

  Generate a report
  -----------------

  1. From "Options" menu, choose the "Generate Report" option.
  2. Enter the report filename.

  Catching unknown viruses
  ------------------------

  1. Run Ultimate Killer with /DIAG option.
  2. If any unusual activities are detected in the system, Ultimate
     Killer will create report.
  3. Please send these report file(s) to us for furthur analysis.

6. Cleaning few special viruses

  Cleaning Dir-II.A,Dir-II.W
  --------------------------

  To remove the above mentioned viruses, boot from the infected hard
  disk drive i.e. the virus becomes active and then rename all executables
  to non-executables extensions(both COM and EXE files). The stealth
  routines of the virus will construct back the original file.
  Repeat the above procedure for all drives including infected floppy
  disks if any.
  Then boot from a virus free floppy and rename the files back to their
  original name.
  Now run any disk utility like CHKDSK,SCANDISK,Norton Disk Doctor(NDD)
  etc.

  Cleaning Dir.ByWay
  ------------------

  To remove the above mentioned virus, boot from the infected hard
  disk drive i.e. the virus becomes active and then rename all executables
  to non-executables extension(both COM and EXE files). The stealth
  routines of the virus will construct back the original file.
  Repeat the above procedure for all drives including infected floppy
  disks if any.
  Then boot from a virus free floppy.
  This virus creates HIDDEN and READ ONLY file called chklist .ms .
  So first remove the HIDDEN and READ ONLY attribute of the files using
  the ATTRIB command and then delete all this files using the command
  DEL CHKLIST*.*
  Now rename the files back to their original name.
  Now run any disk utility like CHKDSK,SCANDISK,Norton Disk Doctor(NDD)
  etc.

  Cleaning ExeBug.A
  -----------------

  The ExeBug.A virus disables the drive A in the CMOS SETUP which is
  normally the boot drive. So to remove this virus, enable the drive A in
  CMOS SETUP and boot from a virus free floppy and run Ultimate Killer to
  clean the virus.

7 Usage notes for Memory Resident Module (KILLERM)

  KILLERM is a Memory Resident program that keeps watch on system
  operations. It prevents direct writes to Partition Table,Boot Sectors,
  modification to executable files etc,.

  To Load KILLERM
  Just execute KILLERM and it will load 

  To unlaod KILLERM
  Execute KILLERM /U and it will unload.


  If you have any questions, comments, suggestions, or bug reports, please
  feel free to contact me.

  You can contact me at

  Vimal Jain,
  C/O Navkar Corporation,
  #140,Mint Street,Ist Floor,
  Chennai-600 079.
  Phone: 566376,561185.
  Fax: 566562.
  E-Mail:navkar@md.vsnl.net.in.
